Footprinting Techniques
Footprinting is the systematic process of mapping a target's network and infrastructure to build a detailed profile before testing begins.
Domain and DNS Footprinting
Examining domain registration details and DNS records reveals hosting providers, subdomains, and mail servers, all useful clues about how a target's infrastructure is organized.
Network Footprinting
Identifying IP address ranges, network topology, and connected devices helps testers understand the scope of systems that fall within the engagement.
Website and Email Footprinting
Analyzing a website's structure, technologies, and publicly listed email formats can expose information useful for both technical attacks and social engineering.
Combining Footprinting with OSINT
Footprinting and OSINT often overlap, and together they give a tester a comprehensive view of the target before any scanning tools are ever run.