Information Gathering - Website

Before hacking a website, we should gather as much as information about the website that are available on the internet.

For example: We need info like the DNS settings, Expiry dates, TLS Certificates used and its expiry dates, the host provider, Registrar, Information about the company that is using the website like their phone numbers email address, other links associated to this website etc.

Information Gathering

The information gathering steps of footprinting and scanning are of utmost importance. Good information gathering can make the difference between a successful pen test and one that has failed to provide maximum benefit to the client. An amazing amount of information is available about most organizations in business today.

This information can be found on the organization's website, trade papers, Usenet, financial databases, or even from disgruntled employees. Some potential sources are discussed, but first, let's review documentation.