Recon Notes

Notes

• a process by which a DNS server passes a copy of part of its database to another DNS server. zonetransfer.me
• nmap, netdiscover

• Check for firewall using ping and use -Pn for stealth scan

  Nmap Cheat Sheet 2023: All the Commands, Flags & Switches

Recall

Notes

• …
• …

---

Date: September 22, 2023

Topic: Passive Recon

Recall

1. Host Lookup

2. Robots.txt, Sitemap.xml

3. Whois Lookup
4. Netcraft
5. DNS Recon
6. WAF
7. Subdomain Enum

8. Google Dorks

9. Email Harvesting

10. Leaked Password Database

Notes

• look for ip and hosts
• Robots.txt: The robots.txt file is a text file that webmasters create to instruct web robots (typically search engine robots) how to crawl and index pages on their website. It controls and restricts access to certain areas of a website by specifying which parts should not be crawled or indexed.

• Sitemap.xml: A sitemap is an XML file that lists all the pages of a website and provides additional metadata about each URL, such as when it was last updated. It helps search engines understand the structure of a website and crawl and index its pages more efficiently.

• check for registration date and registrar info
• gives all data like whois, dns, SSL/TLS, etc.
• dnsdumpster.com
• wafw00f to identify firewall on web app
• Sublist3r

• GHDB,

  Google dork cheatsheet

• theHarvester,

• Spyse

• haveibeenpwned