Passive Information Gathering
Michael Gregg · 2015
This chapter explores some common types of nontechnical security leak. It describes the ways in which information leakage can damage an organization and the huge amount of information that is publically available. The chapter also covers some common areas where attackers and others will look to gather information that gives them the potential to exploit a company or business entity. This technique is known as operations security (OPSEC). Dumpster diving is a low-tech attack that requires nothing more than knowing the address of the victim. There are many different ways to authenticate users. Common authentication types used by websites include the following: Basic, Forms based, Message digest, and Certificate. The chapter also provides some tasks to practice some Google hacking techniques. Finally, it looks at Internet domain ownership and how to find who owns a specific website.