Passive info gathering

• check Foollowing pages :

  • robots.txt

  • sitemap_index.xml

• Tools to use

  • whois - cli tool

  • netcraft - https://sitereport.netcraft.com/

  • dnsrecon -d <url>

  • dnsdumpster - https://dnsdumpster.com/

  • wafw00f - tells what firefall a website is using

• google dorks

  • site:website.com : it will show results only related to website.com

    • site:*.website.com shows subdomains.

  • inurl:title to search within the domain (can use with site)