mirror of https://github.com/The-Art-of-Hacking/h4cker synced 2024-11-10 21:54:12 +00:00

History

Omar Santos 72ae7a2d01 Add files via upload		2022-05-26 11:08:24 -04:00
..
assessment-mindset.png	Add files via upload	2022-05-26 11:05:55 -04:00
assessment_mindset.xmind	Add files via upload	2022-05-26 11:08:24 -04:00
bug-bounty-methodology-jhaddix.jpeg	Add files via upload	2022-05-26 11:05:55 -04:00
osint-domain-name.jpeg	Add files via upload	2022-05-26 11:05:55 -04:00
README.md	Update README.md	2021-02-23 13:49:06 -05:00
smb_enumeration_tips.md	Create smb_enumeration_tips.md	2021-07-18 23:48:12 -04:00
visual-guide-to-recon.jfif	Add files via upload	2022-05-26 11:05:55 -04:00

README.md

Active and Passive Reconnaissance Tips and Tools

Passive Recon

Website Exploration and "Google Hacking"

censys - https://censys.io
Spyse - https://spyse.com
netcraft - https://searchdns.netcraft.com
Google Hacking Database (GHDB) - https://www.exploit-db.com/google-hacking-database
ExifTool - https://www.sno.phy.queensu.ca/~phil/exiftool
Certficate Search - https://crt.sh/
Huge TLS/SSL certificate DB with advanced search - https://certdb.com
Google Transparency Report - https://transparencyreport.google.com/https/certificates
SiteDigger - http://www.mcafee.com/us/downloads/free-tools/sitedigger.aspx

A tool to scrape LinkedIn: https://github.com/dchrastil/TTSL
cree.py http://ilektrojohn.github.com/creepy

Whois

WHOIS information is based upon a tree hierarchy. ICANN (IANA) is the authoritative registry for all of the TLDs and is a great starting point for all manual WHOIS queries.