{"id":137642,"date":"2024-12-18T12:48:37","date_gmt":"2024-12-18T07:18:37","guid":{"rendered":"https:\/\/www.vskills.in\/certification\/tutorial\/?page_id=137642"},"modified":"2024-12-18T12:48:38","modified_gmt":"2024-12-18T07:18:38","slug":"prerequisite-passive-information-gathering","status":"publish","type":"page","link":"https:\/\/www.vskills.in\/certification\/tutorial\/prerequisite-passive-information-gathering\/","title":{"rendered":"Prerequisite: Passive Information Gathering"},"content":{"rendered":"\n

Before diving into Nessus Scanner, it\u2019s essential to understand Passive Information Gathering<\/strong>, a foundational skill in cybersecurity. This step involves collecting information about a target system or network without directly interacting with it. Passive information gathering is crucial because it helps you build an understanding of the environment without triggering any alarms or alerts.<\/p>\n\n\n\n

Passive techniques allow you to identify key information about your target, such as IP ranges, domain details, DNS records, employee information, and technologies in use. These insights set the stage for effective vulnerability assessment with Nessus.<\/p>\n\n\n\n

Key Components of Passive Information Gathering:<\/h4>\n\n\n\n
    \n
  1. Open-Source Intelligence (OSINT):<\/strong>
    Use publicly available tools and resources, such as search engines, social media platforms, and WHOIS databases, to gather details about your target. This step is entirely non-intrusive, as it relies on information that is already exposed on the internet.<\/li>\n\n\n\n
  2. DNS Reconnaissance:<\/strong>
    Analyze domain records to uncover subdomains, MX records, TXT entries, and other DNS data. Tools like dig<\/code>, nslookup<\/code>, or online services like DNSDumpster are invaluable for this process.<\/li>\n\n\n\n
  3. Network Mapping:<\/strong>
    Collect IP range information and understand the target’s network layout. Resources like ARIN, RIPE, or APNIC can help identify ownership and range details.<\/li>\n\n\n\n
  4. Technology Fingerprinting:<\/strong>
    Discover what technologies the target uses, such as web servers, programming languages, or CMS platforms. Tools like BuiltWith or Netcraft provide insights into the technology stack, which can be critical for identifying vulnerabilities later.<\/li>\n\n\n\n
  5. Social Engineering Data Collection:<\/strong>
    Passively gather information about employees, emails, and organizational structure through social media platforms like LinkedIn, Facebook, or even company websites. This information can be useful for security assessments and testing social engineering vulnerabilities.<\/li>\n<\/ol>\n\n\n\n

    Tools for Passive Information Gathering:<\/h4>\n\n\n\n