.

Information Gathering

<<

Determ

Newbie
Newbie

Posts: 23

Joined: Tue Jul 13, 2010 1:20 am

Post Fri Oct 01, 2010 6:51 am

Information Gathering

Hello.

I haven't noticed any course or book about only information gathering (infrastructure & personal data). Also there is some non-official classes of penetration expertises (like exploits development, social engineering, malware analysis, forensics, wireless, etc.). Why is not Information Gathering a class for itself?
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Fri Oct 01, 2010 8:52 am

Re: Information Gathering

Do a search for open source information gathering. There's a ton of resources already available. Chris Gates has a good presentation that's an overview of a lot of the tools that are out there. Google Hacking by Johnny Long is an excellent written resource. Most ethical hacking/penetration testing books contain recon chapters that adequately cover common tools and techniques.
The day you stop learning is the day you start becoming obsolete.
<<

dante

User avatar

Jr. Member
Jr. Member

Posts: 58

Joined: Wed Jul 21, 2010 10:17 pm

Post Fri Oct 01, 2010 8:57 am

Re: Information Gathering

Information Gathering is a vital part of penetration testing and is covered in detail in good security books(Hacking exposed ?) and in good security courses(OSCP?).. I admit that I dont know a book dedicated to information gathering.. But if you are looking for advances in this area you should probably start with Chris Gates presentation on open source intelligence gathering at brucon...

Update
@dynamik damn you are fast ...
Last edited by dante on Fri Oct 01, 2010 9:06 am, edited 1 time in total.
<<

ziggy_567

User avatar

Sr. Member
Sr. Member

Posts: 378

Joined: Tue Dec 30, 2008 1:53 pm

Post Fri Oct 01, 2010 9:44 am

Re: Information Gathering

Check out SANS 550 - Information Reconnaissance: Competitive Intelligence and Online Privacy. It is a one day class that talks about nothing but recon.

There's even a review on EH-Net:

http://www.ethicalhacker.net/content/view/284/2/
--
Ziggy


eCPPT - GSEC - GCIH - GWAPT - GCUX - RHCE - SCSecA - Security+ - Network+
<<

Determ

Newbie
Newbie

Posts: 23

Joined: Tue Jul 13, 2010 1:20 am

Post Mon Oct 04, 2010 5:49 am

Re: Information Gathering

Googling with "Open Source IG" has given me lots of results. It kept me busy for weekend.  8)

Before posting I was wondering how to go "beyond" information gathering, since I'm doing OSCP and already saw Chris Gates presentation.

So thanks for replies, they have given me more to work on.
<<

MaXe

User avatar

Hero Member
Hero Member

Posts: 671

Joined: Tue Aug 17, 2010 9:49 am

Post Mon Oct 04, 2010 9:09 am

Re: Information Gathering

There's a good chapter about Information Gathering in The Penetration Testers Open Source Toolkit vol. 2 (book).

Tactical Exploitation by Valsmith and HD Moore has a good part too:
http://blog.attackresearch.com/publicat ... _paper.pdf

And of course: Information Gathering with MaXe - Part 1 (video):
http://www.youtube.com/watch?v=1nd6vAz4SOw

That's just a few resources to get you started  ;)



Best regards,
MaXe
I'm an InterN0T'er
<<

COm_BOY

User avatar

Full Member
Full Member

Posts: 129

Joined: Tue Feb 03, 2009 10:40 am

Post Tue Oct 12, 2010 11:56 am

Re: Information Gathering

do try Maltego v3 Community Edition ...... its awsome
It has become appallingly obvious that our technology has exceeded our humanity.
<<

Determ

Newbie
Newbie

Posts: 23

Joined: Tue Jul 13, 2010 1:20 am

Post Sun Oct 17, 2010 6:54 am

Re: Information Gathering

I have tried Maltego V3, great tool.

One questions: Is it possible to get a good book which will teach python from basic, but has to be focused more on python scripting for data, text and web mining?
<<

COm_BOY

User avatar

Full Member
Full Member

Posts: 129

Joined: Tue Feb 03, 2009 10:40 am

Post Sun Oct 17, 2010 3:26 pm

Re: Information Gathering

Determ wrote:I have tried Maltego V3, great tool.

One questions: Is it possible to get a good book which will teach python from basic, but has to be focused more on python scripting for data, text and web mining?



Cant say much on that , check out amazon.com and check the comments of readers . Along with that do check out LinuxCBT Python Programing edition ( Video Training ) . I dont think its that expensive .
It has become appallingly obvious that our technology has exceeded our humanity.

Return to General Certification

Who is online

Users browsing this forum: No registered users and 2 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software