Hacking Articles » Footprinting http://www.hackingarticles.in Raj Chandel's Blog Sat, 18 May 2013 11:28:46 +0000 en-US hourly 1 DMitry – Deepmagic Information Gathering Tool http://www.hackingarticles.in/dmitry-deepmagic-information-gathering-tool/ http://www.hackingarticles.in/dmitry-deepmagic-information-gathering-tool/#comments Tue, 04 Dec 2012 14:55:57 +0000 Raj Chandel http://www.hackingarticles.in/?p=7367 DMitry (Deepmagic Information Gathering Tool) is a UNIX/(GNU)Linux Command Line program coded purely in C with the ability to gather as much information as possible about a host.

Basic functionality of DMitry allows for information to be gathered about a target host from a simple whois lookup on the target to UpTime reports and TCP portscans.

First Open Your backtrack and Follow these path

Applications->Backtrack–>Information gathering->Network analysis->route analysis->dmitry

./dmitry -w target” will perform a standard named whois lookup

./dmitry -i target” will Perform an Internet Number whois lookup on the target.

./dmitry -n target” will Retrieve netcraft.com data concerning the host, this includes Operating System, Web Server release and UpTime information.

./dmitry -s target” Perform a Sub Domain search on the specified target.

./dmitry -e target Perform a search possible email address
./dmitry –p target Perform a TCP Port scan on a host
 ./dmitry –b target Read in the banner received from the scanned port
]]> http://www.hackingarticles.in/dmitry-deepmagic-information-gathering-tool/feed/ 0 Protos – IP Protocol Scanner http://www.hackingarticles.in/protos-ip-protocol-scanner/ http://www.hackingarticles.in/protos-ip-protocol-scanner/#comments Mon, 13 Aug 2012 04:53:12 +0000 Raj Chandel http://www.hackingarticles.in/?p=6254 Protos is an IP protocol scanner. It goes through all possible IP protocols and uses a negative scan to sort out unsupported protocols which should be reported by the target using ICMP protocol unreachable messages.

First Open Your backtrack and Follow these path

Applications->BackTrack -> Information Gathering -> Network Analysis -> Route Analysis -> protos

 You can start it with./protos –I eth0 –d 192.168.1.2 (IP) -v

Usage: ./protos -i eth0 -d 10.1.2.3 -v

 -v     verbose

 -V    show which protocols are not supported

 -u    don’t ping targets first

 -s     make the scan slow (for very remote devices)

 -L     show the long protocol name and it’s reference (RFC)

 -p x  number of probes (default=5)

 -S x  sleeptime is x (default=1)

 -a x  continue scan afterwards for x seconds (default=3)

 -d dest destination (IP or IP/MASK)

 -i interface         the eth0 stuff

 -W   don’t scan, just print the protocol list

]]> http://www.hackingarticles.in/protos-ip-protocol-scanner/feed/ 3 Jigsaw – Email Enumeration Tool (Employees Footprinting) http://www.hackingarticles.in/jigsaw-email-enumeration-tool-employees-footprinting/ http://www.hackingarticles.in/jigsaw-email-enumeration-tool-employees-footprinting/#comments Tue, 31 Jul 2012 10:34:19 +0000 Raj Chandel http://www.hackingarticles.in/?p=6166 Jigsaw.rb is a simple ruby script for enumerating information about a company’s employees. It is useful for Social Engineering or Email Phishing.

First Download jigsaw script here and save in your desktop

Now unzip the file unzip jigsaw.zip

You can start it with./jigsaw.rb –s www.example.com

Jigsaw usage Example

-i, –id [Jigsaw Company ID]      The Jigsaw ID to use to pull records
-s, –search [Company Name]      Name of organization to search for
-r, –report [Output Filename]   Name to use for report EXAMPLE: ‘-r facebook’ will generate ‘facebook.csv’
        -v, –verbose                    Enables verbose output

 

]]> http://www.hackingarticles.in/jigsaw-email-enumeration-tool-employees-footprinting/feed/ 0 URLCrazy-Domain Name Typo Tool http://www.hackingarticles.in/urlcrazy-domain-name-typo-tool/ http://www.hackingarticles.in/urlcrazy-domain-name-typo-tool/#comments Sun, 29 Jul 2012 10:41:31 +0000 Raj Chandel http://www.hackingarticles.in/?p=6156 URLCrazy is a tool that can generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

Features

  • Generates 15 types of domain variants
  • Knows over 8000 common misspellings
  • Supports cosmic ray induced bit flipping
  • Multiple keyboard layouts (qwerty, azerty, qwertz, dvorak)
  • Checks if a domain variant is valid
  • Test if domain variants are in use
  • Estimate popularity of a domain variant
  • URLCrazy requires Linux and the Ruby interpreter

First download urlcrazy from here and save on your desktop

Now untar the file tar -zxvf urlcrazy.tar.gz

You can start it with./urlcrazy www.example.com

]]> http://www.hackingarticles.in/urlcrazy-domain-name-typo-tool/feed/ 0 How to Find DNS using Backtrack 5 http://www.hackingarticles.in/how-to-find-dns-using-backtrack-5/ http://www.hackingarticles.in/how-to-find-dns-using-backtrack-5/#comments Fri, 03 Feb 2012 16:35:31 +0000 Raj Chandel http://www.hackingarticles.in/?p=4135 DNSenum

DNSenum is a pentesting cool created to enumerate DNS info about domains

First Open Your backtrack and Follow these path

Applications->Backtrack–>Information gathering->Network analysis->DNS analysis->DNSenum

Now type ./dnsenum.pl website.com

]]> http://www.hackingarticles.in/how-to-find-dns-using-backtrack-5/feed/ 0 Footprinting (My New Hacking E-Book) http://www.hackingarticles.in/footprintingmy-new-e-book/ http://www.hackingarticles.in/footprintingmy-new-e-book/#comments Sat, 20 Aug 2011 09:53:52 +0000 Raj Chandel http://hackingarticles.in/?p=2431

Download

]]> http://www.hackingarticles.in/footprintingmy-new-e-book/feed/ 0 What is Traceroute http://www.hackingarticles.in/what-is-traceroute/ http://www.hackingarticles.in/what-is-traceroute/#comments Fri, 19 Aug 2011 10:45:26 +0000 Raj Chandel http://hackingarticles.in/?p=2427 Traceroute: Traceroute is the program that shows you the route over the network between two systems, listing all the intermediate routers a connection must pass through to get to its destination. It can help you determine why your connections to a given server might be poor, and can often help you figure out where exactly the problem is. It also shows you how systems are connected to each other, letting you see how your ISP connects to the Internet as well as how the target system is connected.

 

3D Traceroute

www.d3tr.de

 

Loriot Pro

www.loriotpro.com

 

Path Analyzer Tool

www.pathanalyzer.com

 

Visual Route Trace

www.visualroute.com

Traceroute Tools

GEO Spider www.oreware.com
V Trace www.vtrace.pl
Magic Net Trace www.tialsoft.com
Visual IP Trace www.visualiptrace.com
Trout www.foundstone.com
Ping Plotter www.pingplotter.com
Ping-Probe www.ping-probe.com
]]> http://www.hackingarticles.in/what-is-traceroute/feed/ 0 Extract Information from Web Page http://www.hackingarticles.in/tools-of-extract-data-extract-information-from-web-page/ http://www.hackingarticles.in/tools-of-extract-data-extract-information-from-web-page/#comments Thu, 18 Aug 2011 05:33:47 +0000 Raj Chandel http://hackingarticles.in/?p=2423 Web Data Extractor: Web Data Extractor, a powerful and easy-to-use application which helps you automatically extract specific information from web pages.

Download

 

Spider Foot: SpiderFoot is a free, open-source, domain footprinting tool. Given one or multiple domain names (and when I say domains, I’m referring to the DNS kind, not Windows domains), it will scrape the websites on that domain, as well as search Google, Netcraft, Whois and DNS to build up information like:

  • Subdomains
  • Affiliates
  • Web server versions
  • Users
  • Similar domains
  • Email addresses
  • Netblocks

Download

 

Robtex: RobTex is a software developer which was founded in 1989 developing all kinds of software.In recent years main focus has been on Internet related software.Currently the most popular has been free tools like rbls.org and network explorer.

Download

]]> http://www.hackingarticles.in/tools-of-extract-data-extract-information-from-web-page/feed/ 0 Steps to Perform Footprinting http://www.hackingarticles.in/steps-to-perform-footprinting/ http://www.hackingarticles.in/steps-to-perform-footprinting/#comments Thu, 07 Jul 2011 05:13:20 +0000 Raj Chandel http://hackingarticles.in/?p=2104 Steps Websites Perform whois lookup for personal details  

  www.whois.net, 

www.samspade.org Extract DNS information  

  www.dnsstuff.com Mirror the entire website and look up names  

  Tool: HTTRACK Website Copier, Web Snake Extract archives of the website  

  www.archive.org 

  Google search for company’s news and press releases  

  www.google.com 

  Use people search for personal information of employees  

  www.pipl.com 

www.people.yahoo.com

  Find the physical location of the web server using the tool “NeoTracer” Tool: NEO Tracer Analyze company’s infrastructure details from job postings  

  www.naukri.com 

www.jobsdb.com

  Track the email using “readnotify.com”  

  www.readnotify.com 

www.spypig.com

]]> http://www.hackingarticles.in/steps-to-perform-footprinting/feed/ 2 Footprinting (Part 1) http://www.hackingarticles.in/footprinting-part-1/ http://www.hackingarticles.in/footprinting-part-1/#comments Sat, 21 May 2011 18:50:38 +0000 Raj Chandel http://hackingarticles.in/?p=1748 Footprinting is the technique of gathering information about computer systems and the entities they belong to. This is done by employing various computer security techniques, as:
  1. DNS queries
  2. Network enumeration
  3. Network queries
  4. Operating system identification
  5. Organizational queries
  6. Ping sweeps
  7. Point of contact queries
  8. Port Scanning
  9. Registrar queries (WHOIS queries)

Why is Footprinting Necessary

Footprinting is necessary to systematically and methodically ensure that all pieces of information related to the aforementioned technologies are identified.

Information Gathering  Methodology


1.       The attacker would first unearth initial information (such as domain name),
2.       locate the network range of the target system (using tools such as Nslookup, whois etc),
3.       Ascertain the active machines (for instance by pinging the machine),
4.       discover open ports or access points (using tools such as port scanners),
5.       Detect operating systems (for instance querying with telnet),
6.       Uncover services on ports and
7.       Map the network.

Extracting Archive of a Website


You can get all information of a company’s website since the time it was launched at www.archive.org

People Search

 

Best People Search

 

www.bestpeoplesearch.com

 

Profile Search by Email

www.lullar.com

 

Name Check


 

Footprinting Through Job Sites


 

www.naukri.com

 

 

www.jobsdb.com

]]> http://www.hackingarticles.in/footprinting-part-1/feed/ 0