Hero

...

passive gathering

 

WHOIS

whois megacorpone.com | less
whois IP | less

GOOGLE HACKING

(https://www.exploit-db.com/google-hacking-database)

site:megacorpone.com
filetype:php
-filetype:html
intitle:"index of" "parent directory"

NETCRAFTING

(https://www.netcraft.com/) https://searchdns.netcraft.com/

RECON-NG

marketplace serarch github

<https://github.com/lanmaster53/recon-ng-marketplace/wiki/API-Keys>
marketplace info recon/domain-hosts/google_site_web
marketplace install recon/domain-hosts/google_site_web
marketplace load recon/domain-hosts/google_site_web
info
options set SOURCE megacorpone.com
run
show  hosts
marketplace info recon/hosts-hosts/resolve
marketplace install recon/hosts-hosts/resolve
marketplace load recon/hosts-hosts/resolve
info
run
show hosts

OPEN-SOURCE CODE

user information gathering