Choose three (3) tools that will yield information potentially useful for a penetration test. This information must be fundamentally different than previous tools, e.g.; not just another WHOIS tool. Use the lists at: http://osintframework.com/ and/or http://www.subliminalhacking.net/2012/12/27/osint-tools-recommendations-list/ for some tool ideas.

Tool 1:

Name: __________________________

Type of information found: ________________________________________________

How could this be useful in a penetration test? __________________________________

Tool 2:

Name: __________________________

Type of information found: ________________________________________________

How could this be useful in a penetration test? __________________________________

Tool 3:

Name: __________________________

Type of information found: ________________________________________________

How could this be useful in a penetration test? __________________________________

Firm 2:

Name: ______________

Corp. HQ addr: _____________.

Source: __________________

Website: _________________

IP range: __________________.

Source (which WHOIS site?): ____________________

Other domains owned: (Hint: Use a google search to find tools to do this reverse lookup): ______________________, ________________, ________________

Source (which tools did you use?) _____________________

Subdomains on the main website: ______________________, ____________________, __________________, ________________________

Source (which tools did you use?) _____________________

Mail servers: ___________________, ______________________

Does this company host its own mail? _______________.

How do you know? ______________