Learn essential open source intelligence (OSINT) techniques for gathering background information about targets. This appendix covers passive reconnaissance methods that help build a comprehensive picture of the target environment.
Topics Covered
- C1 Registration Records - WHOIS lookups, domain registration data, and ownership information
- C2 Domain Name Server (DNS) - DNS enumeration, zone transfers, and record types
- C3 Customer Web Site Analysis - Analyzing target websites for information disclosure
- C4 Google Hacking and Web Enumeration - Using search engines for reconnaissance