OSINT

Question 1

WHOIS

Answer 1

domain lookup allows you to trace the ownership and tenure of a domain name.

Question 2

Nslookup

Answer 2

queries DNS records for a given domain name. It allows you to view all the DNS records for a website.

Question 3

Fingerprinting Organization with Collected Archives (FOCA)

Answer 3

a tool used mainly to find metadata and hidden information in the documents it scans.

Question 4

theHarvester

Answer 4

a tool for gathering subdomain names, e-mail addresses, virtual hosts, open ports/ banners, and employee names from different public sources (search engines, pgp key servers).

Question 5

Shodan

Answer 5

a search engine that lets users search for various types of servers connected to the internet using a variety of filters. Some have also described it as a search engine of service banners, which are metadata that the server sends back to the client.

Question 6

Maltego

Answer 6

Maltego is software used for open-source intelligence and forensics

Question 7

Recon-ng

Answer 7

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Question 8

Censys

Answer 8

provides a 360-degree depiction of an organization’s Internet attack surface, with the ability to assess and index IP addresses, parse TLS certificates, and track domains.