{"id":419,"date":"2019-09-13T15:36:58","date_gmt":"2019-09-13T13:36:58","guid":{"rendered":"https:\/\/privat.andreas-klingler.de\/itsec\/?p=419"},"modified":"2025-03-17T13:17:45","modified_gmt":"2025-03-17T12:17:45","slug":"general-information-gathering","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=419","title":{"rendered":"Passive enumeration"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">General objectives<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Iden\u00adti\u00adfy <span class=\"caps\">IP<\/span> address\u00ades and Domains and subnets<\/li>\n\n\n\n<li>Iden\u00adti\u00adfy 3rd-Par\u00adty sites and their relationships<\/li>\n\n\n\n<li>Iden\u00adti\u00adfy people<\/li>\n\n\n\n<li>Iden\u00adti\u00adfy technologies<\/li>\n\n\n\n<li>Iden\u00adti\u00adfy con\u00adtent of interest<\/li>\n\n\n\n<li>Iden\u00adti\u00adfy vulnerabilities<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Organizing template<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Orga\u00adni\u00adza\u00adtion\n<ul class=\"wp-block-list\">\n<li>Goals<\/li>\n\n\n\n<li>Merg\u00aders and Acquisitions<\/li>\n\n\n\n<li>Projects and Products<\/li>\n\n\n\n<li>News<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Infra\u00adstruc\u00adture\n<ul class=\"wp-block-list\">\n<li>IPs<\/li>\n\n\n\n<li>Host\u00adnames<\/li>\n\n\n\n<li>Used soft\u00adware<\/li>\n\n\n\n<li>Used hard\u00adware<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Employ\u00adees\n<ul class=\"wp-block-list\">\n<li>User\u00adnames<\/li>\n\n\n\n<li>Emails<\/li>\n\n\n\n<li>Roles<\/li>\n\n\n\n<li>Breached cre\u00adden\u00adtials<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Web ressources<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/hunter.io\/\">Hunter.io<\/a>\n<ul class=\"wp-block-list\">\n<li>Search engine for email address\u00ades for domains.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><a href=\"https:\/\/builtwith.com\/\">build\u00adWith<\/a>\n<ul class=\"wp-block-list\">\n<li>Crawler for detect\u00ading used tech\u00adnolo\u00adgies on a website.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><a href=\"http:\/\/information gathering\">Google <\/a><a href=\"https:\/\/andreas-klingler.de\/infosec\/?p=16\" data-type=\"post\" data-id=\"16\">Hack\u00ading<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/andreas-klingler.de\/infosec\/?p=3862\" data-type=\"post\" data-id=\"3862\">Whois Enu\u00admer\u00ada\u00adtion<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/andreas-klingler.de\/infosec\/?tag=netcraft\" data-type=\"post_tag\" data-id=\"272\">Net\u00adcraft<\/a><\/li>\n\n\n\n<li>Source code \/ repos\u00adi\u00adtor analy\u00adsis (e.g. Github)<\/li>\n\n\n\n<li><a href=\"https:\/\/www.shodan.io\/\">Shodan<\/a> (!) If you access Shodan via IPv6, they could lat\u00ader scan this net\u00adwork and neigh\u00adbour hosts to detect IPv6 systems.<\/li>\n\n\n\n<li><a href=\"https:\/\/securityheaders.com\/\">Securityheaders.com<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.ssllabs.com\/ssltest\/\">Qualys <span class=\"caps\">SSL<\/span>&nbsp;Test<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Tools<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/github.com\/smicallef\/spiderfoot\">Spi\u00adder\u00adfoot<\/a>\n<ul class=\"wp-block-list\">\n<li>Aggre\u00adga\u00adtion tool for many ser\u00advices. Web-based. Let it run for a&nbsp;while.<\/li>\n\n\n\n<li>Usage:<br><code>git clone https:\/\/github.com\/smicallef\/spiderfoot.git<\/code><br><code>sudo python3 .\/sf.py -l 127.0.0.1:7777<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/laramies\/theHarvester\">the\u00adHar\u00advester<\/a>\n<ul class=\"wp-block-list\">\n<li>Aggre\u00adga\u00adtion tool for many services.<\/li>\n\n\n\n<li>Usage:<br><code>python3 theHarvester.py -d $target_domain -b google<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><a href=\"https:\/\/andreas-klingler.de\/infosec\/?p=41\" data-type=\"post\" data-id=\"41\">p0f<\/a>: Pas\u00adsive <span class=\"caps\">OS<\/span> fingerprinting<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Notes<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Search for files of your tar\u00adget. E.g. doc files from the organ\u00adi\u00adsa\u00adtion and analyse meta data to get insights into <span class=\"caps\">OS<\/span>\/Software versions.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Gen\u00ader\u00adal objec\u00adtives Orga\u00adniz\u00ading tem\u00adplate Web ressources Tools&nbsp;Notes<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[469],"tags":[7],"class_list":["post-419","post","type-post","status-publish","format-standard","hentry","category-passive-enum","tag-information-gathering"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/419","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=419"}],"version-history":[{"count":16,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/419\/revisions"}],"predecessor-version":[{"id":4542,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/419\/revisions\/4542"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=419"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=419"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=419"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}