Questions tagged [reconnaissance]
The process of collecting information about an intended target of a malicious hack by probing the target system.
58 questions
0
votes
1
answer
172
views
Is it possible to detect IDS name and version
the title said it. Is it possible to detect IDS name and version. If server use Snort as IDS, would I be able to detect it from external PC? And if it's possible how?
- 11
3
votes
1
answer
336
views
Does OpenSSL leave any traces that a server uses it?
I was thinking that maybe the banners can give some insight as to whether a server is using OpenSSL. Is there any tell tale signs that a server is using OpenSSL?
-- Clarification:
Speaking in terms ...
- 869
1
vote
1
answer
554
views
Does shodan JSON API use my IP address?
I want to find out if shodan uses my ip adresse to query the target after sending this HTTP request: https://api.shodan.io/shodan/host/{target_ip}?key={MY_API_KEY}
so is shodan API a passive or ...
- 49
3
votes
2
answers
8k
views
Spoofing OS during browsing
I am using http://www.mybrowserinfo.com/ to gather some info about me while browsing.
I want to change my OS to appear that its a Windows Xp machine.(No VM solutions please:D)
If you have any ...
- 2,871
3
votes
1
answer
2k
views
Strange packets coming over wireless, looking for clues
While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
- 261
3
votes
1
answer
3k
views
OS fingerprinting protection - why not by default?
This article describes how to fool nmap in it's OS fingerprinting detection.
In short, nmap sends malformed packets to open and closed ports and listens to the responses. Because every OS implements ...
- 1,907
8
votes
3
answers
10k
views
How to know if two IP addresses point to the same web server?
Doing some testing against two IP address in the scope I find one web server in each one. Both host what it seems the same web application.
They are different public (accessible through Internet) IP ...
- 2,789
50
votes
8
answers
65k
views
How can I find subdomains of a site?
One of the things I need to do from time to time is to find subdomains of a site for example.
Starting with example.com
sub1.example.com
other.example.com
another.example.com
I'm ...
- 11.5k