Information Gathering Tools - Revision history

NKirnbauer: expired link changed with link from wayback machine

2024-10-14T14:00:51Z

expired link changed with link from wayback machine

← Older revision		Revision as of 14:00, 14 October 2024
Line 43:		Line 43:
	It is safe to say that it is a very powerful and useful tool, also very user friendly and quite fast. Maybe not the best for domains in the internet because it won't offer much more information than nmap and whois lookup, but when you look at the metasploitable output, so a scan of a server, you can see how much information is shown. The implementation of Hydra also gets you the cracked passwords in the vulnerabilities which is very useful.<br>		It is safe to say that it is a very powerful and useful tool, also very user friendly and quite fast. Maybe not the best for domains in the internet because it won't offer much more information than nmap and whois lookup, but when you look at the metasploitable output, so a scan of a server, you can see how much information is shown. The implementation of Hydra also gets you the cracked passwords in the vulnerabilities which is very useful.<br>
	<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>Overall definitely a recommended tool, nice GUI, works quickly and efficiently and is very well arranged and easy to navigate.</div>		<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>Overall definitely a recommended tool, nice GUI, works quickly and efficiently and is very well arranged and easy to navigate.</div>
	<u><i>For more information please refer to the full [https://govanguard.com/legion/#about-legion official Legion Framework website].</i></u>		<u><i>For more information please refer to the full [http://web.archive.org/web/20220815094559/https://govanguard.com/legion/#about-legion official Legion Framework website].</i></u>

	=== DMitry===		=== DMitry===

VHorvathova at 14:35, 24 June 2021

2021-06-24T14:35:23Z

← Older revision		Revision as of 14:35, 24 June 2021
Line 167:		Line 167:
	=== Maltego ===		=== Maltego ===
	<b>Category: Information Gathering - OSINT</b><br>		<b>Category: Information Gathering - OSINT</b><br>
	Maltego is a graphical footprinting tool with quite some extensions available. With the preinstalled extensions you can allready footprint any domain and view it as a tree. where this tree is formatted according to the amount discovered and may change to a mesh view, if it would get too crowded.		Maltego is a graphical footprinting tool with quite some extensions available. With the preinstalled extensions you can allready footprint any domain and view it as a tree, where this tree is formatted according to the amount discovered and may change to a mesh view, if it would get too crowded.

	[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]		[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]

MFriedl at 08:33, 24 June 2021

2021-06-24T08:33:07Z

← Older revision		Revision as of 08:33, 24 June 2021
Line 173:		Line 173:
	There is allready a page in this wiki for Maltego about how to create network trees yourself step by step and without the use of extensions: [[Maltego]]		There is allready a page in this wiki for Maltego about how to create network trees yourself step by step and without the use of extensions: [[Maltego]]
	<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>An extensive tool for footprinting that can look intimidating at first glance, but will help a lot gathering and saving information in a graphical way. It's easy to learn, offers quick success on learning and there are countless instuctions online on how to use Maltego for any level.</div>		<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>An extensive tool for footprinting that can look intimidating at first glance, but will help a lot gathering and saving information in a graphical way. It's easy to learn, offers quick success on learning and there are countless instuctions online on how to use Maltego for any level.</div>
			<u><i>For more information please refer to the official [https://www.maltego.com/ homepage] or an online instruction of your choice.</i></u>

	=== Netdiscover ===		=== Netdiscover ===

MFriedl at 08:30, 24 June 2021

2021-06-24T08:30:02Z

← Older revision		Revision as of 08:30, 24 June 2021
Line 171:		Line 171:
	[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]		[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]

	There is allready a page in this wiki for Maltego about how to create ~~networks~~ yourself without the use of extensions: [[Maltego]]		There is allready a page in this wiki for Maltego about how to create network trees yourself step by step and without the use of extensions: [[Maltego]]
			<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>An extensive tool for footprinting that can look intimidating at first glance, but will help a lot gathering and saving information in a graphical way. It's easy to learn, offers quick success on learning and there are countless instuctions online on how to use Maltego for any level.</div>

	=== Netdiscover ===		=== Netdiscover ===

MFriedl at 08:22, 24 June 2021

2021-06-24T08:22:52Z

← Older revision		Revision as of 08:22, 24 June 2021
Line 171:		Line 171:
	[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]		[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]

	There is allready a page in this wiki for Maltego about how to create networks yourself without the use of extensions: [[~~https://wiki.elvis.science/index.php?title=Maltego\|Documetation/~~Maltego]]		There is allready a page in this wiki for Maltego about how to create networks yourself without the use of extensions: [[Maltego]]

	=== Netdiscover ===		=== Netdiscover ===

MFriedl at 08:21, 24 June 2021

2021-06-24T08:21:19Z

← Older revision		Revision as of 08:21, 24 June 2021
Line 168:		Line 168:
	<b>Category: Information Gathering - OSINT</b><br>		<b>Category: Information Gathering - OSINT</b><br>
	Maltego is a graphical footprinting tool with quite some extensions available. With the preinstalled extensions you can allready footprint any domain and view it as a tree. where this tree is formatted according to the amount discovered and may change to a mesh view, if it would get too crowded.		Maltego is a graphical footprinting tool with quite some extensions available. With the preinstalled extensions you can allready footprint any domain and view it as a tree. where this tree is formatted according to the amount discovered and may change to a mesh view, if it would get too crowded.

	[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]		[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]

			There is allready a page in this wiki for Maltego about how to create networks yourself without the use of extensions: [[https://wiki.elvis.science/index.php?title=Maltego\|Documetation/Maltego]]

	=== Netdiscover ===		=== Netdiscover ===

MFriedl at 08:18, 24 June 2021

2021-06-24T08:18:33Z

← Older revision		Revision as of 08:18, 24 June 2021
Line 167:		Line 167:
	=== Maltego ===		=== Maltego ===
	<b>Category: Information Gathering - OSINT</b><br>		<b>Category: Information Gathering - OSINT</b><br>
			Maltego is a graphical footprinting tool with quite some extensions available. With the preinstalled extensions you can allready footprint any domain and view it as a tree. where this tree is formatted according to the amount discovered and may change to a mesh view, if it would get too crowded.
			[[File:Elvis.science.png\|thumb\|none\|700px\|Example footprinting of elvis.science]]

	=== Netdiscover ===		=== Netdiscover ===

VHorvathova at 18:38, 21 June 2021

2021-06-21T18:38:00Z

← Older revision		Revision as of 18:38, 21 June 2021
Line 39:		Line 39:
	No CVEs have been found. <br>Below is a comparison with the Metasploitable2 machine that can be found in the same subnet, so that it is clear how the vulnerabilities are shown in an actual weak system:		No CVEs have been found. <br>Below is a comparison with the Metasploitable2 machine that can be found in the same subnet, so that it is clear how the vulnerabilities are shown in an actual weak system:
	<div><ul>		<div><ul>
	<li style="display: inline-block;"> [[File:Meta legion.png\|thumb\|none\|~~900px~~\|Results of Legion Scan on Metasploitable2 VM]] </li>		<li style="display: inline-block;"> [[File:Meta legion.png\|thumb\|none\|1000px\|Results of Legion Scan on Metasploitable2 VM]] </li>
	</ul></div>		</ul></div>
	It is safe to say that it is a very powerful and useful tool, also very user friendly and quite fast. Maybe not the best for domains in the internet because it won't offer much more information than nmap and whois lookup, but when you look at the metasploitable output, so a scan of a server, you can see how much information is shown. The implementation of Hydra also gets you the cracked passwords in the vulnerabilities which is very useful.<br>		It is safe to say that it is a very powerful and useful tool, also very user friendly and quite fast. Maybe not the best for domains in the internet because it won't offer much more information than nmap and whois lookup, but when you look at the metasploitable output, so a scan of a server, you can see how much information is shown. The implementation of Hydra also gets you the cracked passwords in the vulnerabilities which is very useful.<br>

VHorvathova at 18:37, 21 June 2021

2021-06-21T18:37:34Z

← Older revision		Revision as of 18:37, 21 June 2021
Line 25:		Line 25:
	Execution takes <b>many days</b>, depending on the size of the target and the information available on the internet to that target. This specific inquiry took several days to complete and collect all information. Some parts of the information is displayed below, however the results were much more extensive:		Execution takes <b>many days</b>, depending on the size of the target and the information available on the internet to that target. This specific inquiry took several days to complete and collect all information. Some parts of the information is displayed below, however the results were much more extensive:
	<div><ul>		<div><ul>
	<li style="display: inline-block;"> [[File:Spiderscan.png\|thumb\|none\|~~700px~~\|Results of Spiderfoot Scan on www.fh-campuswien.ac.at]] </li>		<li style="display: inline-block;"> [[File:Spiderscan.png\|thumb\|none\|800px\|Results of Spiderfoot Scan on www.fh-campuswien.ac.at]] </li>
	</ul></div>		</ul></div>
	<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>This is a very good and very powerful reconnaissance framework. It really collects "anything and everything" about a target, as it states. The scans take a very long time, but the amount of information connected is priceless, it really searches through the whole www to provide any and every connection to the target. Based on the very user friendly and well-arranged GUI it is quite good for beginners too, however the amount of data delivered is useful only for professional security analysts who know what to do with the results, how to navigate them and how to interpret them.</div>		<div style="border: 1px solid #225207; background-color: #dffdcd; color: #225207; padding: 5px 10px; margin-bottom: 5px; text-align: justify"><b>Conclusion: </b>This is a very good and very powerful reconnaissance framework. It really collects "anything and everything" about a target, as it states. The scans take a very long time, but the amount of information connected is priceless, it really searches through the whole www to provide any and every connection to the target. Based on the very user friendly and well-arranged GUI it is quite good for beginners too, however the amount of data delivered is useful only for professional security analysts who know what to do with the results, how to navigate them and how to interpret them.</div>

VHorvathova at 14:48, 21 June 2021

2021-06-21T14:48:19Z

← Older revision		Revision as of 14:48, 21 June 2021
Line 6:		Line 6:

	* Operating system: Kali Linux 2021.1 amd64, Parrot Security 4.10 amd64		* Operating system: Kali Linux 2021.1 amd64, Parrot Security 4.10 amd64
	Disclaimer: all possible examples and tests done have been done in VMWare in a Kali Linux and ~~ParrotOS VM~~.		Disclaimer: all possible examples and tests done have been done in VMWare in a Kali Linux 2021.1 and the commands are up-to-date as of 21st June 2021.

	== Tools==		== Tools==