Passive Infrastructure Identification

Netcraft

  • https://sitereport.netcraft.com

  • General information about the domain, including the date it was first seen by Netcraft crawlers.

  • Information about the netblock owner, hosting company, nameservers, etc.

  • Latest IPs used, webserver, and target OS.

Wayback Machine

  • American digital library that provides free public access to digitalized materials, including websites, collected automatically via its web crawlers.

  • We can access several versions of these websites using the Wayback Machine to find old versions that may have interesting comments in the source code or files that should not be there.

WayBackURLs by tomnomnom (similar to gau)

$ go install github.com/tomnomnom/waybackurls@latest
$ waybackurls -dates https://facebook.com > waybackurls.txt
$ cat waybackurls.txt
PreviousPassive Subdomain EnumerationNextActive Infrastructure Identification

Last updated