The process of collecting information can be automated using both modules that are installed by default in the Python distribution and external modules that are installed in a simple way. Some of the modules that we will see allow us to extract information from servers and services that are running – information such as domain names and banners.
There are many ways to gather information from servers:
- We can use Shodan to extract information from public servers
- We can use the socket module to extract banner information from public and private servers
- We can use the DNSPython module to extract information from DNS servers
- We can use the pywebfuzz module to obtain possible vulnerabilities