Common tools and commands for information collection

0x00、 Subdomain collection

One 、oneforall

Operation platform ：kali

install ：OneForAll Subdomain tools _ Study hard '# The blog of -CSDN Blog _oneforall

Query command ：

python3.9 oneforall.py --target  Website domain name  run

Two 、fofa

function ： Webpage

Cyberspace mapping , Cyberspace Security search engine , Cyberspace search engine , Security situational awareness - FOFA Cyberspace mapping system FOFA It's a cyberspace search engine launched by white hat Hui , It's done by mapping cyberspace , It can help researchers or enterprises to quickly match network assets , For example, the scope of vulnerability impact analysis 、 Apply distribution statistics 、 Application popularity ranking statistics and so on .https://fofa.infofofa grammar ：

Check the subdomain name ：domain=“163.com”

FOFA grammar _ Tomato sauce blog -CSDN Blog _fofa grammar

0x01、 Port scanning

One 、 classic nmap

Operation platform ：kali、windows（ There are visualization software ）

command ：

  Two 、 Carry the handle masscan

// Scanning speed is fast , But it is more accurate nmap A little lower

masscan Detailed explanation _nex1less The blog of -CSDN Blog _masscan

Operation platform ：kali（ Bring their own ）

command ：

masscan Use the tutorial - Kali's Blog

 eg：

 0x02、whois Inquire about

One 、kali sentence

platform ：kali

command ：

whois + domain name 

Two 、 Website

platform ： Webpage

Address ：

1、 Home of stationmaster

Home of stationmaster ：https://whois.chinaz.com/https://whois.chinaz.com/

2、centralops( recommend )

Free online network tools - traceroute, nslookup, dig, whois lookup, ping - IPv6https://centralops.net/co/

0x03、IP Anti search domain name

platform ： Webpage

Address ：ip Address the query ip Inquire about check ip Public network ip Address attribution query Website ip Inquire about Same as ip Website query iP Anti search domain name iP Check the domain name Same as ip domain name https://www.ip138.com/

0x04、 E-mail address of website related personnel 、 account number 、 Password, etc

One 、bing

platform ：bing Webpage

Address ：

Bing Ying https://cn.bing.combing grammar ：

【xxx university   ID number filetype:xlsx】

（xxx The university changes to the inquiry website , The certificate number is changed to the query content ,filetype In query format ）

Search engine Bing Bing advanced search syntax - JavaShuohttp://www.javashuo.com/article/p-ohkgxycg-mr.html

Two 、github

Address ：GitHub: Where the world builds software · GitHubhttps://github.com grammar ：

xxx domain name && passwd（password、pass wait ）

0x05、 Email query

One 、phonebook

platform ： Webpage

Address ：

Phonebook.cz - Intelligence Xhttps://phonebook.cz

Two 、 Generate temporary mailbox

Address ：

Fake Mail Generator - Free temporary email addresseshttp://www.fakemailgenerator.com

 0x06 Comprehensive information collection （maltego Strong push ！！）

platform ：kali（ Bring their own ）

Use ：

Information gathering - Maltego_aFa Attack and defense lab blog -CSDN Blog _maltego What information can be collected https://blog.csdn.net/fageweiketang/article/details/83049669?spm=1001.2101.3001.6650.4&utm_medium=distribute.pc_relevant.none-task-blog-2%7Edefault%7ECTRLIST%7Edefault-4-83049669-blog-105943189.pc_relevant_blogantidownloadv1&depth_1-utm_source=distribute.pc_relevant.none-task-blog-2%7Edefault%7ECTRLIST%7Edefault-4-83049669-blog-105943189.pc_relevant_blogantidownloadv1&utm_relevant_index=8

0x07、 Social query

One 、 Cell phone number collision

The tool for checking the middle four digits of the mobile phone number https://vip.uutool.cn/no

Two 、 Check your mobile phone number qq

Q Bind query , Social worker library , cell-phone number ,QQ binding , check q Bind online query ,q Check the binding online , Check online , Personal information , The data reveal that https://cx.kpxdr.com/s.html

3、 ... and 、 Check your mobile number on Weibo

// If the microblog is set to not use the mobile number to search , Then you can't find

Check the microblog on your mobile phone https://api.nosoxo.com/tel_wb

Four 、 Alipay mobile phone number counter check name

5、 ... and 、 Pulse check company