Chapter 6: Gathering Information from Servers
In this chapter, we will learn about the modules that allow extracting information that servers expose publicly. The information collected about the target we are analyzing, be it a domain, a host, a server, or a web service, will be very useful while carrying out the pentesting or audit process.
We will learn about tools such as Shodan and BinaryEdge for banner grabbing and getting information for a specific domain. We will learn how to get information on DNS servers with the Python DNS module and apply the fuzzing process over a web application.
The following topics will be covered in this chapter:
- Extracting information from servers with Shodan
- Using Shodan filters and the BinaryEdge search engine
- Using the
socket
module to obtain server information - Getting information on DNS servers with
DNSPython
- Getting vulnerable addresses in servers with Fuzzing