Chapter 3: Performing Information Gathering

1. Passive information gathering involves using publicly accessible data, while active information gathering involves interacting with the target system.
2. Shodan and Maltego.

3. Nmap allows you to conduct vulnerability scans that leverage the Nmap scripting engine.
4. OpenVAS and Nessus.
5. Performing packet capturing allows you to view the raw packets as it traverses a network. Some packets can expose data, such as clear text passwords and other interesting information.