CNS320 Lesson 3 – Footprinting

Lesson 3 – Footprinting

Screen Shot 2016-01-18 at 9.09.03 PM.png

  • Footprinting is essential for scoping your target, as it will give you an idea of what sort of systems you’re attacking, what public IP ranges your target owns (attack surface), what domains
  • Footpringint is focused on *passive* reconnaissance.  You will learn as much as you can indirectly about the target first.  Then, you will have very controlled direct interaction with the target in the semi-passive phase.  Semi-passive footprinting should be largely indistinguishable from normal traffic (eg, do some DNS queries or look at their webpage, but don’t do brute-force reverse DNS lookups or hardcore crawling of every page, etc.)

Screen Shot 2016-01-18 at 9.09.08 PM.png

  • The idea is not to touch the target organization until you’ve gathered enough info indirectly

Screen Shot 2016-01-18 at 9.09.10 PM.png

  • CDN = content delivery network

Screen Shot 2016-01-18 at 9.09.11 PM.png

Screen Shot 2016-01-18 at 9.09.12 PM.png

Screen Shot 2016-01-18 at 9.09.13 PM.png

Screen Shot 2016-01-18 at 9.09.14 PM.png

Screen Shot 2016-01-18 at 9.09.15 PM.png

Screen Shot 2016-01-18 at 9.09.16 PM.png

  • For example, if you see the target company is looking to hire Oracle DBA’s on LinkedIn or Dice, then you can guess what sort of databases their running 🙂

Screen Shot 2016-01-18 at 9.09.17 PM.png

Screen Shot 2016-01-18 at 9.09.19 PM.png

Screen Shot 2016-01-18 at 9.09.20 PM.png

Screen Shot 2016-01-18 at 9.09.21 PM.png

Screen Shot 2016-01-18 at 9.09.23 PM.png

Screen Shot 2016-01-18 at 9.09.24 PM.png

Screen Shot 2016-01-18 at 9.09.25 PM.png

Screen Shot 2016-01-18 at 9.09.26 PM.png

  • ARIN = American Registry for Internet Numbers
  • RIPE NCC = Réseaux IP Européens Network Coordination Centre
  • APNIC = Asia Pacific Network Information Centre
  • LACNIC = Latin American and Carribean Network Information Center
  • AfriNIC = African Network Information Center

Screen Shot 2016-01-18 at 9.09.27 PM.png

Screen Shot 2016-01-18 at 9.09.29 PM.png

Screen Shot 2016-01-18 at 9.09.30 PM.pngScreen Shot 2016-01-18 at 9.09.31 PM.png

Screen Shot 2016-01-18 at 9.09.32 PM.png

Screen Shot 2016-01-18 at 9.09.34 PM.png

Screen Shot 2016-01-18 at 9.09.35 PM.png

Screen Shot 2016-01-18 at 9.09.36 PM.png

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s