CEHv8 BOOTCAMP: MODULE 02-FOOTPRINTING AND RECONNAISSANCE_SET-2

Question 1

Why do attackers track email communications?

Answer 1

To gather information about the physical location of an individual to perform social engineering that in turn may help in mapping target organization’s network.

Question 2

What is email tracking?

Answer 2

A method to monitor and spy on the delivered emails to the intended recipient.

Question 3

Competitive Intelligence is the process of what?

Answer 3

Identifying, gathering, analyzing, verifying, and using information about your competitors from resources such as the internet.

Question 4

What is Competitive Intelligence in nature?

Answer 4

• Non-interfering

* Subtle

Question 5

What are 10 sources of Competitive Intelligence?

Answer 5

• Company websites and employee ads.
• Search engines, internet, and online databases.
• Press releases and annual reports.
• Trade journals, conferences, and newspaper.
• Patent and trademarks.
• Social engineering employees.
• Product catalogues and retail outlets.
• Analyst and regulatory reports.
• Customer and vendor interviews.
• Agents, distributors, and suppliers.

Question 6

What are 4 websites that can be used to find out how a company began and how it developed?

Answer 6

• EDGAR Database (http://www.sec.gov/edgar.shtml)
• Hoovers (http://www.hoovers.com)
• LexisNexis (http://www.lexisnexis.com)
• Business Wire (http://www.businesswire.com)

Question 7

What are 6 things an attacker can gather using Google Hacking techniques?

Answer 7

• Advisories and server vulnerabilities.
• Pages containing network or vulnerability data.
• Pages containing logon portals.
• Error messages that contain sensitive information.
• Files containing passwords.
• Sensitive directories.

Question 8

Who are WHOIS databases maintained by?

Answer 8

Regional Internet Registries.

Question 9

What does a WHOIS query return?

Answer 9

• Domain name details.
• Contact details of domain owner.
• Domain name servers.
• NetRange.
• When a domain has been created.
• Expiry records.
• Records last updated.

Question 10

How can information gathered from WHOIS databases help an attacker?

Answer 10

• Create detailed map of organizational network.
• Gather personal information that assists to perform social engineering.
• Gather other internal network details, etc.

Question 11

What are the 5 Regional Internet Registries (RIR)?

Answer 11

• AFRINIC
• ARIN
• APNIC
• RIPE NCC
• LACNIC

Question 12

What is SmartWHOIS?

Answer 12

A useful network information utility that allows you to look up all the available information about an IP address, hostname, or domain.

Question 13

What can be determined by extracting DNS information?

Answer 13

Key hosts in the network and can perform social engineering attacks.

Question 14

What are 10 DNS record types?

Answer 14

• A
• MX
• NS
• CNAME
• SOA
• SRV
• PTR
• RP
• HINFO
• TXT

Question 15

Describe an “A” record.

Answer 15

Points to a host’s IP address.

Question 16

Describe a “MX” record.

Answer 16

Points to domain’s mall server.

Question 17

Describe a “NS” record.

Answer 17

Points to host’s name server.

Question 18

Describe a “CNAME” record.

Answer 18

Canonical naming allows aliases to a host.

Question 19

Describe a “SOA” record.

Answer 19

Indicate authority for domain.

Question 20

Describe a “SRV” record.

Answer 20

Service records.

Question 21

Describe a “PTR” record.

Answer 21

Maps IP address to a hostname.