Digital Forensics and Reconnaissance

The video tutorial by Toby from Oine Security covers a C Master lab for Security Plus 701, focusing on the reconnaissance phase of pentesting. It demonstrates the use of various reconnaissance tools, including open-source options, to gather information about a target. The tutorial also explores domain and DNS reconnaissance using tools like whois, NS lookup, and dig. Additionally, it introduces Google Dorking techniques for advanced search capabilities and discusses open-source information gathering using platforms like Netcraft and Peak you. The video emphasizes the importance of reconnaissance in pentesting and provides practical examples and tips for effective information gathering.

What is the primary focus of the lab discussed in the video?

• Exploitation

• Reconnaissance

• Reporting

• Post-exploitation

Which command is used to find the IP address on a Kali machine?

• ifconfig

• ipconfig

• ping

• IPA

What information can the 'whois' tool provide?

• Firewall status

• Operating system

• IP address

• Domain registration details

What is the purpose of using NS lookup in DNS reconnaissance?

• To change DNS settings

• To find DNS records

• To encrypt DNS queries

• To block DNS requests

Which DNS record type is used to find the mail server for a domain?

• A record

• CNAME record

• MX record

• NS record

What is Google Dorking primarily used for?

• Blocking search engines

• Encrypting web traffic

• Finding hidden web pages

• Improving search engine ranking

Which file type is commonly searched for using Google Dorking to find site restrictions?

• robots.txt

• sitemap.xml

• config.cfg

• index.html

What kind of information can Netcraft provide about a domain?

• Firewall configurations

• Domain registration and server details

• User passwords

• Operating system versions

Which website can be used to find public records and information about individuals?

• Netcraft

• Search Systems

• Whois

• Google

What is the main goal of the reconnaissance phase in pentesting?

• To exploit vulnerabilities

• To gather as much information as possible

• To report findings

• To secure the network