Foot printing – Finding your target…

This article presents a practical, iterative methodology for network footprinting in the reconnaissance phase of security testing, focusing on discovering domains, hosts, and IP ranges tied to a target. It covers DNS mining (SOA/NS records, zone transfers, brute-forcing CNAME/A/AAAA, PTR), leveraging search engines (Bing ip: and site:), address mapping via whois and RIR reverse lookups, and SSL certificate common-name enumeration. The guide includes example commands and tools (dig, whois, Fierce, Maltego, Yeti) and emphasizes ongoing footprinting to maintain an accurate, current view of an organization’s internet-exposed assets.