Perform Footprinting Using Various Tools
Lab Scenario
The information gathered in the previous steps may not be suffucient to reveal
the potential Vulnerabilities of the target there could be more information
available that could help in finding loopholes in the targets
As an ethical hacker you should look for as much information as possible about
the target using various tools this lab activity will demonstratre what other
information you can extract from the target using various footprinting tools
Lab Objectives
Footprinting a target using recon-ng
Footprinting a target using Maltego
Footprinting a target using OSRFramework
Footprinting a target using FOCA
Footprinting a target using BillCipher
Footprinting a target using OSINT framework
Lab environment
To carry out lab you need
Window 11 VM
Parrot Security VM
Windows 2019 vm
Web browers with an internet connection
Administrator privileges to run the tools
Lab Duration
65 minutes
Overview of Footprinting Tools
Footprinting tools are used to collect basic information a about the target
systems in order to exploit them information collected by the footprinting tools
contains the target’s IP location information , routing information , business
information ; address ; phone number and social security number details about
the source of an email and a file , DNS information , domain information ect
Tast 1 : Footprinting a target using Recon-ng
Recon-ng is a web reconnaissance framework with independent modules and
database interaction that provides an environment in which open-source web-
based reconnaissance can be conducted.
Here we wil use recon-ng to perform network reconnaissance gather personnel
information and gather target information from social networking sites
Note : the results obtained might differ when you perform this lab task
Task 2 : Footprinting a target using Maltego
Maltego is a footprinting tool used to gather maximum information for the
purpose of ethical hacking computer forensic and pentesting it provides a
library of transforms to discover data form open sources and visualizes that
information in a graph format suitable for link analysis and data minig
Maltego provides you with a graphical interface that makes seeing these
relationshops instant and accurate and even making it possible to see hidden
connections
Here will gather a variety of information a bout the target organization using
maltego
Task 3 : Footprinting a target using OSRFramework
OSRFramework is a set od libraries that are used to perform Open Source
intelligence tasks they include references to many different application related
to username checking , DNS lookups , information leaks research deep web
regular expression extraction and mamy others
It also provides a way of making there queries graphically as well as several
interfaces interact with such as OSRPCosole or web interface
Task 4 Footprinting a target Usieng FOCA
FOCA (fingerprinting Organiszation With Collect Archives ) is a tool that
reveals metadata and hiddeen information in scanned documents these
documents are searched for using there search engenes : Google, Bing ; and
DuckDuckGo
The results from the thee engines amounts to a lot of documents FOCA
examines a wide variety of records with the most widely recongnized being
Microsoft Office Open Office and PDF document it may also work with adobe
inDesign or SVG files these archives may be on site pages and can be
downloades and dissected with FOCA
TASK 5 : Footpinting a target using BillCipher
BillCipher is information garthering tool for a Website or IP adresse Using this
tool you can gatg=her information such as DNS lookup WHois lookup GeoIP
lookup Subnet Lookup Port Scanner page Links Zone transfer HTTP Header etc
Task 6 Footprinting a target using OSINT Framework
OSINT Framework is an open-source intelligence gathering Framework that
helps Security professionals for performing automated footprinting and
reconnaissance OSINT research and Intelligence Gathering It is focused on
gathering information from free tools or ressouces this framework includes a
simple web interface that list various OSINT tools arranged by category and is
shown as an OSINT tree structure on the web Interface
The OSINT Framework includes the following indicators with the available
tools
(T)-Indicates a link to tool that following indicators with the available tools
(D)- Google Dork
(R) Requires registration
(M)-Indicates a URL that contains the search term and the URL itself must be
edited manually
