information gathering

In the previous article, we have discussed the reverse engineering of original DVTA application in the Lab setup of Thick Client: DVTA part 2 In this part, we are going to systematically pentesting the DVTA application for various issues. Table of Content Prerequisites Information Gathering...

The AutoRecon tool is designed as a network reconnaissance tool. It is a multi-threaded tool that performs automated enumeration of services. The purpose of this tool is to save time while cracking CTFs and other penetration testing environments or exams. It is useful in real-world engagements...

A Muslim prayer app with over 98 million downloads is one of the apps connected to a wide-ranging supply chain that sends ordinary people’s personal data to brokers, contractors, and the military. The U.S. military is buying the granular movement data of people around the world, harvested from...

During the reconnaissance phase of the target, we collect as much information about the target which includes enumerating subdomains as well. It increases the attack surface providing more opportunities for exploitation and information gathering. We’re going to use Subfinder to enumerate for...

Discovering sub-domains of a domain is an essential part of pentest reconnaissance. Having unsecured subdomains can lead to serious risk to your business and lately, there were a number of security incidents where the hacker used sub-domains tricks. Thanks to author who committed to develop tool...

Hey Guys🙋‍♂️, Instagram is one of the most popular Social media that we use nowadays and if you want to study someone's Instagram, it will take more than an hour for us to figure out about their most used tags and who they mention most, Today in this post I am gonna tell you about a tool that is...

What is the Sherlock tool ? Sherlock is a great tool that will allow you to search for a particular username on all social media, forums, and even popular sites. for example, if you have someone's username and want to know more about the username just use this tool and it will show you where...

We are living in digital era. We are penetration testers, we need to protect the world. We need to be digital Sherlock Holmes. For that we need to find a criminal from a small clue. If we get a bad guy's username or mail then we don't need to manually search it on the internet. There are some...

Metagoofil is an awesome Information gathering tool that can be used for extracting lots of information from Word Documents, Presentation files, PDF’s, Excel Sheets, .jpg images and lots of other formats. Metagoofil also can provide a lots of constructive information during the penetration...

Today we are going to learn about recon-ng. Recon-ng is very good tool for web application analysis. Recon-ng is a fully featured Web-Reconnaissance framework which written in Python3. It gives a powerful environment to it's users. Recon-ng have some modules and functions which gives many...

Sometimes we need to collect information from a mobile number, sometimes we got calls from disturbing unknown caller and sometimes we need to collect information of our target. In this tutorial we are going to cover how to get personal information from a cell phone number. Installing...

Website security auditing is always on demand in the cybersecurity field. Web application hacking is the main priority of every penetration testing student. We have learned in our many previous articles how we can gather information about a target. After information gathering the next process in...

The advancements that we see now in the world of today are highly ferocious and can be detrimental if they are used without any measure or extent of their usage. The most primary device that can be enlisted for the perils it possesses is the mobile phone. The mobile phone can be deemed as a...

Security is an illusion and delusion too. In the field of Security, types of professionals exist a) Black Hat, b) White Hat and c) Gray Hat. Black Hats are the lads who creep the industry with the luminescent intelligence also known by Unethical Hacker. White Hats are the Ethical Hackers who...

Within the vast sea of the Internet, targets are easy to find. Most all networks advertise the Internet service provider (ISP) they depend on as well as their design, configuration, hardware types, and potentially vulnerable holes. Keep in mind that most of the normal discovery techniques for...

Kali Linux offers a number of customized tools designed for Penetration Testing. Tools are categorized in the following groups as seen in the drop-down menu shown in the following screenshot: Information Gathering: These are Reconnaissance tools used to gather data on your target network and...

dnsenum Description Dnsenum is a multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. The main purpose of Dnsenum is to gather as much information as possible about a domain. The program currently performs the following operations...

How to install theHarvester on Ubuntu 18.04 LTS # !/bin/sh # use to git clon to download and clone the theHarvester from Github git clone https://github.com/laramies/theHarvester # Now enter into the theHarvester Folder cd theHarvester # Now install pip sudo apt install python3-pip # Now...