AtomShards Posted February 22, 2018 Share Posted February 22, 2018 What are your best methods for gathering information through OSINT? Are there particular search tools or just good methods? All help is greatly appreciated. Quote Link to comment Share on other sites More sharing options...
The Power Company Posted February 22, 2018 Share Posted February 22, 2018 My favorite is DNSdumpster, a free recon tool for public domains. It has links to a bunch of other free tools as well. For example, if you enter hak5.org into the search bar, each ip address has a link to get http headers, do an online nmap scan, trace the path, etc. This can be very helpful for bug bounties, as it can give you an idea of how websites are set up. Quote Link to comment Share on other sites More sharing options...
AtomShards Posted February 23, 2018 Author Share Posted February 23, 2018 5 hours ago, The Power Company said: My favorite is DNSdumpster, a free recon tool for public domains. It has links to a bunch of other free tools as well. For example, if you enter hak5.org into the search bar, each ip address has a link to get http headers, do an online nmap scan, trace the path, etc. This can be very helpful for bug bounties, as it can give you an idea of how websites are set up. Awesome thank you Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.