Finger Printing

The goal is to obtain client information so we can build attacks that we know will work.

Phish/Watering Hole:

Try to get the user to navigate to our webpage or maybe poison a webpage with fingerprinting code in a watering hole attack.

UserAgent Lookup:

If you can grab the user agent of a client then you can look it up at the following link.

https://developers.whatismybrowser.com/useragents/parse#parse-useragentdevelopers.whatismybrowser.com

Scan TTLs:

Nmap NSE:

The Nmap NSE scripts will often give fingerprinting results based off of the many ways a host machine can be identified.