Group 9 | Footprinting Analyzer

SLIDE 1

Information Gathering (Footprinting)

What is Information Gathering?

Information Gathering is the first step in cybersecurity.
It is the process of collecting information about a target.
The goal is to understand the target before testing security.
Information can be collected from public sources.

SLIDE 2

Types of Footprinting

01 / PASSIVE

Passive Footprinting

Collecting information without directly interacting with the target.

Hard to detect.

Examples

WHOIS
Netcraft
Google Search

02 / ACTIVE

Active Footprinting

Directly interacting with the target system.

Can be detected by the target.

Examples

DNS queries
Network scanning

SLIDE 3 / TOOL 01

WHOIS Tool

What is WHOIS?

WHOIS provides domain registration information.

Information Collected

Domain owner details
Registration date
Expiration date
Name servers

EXAMPLEwhois google.com

SLIDE 4 / TOOL 02

theHarvester Tool

What is theHarvester?

An OSINT tool used to gather public information.

Information Collected

Email addresses
Subdomains
Host names
Public data from search engines

EXAMPLEtheHarvester -d google.com -b bing

SLIDE 5 / TOOL 03

Netcraft Tool

What is Netcraft?

A web-based information gathering tool.

Information Collected

Web server details
Hosting provider
Operating system
Website technologies

EXAMPLE

Visit Netcraft Site Report
Enter the target website

SLIDE 6 / TOOL 04

WhatWeb Tool

What is WhatWeb?

A website fingerprinting tool.

Information Collected

Web technologies
CMS (WordPress, Joomla, etc.)
Server information
Frameworks and plugins

EXAMPLEwhatweb google.com

SLIDE 7 / TOOL 05

DNSDumpster Tool

What is DNSDumpster?

An online DNS reconnaissance tool.

Information Collected

DNS records
Subdomains
MX records
Network map

EXAMPLE

Visit DNSDumpster website
Enter the target domain

SLIDE 8

Tools We Used

ToolPurpose

WHOISDomain registration information

theHarvesterEmails and subdomains

NetcraftWebsite and hosting information

WhatWebWebsite technologies

DNSDumpsterDNS records and subdomains

SLIDE 9

Conclusion

Information Gathering is the first phase of cybersecurity assessment.
It helps us understand the target before security testing.
WHOIS, theHarvester, Netcraft, WhatWeb, and DNSDumpster collect useful public information about websites and domains.

Thank You

Paste terminal output.