☣️Reconnaissance

Search Engines

"search phrase" Find results with exact search phrase

OSINT filetype:pdf Find files of type PDF related to a certain term.

salary site:blog.tryhackme.com Limit search results to a specific site.

pentest -site:example.com Exclude a specific site from results

walkthrough intitle:TryHackMe Find pages with a specific term in the page title.

challenge inurl:tryhackme Find pages with a specific term in the page URL.

https://tryhackme.com/room/googledorking https://www.exploit-db.com/google-hacking-database Use https://archive.org/web/ for previous job offerdings on victim's website

whois dig, nslookup, host traceroute/tracert

https://viewdns.info/
https://threatintelligenceplatform.com/
https://search.censys.io/

recon-ng

recon-ng -w workspacename db schema db insert domains marketplace search KEYWORD marketplace info MODULE marketplace install MODULE marketplace remove MODULE

modules load MODULE CTRL+C to unload keys list keys add KEY_NAME KEY_VALUE

Find folders on Webserver

$ gobuster dir -q -u http://10.10.205.204:80 --wordlist /usr/share/wordlists/rockyou.txt.gz