Module2

Learning Objectives

  • LO#01: Explain Footprinting Concepts

  • LO#02: Demonstrate Footprinting through Search Engines

  • LO#03: Demonstrate Footprinting through Web Services

  • LO#04: Demonstrate Footprinting through Social Networking Sites

  • LO#05: Use Different Techniques for Website Footprinting

  • LO#06: Use Different Techniques for Email Footprinting

  • LO#07: Use Different Techniques for Whois Footprinting

  • LO#08: Use Different Techniques for DNS Footprinting

  • LO#09: Use Different Techniques for Network Footprinting

  • LO#10: Demonstrate Footprinting through Social Engineering

  • LO#11: Use Various Footprinting Tools

  • LO#12: Explain Footprinting Countermeasures

What is Footprinting?

  • Definition: Footprinting is the first step in an attack on information systems, where an attacker collects information about a target network to identify methods of intrusion.

  • Types of Footprinting:

    • Passive Footprinting: Gathering info without direct interaction with the target.

    • Active Footprinting: Gathering information through direct interaction with the target.

Information Obtained in Footprinting

  • Organizational Information:

    • Employee details, domains, subdomains, web servers' operating systems.

    • Background, structure, and location of the organization.

  • Network Information:

    • IP addresses, network topology, routers, firewalls, and trusted private block addresses.

  • System Information:

    • OS details, usernames, passwords, and web technologies used.

  • Public Information:

    • News articles, press releases, and Whois/DNS records.

Footprinting Methodology and Tools

  • Techniques:

    • Google Hacking: Using advanced search operators.

    • Web Services: Tools like Google Hacking Database, Email Footprinting to extract data.

    • Social Engineering: Impersonation, dumpster diving, and monitoring online reputation.

    • DNS Footprinting: Analyzing DNS records for vital network information.

    • Network Footprinting: Identify ranges, shoulder surfing, eavesdropping, and traceroute.

Google Hacking Techniques

  • Operators:

    • [cache:] Displays cached pages.

    • [allintitle:] Finds pages with specified keywords in the title.

    • [link:] Lists web pages linking to another specified page.

    • [site:] Restricts results to specific domains.

  • Usage Example: Use [intitle: intranet inurl: intranet +intext: "human resources"] to find sensitive information related to target organizations.

Tools for Footprinting

  • Email Tracking: Tools like eMailTrackerPro and Infoga help gather information through emails.

  • Domain Tools: Services to analyze domain ownership and structure (Whois, Netcraft).

  • Social Engineering Tools: Tools for collecting information from social media and online resources (theHarvester, Spokeo).

Countermeasures Against Footprinting

  • Security Practices:

    • Develop security policies and train employees against social engineering.

    • Disable directory listings and sanitize details provided to internet registrars.

    • Use privacy services for domain registration and avoid revealing sensitive information on social media.

  • Recommendations:

    • Keep critical infrastructure information offline and regularly review and update security practices.