Information Gathering in Web Applications

Training Overview

This training is focused on the information gathering process, which is a crucial first step in cybersecurity. The training covers active and passive information gathering techniques, providing foundational knowledge about different methods and tools that can be used to assess the security posture of a target. Active information gathering involves direct interaction with the target, while passive information gathering involves collecting information about the target without its knowledge.

In later sections of the training, detailed topics include Whois queries, identifying technologies used on target websites, using the Internet Archive (Wayback Machine), advanced search techniques like Google Dorks, metadata analysis, DNS enumeration, discovery tools like theHarvester, subdomain enumeration, and file and directory scanning methods. These topics provide a comprehensive guide to methodologies and tools that are useful when testing the security of a web application or conducting cybersecurity research.