February 11, 2004

Passive Information Gathering

Gunter Ollmann has released a paper on "Passive Information Gathering: The Analysis of leaked Network Security Information". Information leakage caused by weaker configurations allows an investigator to passively collect data which may not wished to be disclosed. In the paper he gives step-by-step instructions on how to use this weakness and find useful information in things like DNS records, mail server trace paths etc.

Although these are older techniques, he has put that in a way that makes it easy to read and understand. If there is something you haven't known about passive information gathering techniques, you will be sure to pick it up here.

Happy reading.

Posted by SilverStr at February 11, 2004 08:23 AM | TrackBack