👩💻Website tools for Reconnaissance
Websites used for hacking
General Reconnaissance
https://www.cvedetails.com/ Use CVE Details to find out details about vulnerabilities
https://www.google.co.uk/advanced_search Use this for an advanced Google search
https://www.exploit-db.com/google-hacking-database Use this to help you with your advanced searches on Google as part of offensive security
https://www.spokeo.com/ This is a people search that uses public records, white page listings, and social networking sites to find as much information as possible.
Website Reconnaissance & Footprinting
https://updown.io/ and https://montastic.com/ This is a way to monitor for up and downtime
https://www.similarweb.com/ This helps you to investigate the traffic of a website
Dont forget - Google Adwords
https://www.shodan.io/ This is a search engine for everything that uses the website, - still need to find out more about how to use this
https://www.kali.org/tools/metagoofil/ Extracts metadata from the target and put it into a web page
https://archive.org/web/ Traces of the internet stay online for many, many years.
Email Reconnaissance
https://getmara.com/static/email-address-generator.html This is an email address generator once you have identified a pattern.
https://mxtoolbox.com/public/content/emailheaders/ Use this to get in-depth details about the email header
https://www.whatismyip.com/email-header-analyzer/ Email Header Analysis tool
DNS & Netork Reconnaissance
https://github.com/chrissanders/packets Chris Sanders has written a very good book on Wireshark and has an example of a DNS attack of a transfer and a response.
https://brainstorm.domains/ This will help you to generate a database of domain names
https://www.broadbandsearch.net/ping This tells us that we can reach a domain name
https://toolbox.googleapps.com/apps/dig/ Used for DIG
Last updated