Search Engine and Online Resources

Question 1

First things to do at the beginning of the footprinting process:

Answer 1

1. Attempt to gather all publicly available information pertaining to your target and organize it all to be used as a means of leverage.
2. After you collect all you can from public records, then you will move on to more active forms of information gathering.
   3.

Question 2

General notes:

Answer 2

• use search engines to look into your targets.
• DuckDuckGo’ll respect your privacy, but Google is more capable in certain areas.
• ex: type site:linuxacademy.com to find information pertinent to that website
• learn all you can about the staff/employees of the company, because though them, you’ll be able to gain a lot more access to the company and information regarding the company as a whole.
• contact employees through social media, start conversations, learn applicable information from those conversations.
• to find the employees of a particular company, you could type something like “site:[company website] employees/team”.
• once you discover an employee of the target company, you will very likely be able to find more applicable information from their social media/LinkedIn pages.
• the vast majority of companies do not give their employees training in terms of dealing with attack in the form of social engineering. This also means that most employees won’t be able to easily recognize when someone is attempting to gain information from them.
• Google hacking database is ganna be a valuable resource for you right now.