Testing Information Gathering

 4.2 Testing for Information Gathering 

Testing for Information Gathering include the following articles:

4.2.1 Conduct Search Engine Discovery and Reconnaissance for Information Leakage (OTG-INFO-001)

4.2.2 Fingerprint Web Server (OTG-INFO-002)

4.2.3 Review Webserver Metafiles for Information Leakage (OTG-INFO-003)

4.2.4 Enumerate Applications on Webserver (OTG-INFO-004)

4.2.5 Review Webpage Comments and Metadata for Information Leakage (OTG-INFO-005)

4.2.6 Identify application entry points (OTG-INFO-006)

4.2.7 Map execution paths through application (OTG-INFO-008)

4.2.8 Fingerprint Web Application Framework (OTG-INFO-009)

4.2.9 Fingerprint Web Application (OTG-INFO-010)

4.2.10 Map Network and Application Architecture (OTG-INFO-011)