踩点

用搜索引擎

• Google Dork(Google Hacking)
  • Metagoofil：google dorks命令行
• shodan
• censys
• 反向搜图（reverse image search）
  • saucenao
  • ascii2d

Video/Image

https://mattw.io/youtube-metadata/ and press Enter.
YouTube Metadata tool collects singular details of a video, its uploader, playlist and its creator or channel.
You can use other video search engines such as Google videos (https://video.google.com), Yahoo videos (https://video.search.yahoo.com), etc.; video analysis tools such as EZGif (https://ezgif.com), VideoReverser.com, etc.; and reverse image search tools such as TinEye Reverse Image Search (https://tineye.com), Yahoo Image Search (https://images.search.yahoo.com), etc. to gather crucial information about the target organization.

用Web服务

• netcraft
• Sublist3r (https://github.com)
• Pentest-Tools Find Subdomains (https://pentest-tools.com)

人/Email

• Email Header
• theHarvester
• Social Searcher (https://www.social-searcher.com)

UserRecon (https://github.com) Followerwonk（ https://followerwonk.com/analyze） Hootsuite (https://hootsuite.com) Sysomos (https://www.sysomos.com)

https://www.peekyou.com and press Enter. If cookie pop-up appears at the lower section of the browser, click I agree. pipl (https://pipl.com) Intelius (https://www.intelius.com) BeenVerified (https://www.beenverified.com)

暗网

• TOR

网站足迹

• walk through
• Web档案：https://archive.org/
• 镜像
  • HTTrack Web Site Copier

工具

• Recon-ng
• Maltego
• 报头扫描器 (https://securityheaders.com)