Fariz Ihsan Yazid Blog

This week, I learned about the target scoping and information gathering. Information gathering and target scoping is a crucially important step on penetration testing hence without gathering much information the pentest won’t be a success. next this week also I learn how to use the tools that are designed for information gathering

• The tool that I learned on this week
  • whois lookup
    • WHOIS lookup is an information-gathering tool that has a purpose to search the public databases in every specific domain such as registration, expiration date, etc. also this tools is very handy to know what the lower lever user capable to do
  • dnsenum
    • similar to whois lookup but this tool is focusing on enumerating the web domain. the other feature that available on this tool is finding subdomains of target
  • sam spade
    • sam spade is a little bit different from the other since this tool is specially made for Windows operating system. However the usage of this tool is similar with two previous tool that i mentions