))
HOW TO USE COMMENTS AND METADATA INFORMATION TO GATHER INTELLIGENCE FOR PENETRATION TESTING
Manage episode 292613657 series 2926569
Content provided by Joy Alatta. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Joy Alatta or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
The head section of web pages contains troves of information that can be used to ensure that the site is efficiently crawled or positioned for search engine optimization. There is information about the name of the author, the description of the page, and the language used on the web page.
Some sites have information about the Twitter account, the URL address where the images are hosted, about other relevant URL addresses that are connected to the website.
I have viewed some source files that contained information about the forms and the input section of the form. For sites that use Google Analytics, you will see information about the Google Analytics account. Other types of information you may find by investigating the source file may include the name and type of third-party framework. All these types of information that I mentioned can provide a lead for a malicious hacker. If your web page reveals some of the types of information I mentioned here, you may need to take remediated action to ensure that no vulnerable information is exposed...More
--- Support this podcast: https://podcasters.spotify.com/pod/show/digitalclassroom/support20 episodes
Share
