Section 08: Footprinting Tools and Countermeasures

Tools

Recon-ng

Recon-ng is a Web Reconnaissance tool written in Python. It has so many modules, database interaction, built-in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can be conducted, and we can gather all information.

Links

• https://github.com/lanmaster53/recon-ng

Countermeasures

Split DNS

In computer networking, split-horizon DNS (also known as split-view DNS, split-brain DNS, or split DNS) is the facility of a Domain Name System (DNS) implementation to provide different sets of DNS information, usually selected by the source address of the DNS request.

Links

• https://en.wikipedia.org/wiki/Split-horizon_DNS

Some countermeasures are listed below.

• Restrict network access to social media from the corporate network.

• Security awereness training

• Harden web servers

• Split DNS into internal and external servers or use split DNS.

• Disable unused protocols

• Have a good on and offboarding strategy