Monday, April 13, 2020

CEH Practical: Gathering Target Information: Reconnaissance And Competitive Intelligence

CEH Exam Objectives:

Describe Reconnaissance. 

Describe aggressive/competitive intelligence.


Reconnaissance

 Reconnaissance is the process of gathering informative data about a particular target of a malicious hack by exploring the targeted system. Basically two types of Reconnaissance exist i.e. Active and Passive. Active reconnaissance typically related to port scanning and observing the vulnerabilities about the targeted system (i.e., which ports are left vulnerable and/or if there are ways around the firewall and routers). Passive reconnaissance typically you will not be directly connected to a computer system. This process is used to gather essential information without ever interacting with the target systems.

Understand Aggressive Intelligence 

Competitive intelligence means information gathering about competitors' products, marketing, and technologies. Most competitive intelligence is non intrusive to the company being investigated and is benign in nature. It's used for product comparison or as a sales and marketing tactic to better understand how competitors are positioning their products or services.

Online tools to gather competitive intelligence

Exercise 1.1

Using KeywordSpy 

To use the KeywordSpy online tool to gather competitive intelligence information:  
  • Go to the www.keywordspy.com website and enter the website address of the target in the search field 

  • Review the report and determine valuable keywords, links, or other information.

 

Exercise 1.2

Using spyfu

  • Go to your browser and type www.spyfu.com and enter the website address of the target in the search field.

Exercise 1.3

Using the EDGAR Database to Gather Information

1. Determine the company's stock symbol using Google.

2. Open a web browser to www.sec.gov.


3. On the right side of the page, click the link EDGAR Filers. 


4. Click the Search For Filings menu and enter the company name or stock  symbol to search the filings for information. You can learn, for example, where the company is registered and who reported the filing.

5. Use the Yahoo! yellow pages ( http://yp.yahoo.com ) to see if an address or phone number is listed for any of the employee names you have located.

More articles
  1. Pentest Tools Android
  2. Hacking Tools Hardware
  3. Hacking Tools Mac
  4. Hacking Tools Download
  5. Nsa Hack Tools
  6. Pentest Tools Url Fuzzer
  7. Pentest Tools List
  8. Pentest Tools Android
  9. Pentest Tools Open Source
  10. Pentest Tools Subdomain
  11. Pentest Tools Find Subdomains
  12. Hack Tools Pc
  13. Pentest Tools Website
  14. Best Hacking Tools 2020
  15. Hacking Tools Usb
  16. Pentest Tools Android
  17. Hacker Tools Apk Download
  18. Hack Tools Github
  19. Pentest Tools Android
  20. What Are Hacking Tools
  21. World No 1 Hacker Software
  22. Bluetooth Hacking Tools Kali
  23. Ethical Hacker Tools

No comments:

Post a Comment