2. Footprinting through Web Services

1. Domains and Subdomain through Netcraft

Go to the network section and click the domain to get the subdomains.

What's that site running?What's that site running? | Netcraft

Other tools

• sublis3ter

• pentest-tools

• FFUF

• Gobuster

• Dirb

2. People search

PeekYou - People Search Made EasyPeekYou.com

https://pipl.com/pipl.com

Intelius | People Search, Background Checks & Phone Number Lookup

Everyday Information - Check People, Phone Numbers, Vehicles & Addresses | BeenVerified

3. Emails Using theHarvester

theHarvester -d microsoft.com -l 200 -b baidu

-d domains

-l limit results

-b source (baidu,google,etc)

4.Dark and Deep web searching

https://www.torproject.org/download/

Tor uses duckduckgo for search

hidden wiki

5. OS footprinting with Censys

You can search the site through censys search and get the OS of the system.

Censys SearchCensys

ShodanShodan