Footprinting is the process of accumulating data regarding a specific network environment for the purpose of revealing system vulnerabilities. It is considered to be the first step in hacking. is the process of gathering data or a preliminary inspection of an area of interest Reconnaissance over a short period of time. The objective is to map the target network or collect all possible information about the intended target by probing the target network completely. In this chapter, we will discuss the role of footprinting and reconnaissance in information security. 2.1 Understand the term footprinting Exam Focus: Understand the term footprinting. Objective includes: Recognize the role of search engines in footprinting. Understand the role of financial Websites in footprinting. Understand competitive intelligence and its need. Understand DNS enumeration. Understand Whois. Learn different types of DNS records. Footprinting Footprinting is the process of gathering data regarding a specific computer network. An organization should regularly footprint their network, or risk attackers doing it for them! Footprinting is the first step in information gathering of hackers. They use footprinting to learn about all aspects of their target organization including their remote access capabilities, types of platforms, intranet and extranet presence, security protocols, and so on. Successful hackers use footprinting to create an information database about your company's security weaknesses. If an organization wants to protect their systems from attacks, they must take measures to thwart potential attacks. They must conduct their own footprinting to find ways to intrude into their environment. Going through the process of footprinting can reveal system vulnerabilities and help put in measures and processes to minimize or eliminate their exploitation. Footprinting uses various security techniques such as DNS queries, Network enumeration, Network queries, Operating system identification, Organizational queries, Ping sweeps, Point of contact queries, Port Scanning, and Registrar queries (WHOIS queries) to collect their information. Types of information gathered by footprinting Footprinting collects domain names and associated networks related to a specific organization. It also collects system information, such as user and group names, system banners, routing tables, SNMP information, system architecture, remote system type, system names, and passwords. Other information obtained may include learning the Internet technologies being used; the operating system and hardware being used; platforms used, IP addresses; e-mail addresses and phone numbers; and policies and procedures.
Footprinting is the process of accumulating data regarding a specific network environment for the purpose of revealing system vulnerabilities. It is considered to be the first step in hacking. Reconnaissance is the process of gathering data or a preliminary inspection of an area of interest over a short period of time. The objective is to map the target network or collect all possible information about the intended target by probing the target network completely. In this chapter, we will discuss the role of footprinting and reconnaissance in information security. 2.1 Understand the term footprinting Exam Focus: Understand the term footprinting. Objective includes: Recognize the role of search engines in footprinting. Understand the role of financial Websites in footprinting. Understand competitive intelligence and its need. Understand DNS enumeration. Understand Whois. Learn different types of DNS records. Footprinting Footprinting is the process of gathering data regarding a specific computer network. An organization should regularly footprint their network, or risk attackers doing it for them! Footprinting is the first step in information gathering of hackers. They use footprinting to learn about all aspects of their target organization including their remote access capabilities, types of platforms, intranet and extranet presence, security protocols, and so on. Successful hackers use footprinting to create an information database about your company's security weaknesses. If an organization wants to protect their systems from attacks, they must take measures to thwart potential attacks. They must conduct their own footprinting to find ways to intrude into their environment. Going through the process of footprinting can reveal system vulnerabilities and help put in measures and processes to minimize or eliminate their exploitation. Footprinting uses various security techniques such as DNS queries, Network enumeration, Network queries, Operating system identification, Organizational queries, Ping sweeps, Point of contact queries, Port Scanning, and Registrar queries (WHOIS queries) to collect their information. Types of information gathered by footprinting Footprinting collects domain names and associated networks related to a specific organization. It also collects system information, such as user and group names, system banners, routing tables, SNMP information, system architecture, remote system type, system names, and passwords. Other information obtained may include learning the Internet technologies being used; the operating system and hardware being used; platforms used, IP addresses; e-mail addresses and phone numbers; and policies and procedures.
Footprinting%20and%20Reconnaisance.docx