|
Title: Information Gathering Post by: Determ on October 01, 2010, 06:51:34 AM Hello.
I haven't noticed any course or book about only information gathering (infrastructure & personal data). Also there is some non-official classes of penetration expertises (like exploits development, social engineering, malware analysis, forensics, wireless, etc.). Why is not Information Gathering a class for itself? Title: Re: Information Gathering Post by: ajohnson on October 01, 2010, 08:52:50 AM Do a search for open source information gathering. There's a ton of resources already available. Chris Gates has a good presentation that's an overview of a lot of the tools that are out there. Google Hacking by Johnny Long is an excellent written resource. Most ethical hacking/penetration testing books contain recon chapters that adequately cover common tools and techniques.
Title: Re: Information Gathering Post by: dante on October 01, 2010, 08:57:11 AM Information Gathering is a vital part of penetration testing and is covered in detail in good security books(Hacking exposed ?) and in good security courses(OSCP?).. I admit that I dont know a book dedicated to information gathering.. But if you are looking for advances in this area you should probably start with Chris Gates presentation on open source intelligence gathering at brucon...
Update @dynamik damn you are fast ... Title: Re: Information Gathering Post by: ziggy_567 on October 01, 2010, 09:44:00 AM Check out SANS 550 - Information Reconnaissance: Competitive Intelligence and Online Privacy. It is a one day class that talks about nothing but recon.
There's even a review on EH-Net: http://www.ethicalhacker.net/content/view/284/2/ Title: Re: Information Gathering Post by: Determ on October 04, 2010, 05:49:19 AM Googling with "Open Source IG" has given me lots of results. It kept me busy for weekend. 8)
Before posting I was wondering how to go "beyond" information gathering, since I'm doing OSCP and already saw Chris Gates presentation. So thanks for replies, they have given me more to work on. Title: Re: Information Gathering Post by: MaXe on October 04, 2010, 09:09:48 AM There's a good chapter about Information Gathering in The Penetration Testers Open Source Toolkit vol. 2 (book).
Tactical Exploitation by Valsmith and HD Moore has a good part too: http://blog.attackresearch.com/publications/hdmoore_valsmith_tactical_paper.pdf And of course: Information Gathering with MaXe - Part 1 (video): http://www.youtube.com/watch?v=1nd6vAz4SOw That's just a few resources to get you started ;) Best regards, MaXe Title: Re: Information Gathering Post by: COm_BOY on October 12, 2010, 11:56:05 AM do try Maltego v3 Community Edition ...... its awsome
Title: Re: Information Gathering Post by: Determ on October 17, 2010, 06:54:35 AM I have tried Maltego V3, great tool.
One questions: Is it possible to get a good book which will teach python from basic, but has to be focused more on python scripting for data, text and web mining? Title: Re: Information Gathering Post by: COm_BOY on October 17, 2010, 03:26:57 PM I have tried Maltego V3, great tool. One questions: Is it possible to get a good book which will teach python from basic, but has to be focused more on python scripting for data, text and web mining? Cant say much on that , check out amazon.com and check the comments of readers . Along with that do check out LinuxCBT Python Programing edition ( Video Training ) . I dont think its that expensive .
Powered by SMF 1.1.18 |
SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com |