Article Excerpt
Get info on a websites SSL certs, domain, headers, cookies, DNS records, technologies used, performance, hostnames, crawl rules, server info and more Often when I'm looking into a website, there's several things I always check first.
property | value |
tags | defensive-tradecraft,github-repo,offensive-tradecraft,tradecraft-tool |
url | |
original_word_count | 610 |
Long Summary
This article provides an overview of the various pieces of information that can be obtained through Open Source Intelligence (OSINT) techniques. It covers server information, domain information, and DNS security extensions.
Server information can be obtained through IP address lookups and analysis of HTTP response headers. This can provide valuable clues about the organization behind a website, such as the hosting provider, server type, and Autonomous System Number (ASN).
Domain information can be retrieved through Whois records, which provide a rich source of information, including the name and contact information of the domain registrant, the domain's creation and expiration dates, the domain's nameservers, and more. This information can be used to gain insights into the operational timeline of the entity, and to link together multiple domains owned by the same entity.
Finally, the article covers DNS security extensions, which are used to secure DNS lookups and prevent Man-in-the-Middle (MITM) attacks. DNSSEC information can provide insight into an organization's level of cybersecurity maturity and potential vulnerabilities.
The article also provides useful links for further reading and information on how to build and deploy the web-check.as93.net website. It is licensed under the MIT license and contributions of any kind are welcome.
Overall, this article provides a comprehensive overview of the various pieces of information that can be obtained through OSINT techniques, and how they can be used to gain insights into the organization behind a website. It also provides useful links and information on how to build and deploy the web-check.as93.net website. This is a valuable resource for anyone looking to gain a better understanding of OSINT and its applications.
The article provides a comprehensive overview of the various pieces of information that can be obtained through OSINT techniques, and how they can be used to gain insights into the organization behind a website. It covers server information, domain information, and DNS security extensions, as well as useful links and information on how to build and deploy the web-check.as93.net website. This is a valuable resource for anyone looking to gain a better understanding of OSINT and its applications.
This article provides a comprehensive overview of the various pieces of information that can be obtained through OSINT techniques, and how they can be used to gain insights into the organization behind a website. It covers server information, domain information, and DNS security extensions, as well as useful links and information on
Short Summary
📓 Lissy93/web-check
👉🏽 Get info on a websites SSL certs, domain, headers, cookies, DNS records, technologies used, performance, hostnames, crawl rules, server info and more Often when I'm looking into a website, there's several things I always check first. how to build and deploy the web-check.as93.net website. It is licensed under the MIT license and welcomes contributions.
🔗 source link: https://github.com/Lissy93/web-check