--- title: What is Footprinting in Ethical Hacking? description: What is footprinting in Ethical hacking. Learn Ethical hacking. Objective of footprinting. How to footprint in Ethical hacking. Become an ethical hacker. image: https://media.mycaptain.in/hubfs/Imported_Blog_Media/Artboard-1-copy-30-8.png --- [![Academia Logo](https://f.hubspotusercontent10.net/hubfs/19956213/logo.svg)](https://www.hubspot.com/) ![menu](https://f.hubspotusercontent40.net/hubfs/7479797/menu.png) ![close_24px](https://7479797.fs1.hubspotusercontent-na1.net/hubfs/7479797/close_24px.svg) [Contact Us](https://www.hubspot.com/) # What is Footprinting in Ethical Hacking? [rachna](https://media.mycaptain.in/mycaptain-bacjup/author/rachna) Mar 2, 2020 1:58:23 AM ![](https://media.mycaptain.in/hubfs/Imported_Blog_Media/Artboard-1-copy-30-8.png) If you ever wondered about [**how to become an ethical hacker**](https://blogmycaptainin.wpcomstaging.com/2020/02/18/how-to-become-a-certified-ethical-hacker-in-india/) then you need to first understand what is **Footprinting in ethical hacking.** Think of footprinting as looking for information in each and every place possible. By definition, footprinting is the process of gathering as much information as possible about the target system. It is performed to find ways to penetrate the system. But footprinting is something that you cannot understand without proper [**introduction to ethical hacking**](https://blogmycaptainin.wpcomstaging.com/2020/02/05/what-is-ethical-hacking/)**.** So here it is. Ethical hacking is the process of finding vulnerabilities in the security of a system and then reporting them to the authorities so that they can be improved upon.  While ethical hacking is technically hacking, ethical hackers aren’t exactly doing anything illegal. Instead, they [help organizations](https://www.indiatoday.in/education-today/jobs-and-careers/story/ethical-hacking-1047211-2017-09-18) tremendously and for this reason, [they are paid well too](https://www.payscale.com/research/IN/Job=Certified_Ethical_Hacker_(CEH)/Salary).  So if you are thinking about [taking up courses](https://blogmycaptainin.wpcomstaging.com/2020/02/19/best-ethical-hacking-courses-for-beginners/) or want to [**learn ethical hacking online**](https://www.mycaptain.in/workshops/Ethical-Hacking?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing), there has never been a better time to do both.   [![Ethical hacking course](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png)](https://blogmycaptainin.wpcomstaging.com/2020/02/19/best-ethical-hacking-courses-for-beginners/)   ## **Importance of footprinting** **Footprinting in ethical hacking** is very important as it is the first phase of [ethical or unethical hacking](https://blogmycaptainin.wpcomstaging.com/2020/02/25/difference-between-hacking-and-ethical-hacking/). If the hacker does not gather enough information about the system, he/she wouldn’t know enough about it. As a result, the hacker would have no clue about what type of vulnerabilities can be found and what would be a suitable attack to perform.   In other words, no matter if the hacker knows all the [programming languages](https://blogmycaptainin.wpcomstaging.com/2020/02/21/top-ten-programming-languages-used-by-ethical-hackers/) and is incredibly skilful, without footprinting he/she would be in the dark while implementing those skills in an attack. Footprinting helps with the following things: - [Understand security](https://blogmycaptainin.wpcomstaging.com/2020/02/28/what-is-cybersecurity-introduction-to-cybersecurity/) posture : The data gathered will help you understand the posture of the security better. For example, you’ll have details regarding the firewall as well as security configurations.  - Identify weaknesses : Footprinting can help you identify vulnerabilities, potential threats as well as the loopholes present in the system.  - Reduces attacks **:** Once the vulnerabilities are identified, it can help prevent any future threats.   - [Laying the foundation](https://www.mycaptain.in/workshops/Full-Stack-Development?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing) for an attack : The data collected can help find the weak spots and launch attacks.  - Draw a network map : Footprinting can also help recognise the network of the target system and identify topology, trusted routers, presence of server and other information.     ![What is footprinting](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png)   ### **Objectives of Footprinting** Now that you have gotten an [**introduction to ethical hacking**](https://www.mycaptain.in/workshops/Coder's-Pack-?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing) and know the importance of **footprinting in ethical hacking,** it is time to know about the objectives of footprinting. Because without knowing the objectives of each step in hacking, you would always be a few steps short to [**become an ethical hacker**](https://www.mycaptain.in/workshops/Ethical-Hacking?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing) There are three main objectives of footprinting. **1. Collecting Network information** This includes: - Domain name  - Internal domain names  - IP addresses of the reachable systems  - Rogue websites/private websites within the domain  - Access Control Mechanisms  - Protocols used  - Existing VPNs  - Analog and digital telephone numbers  - Authentication mechanisms and system enumeration **2. Collecting System Information** This includes: - Users and group names - System banners - Routing tables  - Routing protocols it is using  - SNMP information  - System architecture  - Operating system used  - Remote system type  - Usernames and passwords **3. Collecting Organisations’ Information** This includes:  - Employee details - Organisation's website - Company directory - Local details - Address and phone numbers - Comments in HTML Source code within an organisation's website - Security policies implemented - Web server links relevant to the organisation - News articles and press release   ### **Types of footprinting** There are two types of footprinting: 1. **Active :** Refers to gathering information by directly getting in touch with the target. Active footprints can be created by sending phishing emails as well as user consciously sharing his/her data. 2. **Passive :** Contrary to the above is passive footprinting. It is done without the hacker directly getting in touch with the target system. This can be achieved by something as simple as reading information on the internet.  ![What is footprinting](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png)     ## **How to Footprint in Ethical Hacking?** Knowing the how-to and what-to of **footprinting in ethical hacking** can really help you better understand **how to [become an ethical hacker](https://www.mycaptain.in/?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing)** and actually become one. So how do you perform footprinting Let us take a look at some of the sources and tools used for footprinting.   ### **Information sources** These are some of the sources which you can use to gather information regarding a target system:  1. Company’s website : The websites are intended to tell the customers about the organisation but hackers can use them to gain a lot of information. They contain e-mail addresses, employee names, branch office locations as well as technologies the organisation uses. 2. Social Media : You can easily get to know about someone because people today tend to post everything about them on social media platforms.  3. [Archive.org](https://archive.org/) : Here’s a website that shows the history or older versions of all the other websites. You can use the Wayback machine, a built-in free to use tool to collect information that once existed on the website. 4. Job postings : Companies can sometimes provide confidential data on job posting websites like [Indeed](https://www.indeed.co.in/) and [MonsterIndia](https://www.monsterindia.com/). Hackers can leverage this information to plan their attack. 5. Google hacking : As you may know, Google contains a tremendous amount of data. But did you know that Google has the ability to do some powerful searches as well. You can collect sensitive information by using Google's built-in functions.   Some of the common commands are “intitle,” “inurlt,” “allinurl,” and “filetype.” You can even use the Google Hacking Database (GHDB) like [Exploit DB](https://www.exploit-db.com/google-hacking-database), and [Hackers Online Club](https://www.hackersonlineclub.com/google-hacking/).  ### **Tools** - [Whois](https://www.whois.net/) : One of the most renowned and common tools that can be used for [website](https://www.mycaptain.in/workshops/Web-Development?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing) footprinting. Using Whois, you can gather information like the domain name, email-id as well as domain owner's details.  - NeoTrace : Can gather path information between you and the remote site as well as the information on each node.  - Harvester : This is a tool that can help you extract information like email addresses as well as the subdomains of a target. - [Metagoofil](https://tools.kali.org/information-gathering/metagoofil) : This is a tool that makes it easy to gather the information that the company already made public - [Netifera](http://netifera.com/) :Yet another website footprinting tool that can be used to collect information like IP address, the Programming language used in the development, the number of websites hosted, DNS.  In addition to the above, some other footprinting that you can use include [Nslookup](https://network-tools.com/nslookup/), [Internet Assigned Numbers Authority (IANA)](https://www.iana.org/), Regional Institute Registries (RIRs), and Traceroute.   [![become an ethical hacker](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png)](https://www.mycaptain.in/workshops/Ethical-Hacking?utm_source=Blog&utm_medium=Content_Marketing&utm_campaign=Content_Marketing) Previous Post ###### [How to Get an Internship While in College?](https://media.mycaptain.in/mycaptain-bacjup/how-to-get-an-internship-while-in-college) Next Post ###### [How to Earn Money as a College Student](https://media.mycaptain.in/mycaptain-bacjup/how-to-earn-money-as-a-college-student) ### Similar Blog Posts [![](https://media.mycaptain.in/hs-fs/hubfs/Imported_Blog_Media/Artboard-1-copy-21-8.png?width=352&name=Artboard-1-copy-21-8.png)](https://media.mycaptain.in/mycaptain-bacjup/difference-between-hacking-and-ethical-hacking) ###### [Difference Between Hacking and Ethical Hacking](https://media.mycaptain.in/mycaptain-bacjup/difference-between-hacking-and-ethical-hacking) [![](https://media.mycaptain.in/hs-fs/hubfs/Imported_Blog_Media/Artboard-1-copy-16-8.png?width=352&name=Artboard-1-copy-16-8.png)](https://media.mycaptain.in/mycaptain-bacjup/how-to-become-a-certified-ethical-hacker-in-india) ###### [How to become a Certified Ethical Hacker in India](https://media.mycaptain.in/mycaptain-bacjup/how-to-become-a-certified-ethical-hacker-in-india) [![](https://media.mycaptain.in/hs-fs/hubfs/Imported_Blog_Media/28.png?width=352&name=28.png)](https://media.mycaptain.in/mycaptain-bacjup/what-are-the-various-ethical-hacking-certifications-you-can-do) ###### [What are the various ethical hacking certifications you can do?](https://media.mycaptain.in/mycaptain-bacjup/what-are-the-various-ethical-hacking-certifications-you-can-do) [![academia-logo](https://media.mycaptain.in/hubfs/raw_assets/public/@marketplace/MakeWebBetter/Academia/images/icons/academia-logo-white.svg)](https://www.hubspot.com/) Academia is one of the best educational theme with which you can create astounding websites. It is easy to use, highly customizable, and built with the modern approach. facebook icon instagram icon linkedin icon youtube icon twitter icon ###### Menu Title ###### Menu Title ###### Get In Touch ![contact](https://media.mycaptain.in/hubfs/raw_assets/public/@marketplace/MakeWebBetter/Academia/images/icons/phone-blue.svg) (209) 555-0104 ![Envelope](https://media.mycaptain.in/hubfs/raw_assets/public/@marketplace/MakeWebBetter/Academia/images/icons/envelope-blue.svg) deanna.curtis@example.com ![map](https://media.mycaptain.in/hubfs/raw_assets/public/@marketplace/MakeWebBetter/Academia/images/icons/location-blue.svg) 4140 Parker Rd. Allentown, New Mexico 31134 Copyright © 2022 MakeWebBetter All Rights Reserved. [Privacy Poilicy |](https://www.hubspot.com/) [Terms & Condition](https://www.hubspot.com/)