CSCI 6250 - Module 4

A GUI tool that queries 100+ OSINT sources to gather intel on emails, names, IPs, domains, web servers, and more

means you are actually prodding the target network in ways that might seem suspicious to network defenders.

Request is larger than server is able to process

Many social engineers begin gathering the information they need by using which of the following?

Request not made by client in allotted time

an email that says “Update your account details”, usually framed as an urgent request

Search for email addresses in technical or nontechnical newsgroup postings.

Client must authenticate with proxy

Resource is no longer available

Which of the following tools can assist you in finding general information about an organization and its employees?

another attack carried out by email that combines social engineering with exploiting vulnerabilities

Discover relevant files, email addresses, & other important info w/this powerful graphic user interface (GUI) tool.

is one of the components most vulnerable to network attacks.

Request not understood by server

This web tool is useful in gathering IP and domain information (including whois, DNS, and traceroute).

a text file generated by a web server and stored on a user’s browser.

Server is unavailable because of maintenance or overload

Request-URI is longer than the server is willing to accept

Which of the following is a good website for gathering information on a domain?

Starts a remote Application-layer loopback of the request message

A cookie can store information about a website’s visitors.

Extracts metadata from website documents to reveal creator’s login, email, internal IP addresses, and more.

footprinting is passive and nonintrusive—no illegal access or use of false credentials to gather information.

Perform DNS zone transfers; replaces the nslookup command.

One way to find web bugs is by checking source code for tags loading files from different servers than other images.

To find information about the key IT personnel responsible for a company’s domain, you might use which of the following?

What command-line tool can be used to harvest DNS information?

Which of the following is one method of gathering information about the operating systems a company is using?

Retrieve HTTP, HTTPS, and FTP files over the Internet.

zone transfer can be done with the dig command.

Request not allowed for the resource

HTTP version not supported by the server

Request requires authentication

Resource doesn’t accept the request

What is the first method a security tester should attempt to find a password for a computer on the network?

Server doesn’t support the request

Requests that the entity be stored under the Request-URI

shows for which zones or IP addresses the DNS server is responsible.

Server didn’t receive a timely response

used to gain access to information; examining trash can yield

Request header fields evaluated as false

Automate footprinting with this powerful, advanced framework using search engines, social media, and many other sources.

Testers or attackers enter restricted areas by following authorized personnel, a technique called

A web bug’s purpose is to collect visitor info like IP, visit time, and browser type, like spyware or adware.

Request couldn’t be fulfilled by the server

Allows data to be posted (i.e., sent to a web server)

Retrieves data by URI

legal info gathering about competitors, done through ads, websites, and more, is called

a cybersecurity search engine used to find vulnerabilities, IPs, DNS records, and domains across systems or networks.

Uncover the underlying technologies that a website operates on

Conduct reverse phone number lookups and retrieve address information.

the process of finding information on a company’s network is called

Unable to match request

Gather IP and domain information.

Reserved for future use

The best defense against social engineering is user training bc object being hacked for info is a person, not computer.

Requests that the origin server delete the identified resource

Pretending to be from the CEO’s office to urgently request info is a social engineering tactic called pretexting.

When conducting competitive intelligence, which is a good way to determine the size of a company’s IT support staff?

Almost all of the tools available for footprinting are free and open source. These tools are often referred to as

Use advanced search operators and crafted queries to find files, sites, and data on a target.

Spidering is not an attack, but an exploration of a website for content; a quieter, friendlier way to analyze a website.

uses the art of deception to extract valuable information from well-meaning people who are trying to be helpful.

Which of the following is a fast and easy way to gather information about a company?

a 1-pixel × 1-pixel image file referenced in an <IMG> tag, and it usually works with a cookie.

To determine a company’s primary DNS server, you can look for a DNS server containing which of the following?

Which of the following enables you to view all host computers on a network?

Requests information on available options

Server understands the request but refuses to comply

Same as the GET method, but retrieves only the header information of an HTML document, not the document body

A web-based OSINT toolset in an interactive mind map, letting you expand nodes to find tools for specific tasks.

Which of the following contains host records for a domain?

Social engineering techniques are:

Server received invalid response from the upstream server

Content length not defined

auto-discovers website pages by following links, showing page paths and filenames in seconds.

Read and write data to ports over a network.

website analysis tool that crawls through remote websites & even produce a list of vulnerabilities for a remote website.

Used for finding email addresses, subdomains, IPs, URLs, employee names, and more. This is a command line only tool.

Search through previous versions of the website to uncover historical information about a target.

DNS uses name servers to resolve names. Once name is found, you can try transferring all records the DNS server manages.

Used w/ proxy that dynamically switches to tunnel connection, Secure Sockets Layer (SSL) /Transport Layer Security (TLS)

Request couldn’t be completed because of an inconsistency

a hidden graphic or piece of code embedded in a webpage to track user activity and harvest user information.

Before conducting a security test by using social- engineering tactics, what should you do?

reading what users enter on their keyboards, especially logon names and passwords, PINs