ethical hacking chapt4

❓ What is footprinting?
✅ A technique used to gather information about a network, organization, or individual to identify vulnerabilities.

❓ What are Web tools used for footprinting?
✅ Free online tools that help security testers (or attackers) collect data on a target network, such as WHOIS lookup, nslookup, and Shodan.

❓ What is competitive intelligence?
✅ The process of legally gathering information about competitors to make strategic business decisions.

❓ What is a DNS zone transfer?
✅ A process where DNS records are copied from one DNS server to another, which can be exploited to reveal network structure details.

❓ What are the types of social engineering?
✅ Common social engineering tactics include phishing, spear phishing, shoulder surfing, dumpster diving, piggybacking, and web bugs.

Key Terms

❓ What is competitive intelligence?
✅ The collection and analysis of publicly available data about competitors to gain a business advantage.

❓ What is a cookie?
✅ A small piece of data stored on a user’s browser that tracks website activity and preferences.

❓ What is dumpster diving?
✅ The act of searching through trash to find sensitive information, such as discarded documents or hardware.

❓ What is footprinting?
✅ The process of collecting data about a target system to identify security weaknesses.

❓ What is phishing?
✅ A social engineering attack where attackers send fake emails or messages to trick users into revealing personal or sensitive information.

❓ What is piggybacking?
✅ A security breach where an unauthorized person follows an authorized user into a restricted area.

❓ What is shoulder surfing?
✅ Observing someone’s screen or keyboard to steal sensitive information like passwords or PINs.

❓ What is social engineering?
✅ The use of psychological manipulation to trick people into giving up confidential information.

❓ What is spidering (or crawling)?
✅ The automated process of scanning websites to gather data, often used in reconnaissance for attacks.

❓ What is spear phishing?
✅ A targeted phishing attack directed at a specific individual or organization, often using personalized details.

❓ What is a Web bug?
✅ A small, hidden tracking element embedded in emails or web pages to monitor user activity.

❓ What is a zone transfer?
✅ The process of copying DNS zone files between servers, which can be exploited to gather information about a network’s structure.