Computer Engineering Department

Ethical Hacking Course

Homework #2 – Due to 20-11-2020

[Please, Do this HW. by yourself since you may discussed in some questions]

Notes:

1. For this homework, try to download a virtual box or virtual machine into
your computer. After that download Windows 8 or Windows 10 or Kali
Linux (according to your experience). If you can download a free VPN
service into this virtual machine.
2. To show your results take a screenshot from each output result you get.
3. Show the name of the tool that you used
4. If the tool you want to use is paid, try to use the trail version or search
for another tool to do the same task.
Q1: Footprinting: Select three universities in Turkey and use the tools that we
explained in the lecture to extract the following information for each one. For
each point give images and information for the used tool and gathered results

First University: Boğaziçi Üniversitesi

http://www.boun.edu.tr/

Second University: Koç University
Third University: Sabancı University
Q2: Use “Shodan” service to search for three different websites (select big
companies), show and explain the results. Search for other tools that can be
used for the same task and give their names.

As shown in figure FSMVU in shodan show us a lot of information about website we are searching
for, public IP, ports, technologies, services and vulnerabilities.

As shown in figure Google in shodan show us a lot of information about website we are
searching for, public IP, ports, technologies, services and vulnerabilities.
As shown in figure Facebook in shodan show us a lot of information about google
in Germany, public IP, ports, technologies, services and vulnerabilities.

Q3: Explain with five real examples how we can use both google operators and
google Advanced Search in gather information from a certain target.
1- cache:fb.com:
2- info:fb.com

3- inurl:face
4- link:fb.com

5- site:fb.com
Q4: Select a website for a certain company and then try the following steps to
gather some information from it:

I chose google,
Q5: Download one email tracking tool from Internet and use it to track some
emails. Show your results.

Then