The lab will be run on Linux, using the BackTrack image available here.

• Passive activity - no interaction with the target
• Useful information:
  • External IP addresses
  • Employee phone numbers and e-mails
  • Employee profiles (Facebook, Google+, LinkedIn, …)
  • Active hosts and services (internal penetration testing)
• Techniques:
  • Google hacking
  • Whois and DNS queries
  • Using public databases: Netcraft.com , zone-h.com
  • Web site inspection
  • Network sniffing

• site: restricts the results of the query to the specified site: site:pub.ro “error in your SQL syntax”
• intitle: / allintitle: - the keywords cand be found in the page title: intitle:“index of” intext:“parent directory”
• filetype: specifies the file extension: filetype:doc site:pub.ro
• Explicit Inclusion: +: +123456 “yahoo.com” site:pastebin.com
• Explicit Exclusion: -: +virus –biology
• More at: http://www.google.com/help/operators.html and http://www.hackersforcharity.org/ghdb/