Please enable JavaScript.

Coggle requires JavaScript to display documents.

Ethical Hacking C374 - Coggle Diagram

- - - - Worksheet
        
        Host and DNS Zone Transfer
        
        NsLookup
        
        Whois
        
        Common DNS Resource Record Types
        
        Address Mapping record (A Record)
        
        DNS host record, stores a hostname and its corresponding IPv4 address.
        
        Name Server records (NS Record)
        
        specifies that a DNS Zone, such as “example.com” is delegated to a specific Authoritative Name Server, and provides the address of the name server.
        
        Mail exchanger record (MX Record)
        
        specifies an SMTP email server for the domain, used to route outgoing emails to an email server.
        
        Certificate record (CERT Record)
        
        stores encryption certificates—PKIX, SPKI, PGP, and so on.
        
        Canonical Name record (CNAME Record)
        
        can be used to alias a hostname to another hostname. When a DNS client requests a record that contains a CNAME, which points to another hostname, the DNS resolution process is repeated with the new hostname.
        
        Reverse-lookup Pointer records (PTR Record)
        
        allows a DNS resolver to provide an IP address and receive a hostname (reverse DNS lookup).
        
        IP Version 6 Address record (AAAA Record)
        
        IPv6 address.
        
        Service Location (SRV Record)
        
        a service location record, like MX but for other communication protocols.
        
        Text Record (TXT Record)
        
        typically carries machine-readable data such as opportunistic encryption, sender policy framework, DKIM, DMARC, etc.
        
        Start of Authority (SOA Record)
        
        this record appears at the beginning of a DNS zone file, and indicates the Authoritative Name Server for the current DNS zone, contact details for the domain administrator, domain serial number, and information on how frequently DNS information for this zone should be refreshed.
        
        theHarvester
        
        Google Hacking/ Dorking and other advance search engine techniques
        
        DuckDuckGo
        
        Shodan
        
        Job Posting and
        
        Netcraft
      - Research (Wiki) OSINT sources can be divided up into six different categories of information flow:
        
        Professional and Academic Publications
        
        information acquired from journals, conferences, symposia, academic papers, dissertations, and theses.
        
        Public Governement Data
        
        public government reports, budgets, hearings, telephone directories, press conferences, websites, and speeches. Although this source comes from an official source they are publicly accessible and may be used openly and freely
        
        Internet
        
        online publications, blogs, discussion groups, citizen media (i.e. – cell phone videos, and user created content), YouTube, and other social media websites (i.e. – Facebook, Twitter, Instagram, etc.). This source also outpaces a variety of other sources due to its timeliness and ease of access.
        
        Commercial Data
        
        commercial imagery, financial and industrial assessments, and databases.
        
        Media
        
        print newspapers, magazines, radio, and television from across and between countries.
        
        Grey Literature
        
        technical reports, preprints, patents, working papers, business documents, unpublished works, and newsletters.