foot printing

foot printing is an ethical hacking technique use to gather as much data as

possible about a specific targeted computer system and also used for finding
vulnarabilities.
vulnarabilities versus exploids
an exploid is a piece of software a bit of data or a series of commands
to perform unwanted or unauthorized actions
note: attackers employed exploids to enter systems and obtain acess to sensitive
data or take control in the systems in the field of computer security
different kinds of information that can be gathered from foot printing as follows
1)operating system of the target system
2)firewalls
3)ip address
4)network map
5)security configuration of the target systems
6)email id and passwords
7)server configuration
8)url's
9)vpn(virtual personal network)
this footprinting process is known as ethical hacking and

commands to know
ping
ip2 country
path analyser pro
visual root
if the ttl valued for ping reply is between 35 and 64 it is a unix/linux host.
if the ttl valued for windows reply is between 98 and 128 it is windows.
if the ttl value for ping value between 226 and 255 it is an network device like a
router or switch
nslookup
nslookup is used for to obtain domain name or ip address
ipconfig/all
to test that ping www.
C:\Users\DELL>tracert google.com

Tracing route to google.com [2404:6800:4007:81b::200e]

over a maximum of 30 hops:

1 2604 ms 96 ms 7 ms 2409:4070:2c3a:a89b::3e
2 * * * Request timed out.
3 676 ms 618 ms 920 ms 2405:200:393:eeee:20::1908
4 677 ms 470 ms 508 ms 2405:200:801:700::cc2
5 525 ms 342 ms 758 ms 2405:200:801:700::cbf
6 547 ms 550 ms 671 ms 2405:200:801:700::b4d
7 330 ms 309 ms 551 ms 2001:4860:1:1::15aa
8 653 ms 515 ms 713 ms 2001:4860:1:1::15aa
9 417 ms * 411 ms 2404:6800:809a::1
10 665 ms 202 ms 162 ms 2001:4860:0:1::aca
11 172 ms 204 ms 271 ms 2001:4860:0:133f::8
12 279 ms 407 ms 240 ms 2001:4860::1c:4001:1d54
13 499 ms 197 ms 184 ms 2001:4860:0:1::5667
14 197 ms 149 ms 353 ms maa05s20-in-x0e.1e100.net
[2404:6800:4007:81b::200e]

Trace complete.

C:\Users\DELL>ping www.google.com
Pinging www.google.com [2404:6800:4007:816::2004] with 32 bytes of data:
Request timed out.
Reply from 2404:6800:4007:816::2004: time=176ms
Reply from 2404:6800:4007:816::2004: time=192ms
Reply from 2404:6800:4007:816::2004: time=310ms

Ping statistics for 2404:6800:4007:816::2004:

Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
Minimum = 176ms, Maximum = 310ms, Average = 226ms
C:\Users\DELL>ping 56.108.3.2

Pinging 56.108.3.2 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 56.108.3.2:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Users\DELL>ping 49.207.9.1

Pinging 49.207.9.1 with 32 bytes of data:

Reply from 49.207.9.1: bytes=32 time=90ms TTL=51
Reply from 49.207.9.1: bytes=32 time=135ms TTL=51
Reply from 49.207.9.1: bytes=32 time=100ms TTL=51
Reply from 49.207.9.1: bytes=32 time=125ms TTL=51

Ping statistics for 49.207.9.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 90ms, Maximum = 135ms, Average = 112ms

C:\Users\DELL>windows 123.99.3.1
'windows' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\DELL>ping 123.99.3.1

Pinging 123.99.3.1 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 123.99.3.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Users\DELL>nslookup
DNS request timed out.
timeout was 2 seconds.
Default Server: UnKnown
Address: 192.168.137.231

>
> exit

C:\Users\DELL>ping 192.168.137.231
Pinging 192.168.137.231 with 32 bytes of data:
Reply from 192.168.137.231: bytes=32 time=18ms TTL=64
Reply from 192.168.137.231: bytes=32 time=5ms TTL=64
Reply from 192.168.137.231: bytes=32 time=12ms TTL=64
Reply from 192.168.137.231: bytes=32 time=16ms TTL=64

Ping statistics for 192.168.137.231:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 5ms, Maximum = 18ms, Average = 12ms

C:\Users\DELL>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DESKTOP-OHK1FCF

Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Local Area Connection* 3:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #3
Physical Address. . . . . . . . . : 32-03-C8-3E-17-29
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 4:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #4
Physical Address. . . . . . . . . : B2-03-C8-3E-17-29
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Realtek 8821CE Wireless LAN 802.11ac PCI-E
NIC
Physical Address. . . . . . . . . : 30-03-C8-3E-17-29
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . :
2409:4070:2c3a:a89b:848a:b02d:6280:4082(Preferred)
Temporary IPv6 Address. . . . . . :
2409:4070:2c3a:a89b:d0bb:a95c:252b:d848(Preferred)
Link-local IPv6 Address . . . . . : fe80::2e13:650c:ff97:d0d2%5(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.137.121(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 07 January 2023 10:32:12
Lease Expires . . . . . . . . . . : 07 January 2023 11:32:10
Default Gateway . . . . . . . . . : fe80::3c68:d6ff:fe55:3c26%5
192.168.137.231
 DHCP Server . . . . . . . . . . . : 192.168.137.231
DHCPv6 IAID . . . . . . . . . . . : 87032776
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-2B-21-D7-20-30-03-C8-3E-17-29
DNS Servers . . . . . . . . . . . : 192.168.137.231
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter vEthernet (WSL):

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter
Physical Address. . . . . . . . . : 00-15-5D-91-D0-75
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::7e4:8b61:94e2:2537%37(Preferred)
IPv4 Address. . . . . . . . . . . : 172.30.192.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.240.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 620762461
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-2B-21-D7-20-30-03-C8-3E-17-29
NetBIOS over Tcpip. . . . . . . . : Enabled

C:\Users\DELL>ping www.google.com

Pinging www.google.com [2404:6800:4007:816::2004] with 32 bytes of data:

Request timed out.
Reply from 2404:6800:4007:816::2004: time=176ms
Reply from 2404:6800:4007:816::2004: time=192ms
Reply from 2404:6800:4007:816::2004: time=310ms

Ping statistics for 2404:6800:4007:816::2004:

Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
Minimum = 176ms, Maximum = 310ms, Average = 226ms
128 64 32 16 8 4 2 1
1 0 0 1 0 0 1 0=
11000000
10101000
00001010.01000000.10101000.10010010
10.64.168.146
11111100
10010010
63=111111