Netcraft
Netcraft is an internet service company offering a free web portal
that performs various information gathering functions
such as discovering which technologies are running on a given website
and finding which other hosts share the same IP netblock.
Using services such as Netcraft is considered a passive technique,
since we never directly interact with our target.
Let’s review some of Netcraft’s capabilities.
For example, we can use Netcraft’s DNS search page
to gather information about the megacorpone.com domain:
For each server found, we can view a “site report”
that provides additional information and history about the server
by clicking on the file icon next to each site URL.
The start of the report covers registration information.
However, if we scroll down,
we discover various “site technology” entries.
This list of subdomains and technologies will prove useful as we move on
to active information gathering and exploitation.