Ethical Hacking Tutorial - Hackers Footprinting
Good day Dude, today makes it the 9th tutorial and the end of our tutorial on Ethical Hacking, here are the previous tutorial you have missed.
1st day >> Ethical Hacking Tutorial — Overall Review,
2nd day >> Ethical Hacking Tutorial — Types of Hackers,
3rd day >> Ethical Hacking Tutorial — Top 15 Most Famous Hackers in the Worldwide and How they became Famous,
6th day >> Ethical Hacking Tutorial - Hacking Skills.
Nothing to say much about Footprinting because is a part of Reconnaissance process which is used for gathering possible information about a target computer system or
network. Check out How to Kill Friend's WiFi Connection on your Devices With WifiKill Android Apk.
network. Check out How to Kill Friend's WiFi Connection on your Devices With WifiKill Android Apk.
Footprinting could be both active and
passive. Reviewing a company’s website is an example of passive footprinting, meanwhile, all possible attempt to gain access to sensitive information through social engineering is an example of active information gathering.
When it comes to hacking, Footprinting is basically the first step where hacker gathers as much information as possible to find ways to intrude into a target system or at least decide what type of attacks will be more suitable for the target.
When carrying out this phases, an hacker can easily collect the following information about his or her target −
- Domain name
- IP Addresses
- Namespaces
- Employee information
- Phone numbers
- E-mails
- Job Information
Now, In the above listed, we will discuss how to extract the basic and easily accessible information about any computer system or network that is linked to the Internet. Check out14 Android Hacking Apps To Turn Your Android Into A Hacking Device.
1. Domain Name Information :
One of the best place to get domain name information http://www.whois.com/whois whois is a website that provides you the full domain detailed information about a domain name information including its owner's contact information, its registrar, date of registration, expiry, name server, owner's contact information, etc.
Below you have a sample record of Qtechpluz.com screened porch from WHOIS Lookup :
Quick Fix : It's highly recommend to keep your domain name profile a private one which should hide the above-mentioned information from potential hackers.
2. Finding IP Address : You can use ping command at your prompt. This command is available on Windows as well as on Linux OS. Following is the example to find out the IP address of Qtechpluz.com. Check out Top 10 Best Free iCloud Bypass tools for Bypassing iCloud.
3. Finding Hosting Company : Now that you are done getting a website domain information, you can get further detail by using ip2location.com website.
Following is the example to find out the details of an IP address in the screen shot below :
Above is the given ISP row gives you the detail about the hosting company because IP addresses are usually provided by hosting companies only.
Quick Fix : If a computer system or network is linked with the Internet directly, then you are trying to hide the IP address and the related information such as the hosting company, its location, ISP, etc... If you have a server containing very sensitive data, then it is recommended to keep it behind a secure proxy so that hackers cannot get the exact details of your actual server. This way, it will be difficult for any potential hacker to reach your server directly.
Another effective way of hiding your system IP and ultimately all the associated information is to go through a Virtual Private Network (VPN). If you configure a VPN, then the whole traffic routes through the VPN network, so your true IP address assigned by your ISP is always hidden.
4. IP Address Ranges : Most of the small sites owner may have a single IP address associated with them, but larger websites usually have multiple IP addresses serving different domains and sub-domains.
You can obtain a range of IP addresses assigned to a particular company using American Registry for Internet Numbers (ARIN) (https://www.arin.net/).
You can enter company name in the highlighted search box to find out a list of all the assigned IP addresses to the target company.
5. History of the Website : It is very easy to get a complete history of any website using www.archive.org
You can enter a domain name in the search box to easily find out how the website was running at a given point of time and what were the pages available on the website on different dates. Check out How to Hack WiFi Password without Root.
Quick Fix : Though there are some advantages of keeping your website in an archive database, but if you do not like anybody to see how your website progressed through different stages, then you can request archive.org to delete the history of your website.
Thanks...! Thanks....!! Thanks...!!!
Today is the end of the Ethical Hacking Tutorial, if you follow up from day one of this tutorial, then you should have improved in Hacking Knowledge and try out something to Hack. Please don't try hack someone's else site or organization non government website. Just setup a simple site and hack in to test your Hacking ability. Here's the tutorial from day one.
Comments
Post a Comment
Please Share Your Thoughts About This Post....