CEH Practical: Gathering Target Information: Reconnaissance And Competitive Intelligence

CEH Exam Objectives:

Describe Reconnaissance. 

Describe aggressive/competitive intelligence.

Reconnaissance

 Reconnaissance is the process of gathering informative data about a particular target of a malicious hack by exploring the targeted system. Basically two types of Reconnaissance exist i.e. Active and Passive. Active reconnaissance typically related to port scanning and observing the vulnerabilities about the targeted system (i.e., which ports are left vulnerable and/or if there are ways around the firewall and routers). Passive reconnaissance typically you will not be directly connected to a computer system. This process is used to gather essential information without ever interacting with the target systems.

Understand Aggressive Intelligence 

Competitive intelligence means information gathering about competitors' products, marketing, and technologies. Most competitive intelligence is non intrusive to the company being investigated and is benign in nature. It's used for product comparison or as a sales and marketing tactic to better understand how competitors are positioning their products or services.

Online tools to gather competitive intelligence

Exercise 1.1

Using KeywordSpy 

To use the KeywordSpy online tool to gather competitive intelligence information:  

• Go to the www.keywordspy.com website and enter the website address of the target in the search field 

• Review the report and determine valuable keywords, links, or other information.

 

Exercise 1.2

Using spyfu

• Go to your browser and type www.spyfu.com and enter the website address of the target in the search field.
  

Exercise 1.3

Using the EDGAR Database to Gather Information

1. Determine the company's stock symbol using Google.

2. Open a web browser to www.sec.gov.

3. On the right side of the page, click the link EDGAR Filers. 

4. Click the Search For Filings menu and enter the company name or stock  symbol to search the filings for information. You can learn, for example, where the company is registered and who reported the filing.

5. Use the Yahoo! yellow pages ( http://yp.yahoo.com ) to see if an address or phone number is listed for any of the employee names you have located.

More info

1. Black Hat Hacker Tools
2. Underground Hacker Sites
3. How To Hack
4. Pentest Tools Alternative
5. Hacking Tools And Software
6. Pentest Tools Review
7. Wifi Hacker Tools For Windows
8. Hacker Tools Free Download
9. Pentest Tools Find Subdomains
10. Hack Apps
11. Pentest Tools Github
12. Nsa Hacker Tools
13. Hacker Tools For Mac
14. New Hacker Tools
15. Hacking Tools Kit
16. Hacker Tools For Mac
17. Github Hacking Tools
18. Hacking Tools For Games
19. Hacker Tools Apk
20. Hacking Tools Download
21. Pentest Tools Online
22. Hacker Search Tools
23. Hacking Apps
24. Best Pentesting Tools 2018
25. Hacker Tools Free
26. Pentest Tools Url Fuzzer
27. Hack App
28. Physical Pentest Tools
29. How To Hack