Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

PWK > Passive Information Gathering > Flashcards

Passive Information Gathering Flashcards

1
Q

What is whois?

A

Whois is a TCP service, tool, and a type of database that can provide information about a domain name, such as the name server and registrar. This information is often public since registrars charge a fee for private registration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How to gather basic information about website “megacorpone.com” using whois?

A

whois megacorpone.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How to do whois reverse lookup?

A

whois ip address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How to search with site operator “megacorpone.com”?

A

site: megacorpone.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How to declare PHP filetype for searching in google?

A

filetype:php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How to search in google for php file on domain megacorpone.com?

A

site:megacorpone.com filetype:php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What SIEM mean?

A

Security Information and Event Management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is SIEM tools designed for?

A

Monitor applications and network traffic for malicious activities. Usually these tools are only available on internal networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How to find interesting non-HTML pages on megacorpone.com?

A

site:megacorpone.com -filetype:html

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the exclude operator in Google Hacking?

A

-

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to use Google to find directory listings?

A

intitle: “index of” “parent directory”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is GHDB?

A

Google Hacking Database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is netcraft?

A

Netcraft is an Internet services company based in England offering a free web portal that performs various information gathering functions. The use of services such as those offered by Netcraft is considered a passive technique since we never interact with our target directly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is recon-ng?

A

recon-ng is a module-based framework for web-based information gathering. Recon-ng displays the results of a module to the terminal but it also stores them in a database. Much of the power of recon-ng lies in feeding the results of one module into another, allowing us to quickly expand the scope of our information gathering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How to start recon-ng?

A

recon-ng

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How to search recon-ng marketplace for GitHub modules?

A

marketplace search github

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How to get information on a module with path recon/domains-hosts/google_site_web on recon-ng?

A

marketplace info recon/domains-hosts/google_site_web

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How to install a module on recon-ng with path recon/domains-hosts/google_site_web?

A

marketplace install recon/domains-hosts/google_site_web

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How to load module in recon-ng with path recon/domains-hosts/google_site_web?

A

[recon-ng][default] > modules load recon/domains-hosts/google_site_web

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How to set a source “megacorpone.com” in recon-ng?

A

[recon-ng][default][google_site_web] > options set SOURCE megacorpone.com
SOURCE => megacorpone.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How to run a module in recon-ng?

A

[recon-ng][default][google_site_web] > run

22
Q

How to show hosts in recon-ng?

A

[recon-ng][default] > show hosts

23
Q

How to obtain module information for recon/hosts-hosts/resolve?

A

[recon-ng][default] > marketplace info recon/hosts-hosts/resolve

24
Q

How to install the resolve module with path recon/hosts-hosts/resolve?

A

[recon-ng][default] > marketplace install recon/hosts-hosts/resolve

25
Q

How to install and view recon/hosts-hosts/resolve?

A

[recon-ng][default] > modules load recon/hosts-hosts/resolve

[recon-ng][default][resolve] > info

26
Q

How to show hosts after multiple modules using recon-ng?

A

[recon-ng][default][resolve] > show hosts

27
Q

What is shodan?

A

Shodan is a search engine that crawls devices connected to the Internet including but not limited to the World Wide Web. This includes the servers that run websites but also devices like routers and IoT devices.

28
Q

How to search MegaCorp One’s domain with Shodan?

A

hostname:megacorpone.com

29
Q

How to check if MegaCorp One servers running SSH using Shodan?

A

hostname: megacorpone.com port:”22”

30
Q

What Security Headers do?

A

Analyze HTTP response headers and provide basic, analysis of the target site’s security posture.

31
Q

What SSL Server Test do?

A

This tool analyzes a server’s SSL/TLS configuration and compares it against current best practices. It will also identify some SSL/TLS related vulnerabilities, such as Poodle or Heartbleed.

32
Q

What is Pastebin?

A

Pastebin is a website for storing and sharing text. Many people use Pastebin because it is ubiquitous and simple to use. But since Pastebin is a public service, we can use it to search for sensitive information.

33
Q

What theHarvester do?

A

Gathers emails, names, subdomains, IPs, and URLs from multiple public data sources.

34
Q

What option ‘-d’ do in theHarvester?

A

Specify target domain.

35
Q

What option ‘-b’ do in theHarvester?

A

Set the data source to search.

36
Q

How to run theHarvester on megacorpone.com and set the data source to search as google?

A

theharvester -d megacorpone.com -b google

37
Q

How to use theHarvester to enumerate emails addresses for megacorpone.com?

A

theHarvester -d megacorpone.com -b google.com

38
Q

What is TLD?

A

Top Level Domain

39
Q

How to use harvester to search megacorpone.com through baidu?

A

theHarvester -d megacorpone.com -b baidu

40
Q

How to use harvester to search megacorpone.com through LinkedIn?

A

theHarvester -d megacorpone.com -b linkedin

41
Q

How to use harvester to search megacorpone.com through twitter?

A

theHarvester -d megacorpone.com -b twitter

42
Q

How to use harvester to search megacorpone.com through virustotal?

A

theHarvester -d megacorpone.com -b virustotal

43
Q

How to use harvester to search megacorpone.com through netcraft?

A

theHarvester -d megacorpone.com -b netcraft

44
Q

How to use harvester to search megacorpone.com through yahoo?

A

theHarvester -d megacorpone.com -b yahoo

45
Q

What is Social-Searcher?

A

Social-Searcher is a search engine for social media sites. A free account will allow a limited number of searches per day. Social-searcher can be a quick alternative to setting up API keys on multiple more specialized services.

46
Q

What Twofi do?

A

Twofi scans a user’s Twitter feed and generates a personalized wordlist used for password attacks against that user. While we will not run any attacks during passive information gathering, we can run this tool against any Twitter accounts we have identified to have a wordlist ready when needed. Twofi requires a valid Twitter API key.

47
Q

What is linkedin2username?

A

linkedin2username is a script for generating username lists based on LinkedIn data. It requires valid LinkedIn credentials and depends on a LinkedIn connection to individuals in the target organization. The script will output usernames in several different formats.

48
Q

What is Stack Overflow?

A

Stack Overflow is a website for developers to ask and answer coding related questions.

49
Q

What OSINT Framework includes?

A

OSINT Framework includes information gathering tools and websites in one central location. Some tools listed in the framework cover more disciplines than information security.

50
Q

What is Maltego?

A

Maltego is a very powerful data mining tool that offers an endless combination of search tools and strategies.

51
Q

What Maltego do?

A

Maltego searches thousands of online data sources, and uses extremely clever “transforms” to convert one piece of information into another.

PWK (25 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions