Objetives

---

• Identify ips
• identify external sites
• Identify users
• Identify technologies
• Identify content
• Identify possible vulns
• identify subdomains

emails harvesting

---

tool: theharvester

root@kali: theharvester -d cisco.com -b google > google.txt
root@kali: theharvester -d cisco.com -l 10 -b bing > bing.txt

punk.sh

---

https://blog.hyperiongray.com/introducing-punk-sh/

SiteDigger

---

http://www.mcafee.com/us/downloads/free-tools/sitedigger.aspx

Shodan.io

Netcraft

---

• netcraft.com
• searchdns.netcraft.com