The lab will be run on Linux, using the BackTrack image available here.

• Passive activity - no interaction with the target
• Useful information:
  • External IP addresses
  • Employee phone numbers and e-mails
  • Employee profiles (Facebook, Google+, LinkedIn, …)
  • Active hosts and services (internal penetration testing)
• Techniques:
  • Google hacking
  • Whois and DNS queries
  • Using public databases: Netcraft.com , zone-h.com
  • Web site inspection
  • Network sniffing