Web网络安全-----红蓝攻防之信息收集（web、安卓...）

文章目录

• 系列文章目录
• 前言
• 一、为什么要做信息收集？
• • 蓝队：
  • 红队：
  • 红蓝对抗，无疑是一场信息对抗大赛
• 二、空间搜索引擎类
• • 1.[FOFA](https://fofa.info/)
  • 2.[鹰图-奇安信](https://hunter.qianxin.com/)
  • 3.[Shodan Search Engine](https://www.shodan.io/)
  • 4.[零组](https://0.zone/)
  • 5.[Soall](https://soall.org/)
  • 6.[ONYPHE - Cyber Defense Search Engine](https://www.onyphe.io/)
  • 7.[DNSDB](https://dnsdb.io/zh-cn/)
  • 8.[360网络空间测绘](https://quake.360.net/quake/#/index)
  • 9.[FullHunt | Expose Your Attack Surface](https://fullhunt.io/)
  • 10.[Netlas](https://app.netlas.io/responses/)
  • 11.[leakix](https://leakix.net/)
  • 12.[DorkSearch - Speed up your Dorking](https://dorksearch.com/)
• 三、威胁情报查询类
• • 1. [微步在线X情报社区-威胁情报查询_威胁分析平台_开放社区:](https://x.threatbook.com/)
  • 2.[NTI - 绿盟](https://ti.nsfocus.com/)
  • 3.[奇安信威胁情报中心](https://ti.qianxin.com/)
  • 4.[VenusEye威胁情报中心](https://www.venuseye.com.cn/)
  • 5.[IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/)
  • 6.[RedQueen安全智能服务平台](https://redqueen.tj-un.com/IntelHome.html)
  • 7.[华为安全中心平台](https://isecurity.huawei.com/sec/web/intelligencePortal.do)
  • 8.[安全星图平台-安恒](https://ti.dbappsecurity.com.cn/)
  • 9.[深信服威胁情报中心](https://ti.sangfor.com.cn/analysis-platform)
  • 10.[360安全大脑](https://ti.360.cn/#/homepage)
  • 11.[腾讯哈勃分析系统](https://habo.qq.com/)
  • 12.[安恒云沙箱](https://sandbox.dbappsecurity.com.cn/)
  • 13.[微步云沙箱](https://s.threatbook.com/)
  • 14.[IBM X-Force ](https://www.ibm.com/cn-zh/x-force)
  • 15.[VirusTotal - Home](https://www.virustotal.com/gui/home/upload)
  • 16.[AlienVault - Open Threat Exchange](https://otx.alienvault.com/)
  • 17.[any.run](https://app.any.run/)
  • 18.[greynoise](https://viz.greynoise.io/)
  • 19.[URLhaus | Checking your browser](https://urlhaus.abuse.ch/verify-ua/)
  • 20.[pithus](https://beta.pithus.org/)
  • 21.[hybrid-analysis](https://www.hybrid-analysis.com/)
  • 22.[intezer.](https://intezer.com/)
  • 23.[sans](https://isc.sans.edu/)
• 四、信息收集自动化工具
• • 1.ARL灯塔信息搜集系统
  • 2.水泽
• 五、企业信息及备案
• • 1.[天眼查](https://www.tianyancha.com/)
  • 2.[爱企查](https://aiqicha.baidu.com/)
  • 3.[ICP备案查询 - 站长工具](https://icp.chinaz.com/)
  • 4.[工业和信息化部政务服务平台：ICP/IP地址/域名信息备案管理系统](https://beian.miit.gov.cn/#/Integrated/index)
  • 5.[小蓝本](https://www.xiaolanben.com/pc)
• 六、域名(whois)
• • 1.[域名Whois查询 - 站长之家](https://whois.chinaz.com/)
  • 2.[whois查询-阿里云](https://whois.aliyun.com/)
  • 3.[域名信息查询 - 腾讯云h](https://whois.cloud.tencent.com/)
  • 4.[WHOIS域名注册信息查询-GoDaddy官方中文站](https://www.godaddy.com/zh-sg/whois)
• 七、ip/ip段信息查询
• • 1.[ IPIP.NET](https://www.ipip.net/)
  • 2.[警戒区 logo · IP信息查询 ](https://jingjiequ.com/tools/ip/)
  • 3.[IPUU](https://ipuu.net/Home)
  • 4.[ 高精度IP定位](https://www.opengps.cn/Data/IP/LocHighAcc.aspx)
• 八、端口信息
• • 1.[ Nmap](https://github.com/nmap/nmap)
  • 2.Goby
• 九、子域名搜集查询
• • 1.[ 子域名查询 - 站长工具](https://tool.chinaz.com/subdomain/)
  • 2.[ 资产查询 - 在线子域](https://rapiddns.io/subdomain)
  • 3.[ 在线子域名查询](http://tools.bugscaner.com/subdomain/)
  • 4.[在线子域名查询ruo](https://ruo.me/)
  • 4.[RapidDNS](https://rapiddns.io/subdomain#google_vignette)
  • 4.[在线子域名查询talosintelligence](https://talosintelligence.com/)
• 十、旁站
• 十一、C段
• 十二、IP反查域名相关
• • 1.[ 同IP网站查询 - 站长工具](https://stool.chinaz.com/same)
  • 2.[ The Web of WebScan](https://www.webscan.cc/)
  • 3.[IP反查域名](https://dns.aizhan.com/)
  • 4.[ IPIP-IP反查域名](https://tools.ipip.net/ipdomain.php)
• 十三、WEB信息指纹类
• • 1.[潮汐指纹](http://finger.tidesec.net/)
  • 2.[云悉在线CMS指纹识别](https://www.yunsee.cn/)
  • 3.[360指纹收录](https://fp.shuziguanxing.com/#/)
  • 4.[EHole(棱洞)3.0红队重点攻击系统指纹探测工具](https://github.com/EdgeSecurityTeam/EHole)
  • 5.Wappalyzer插件
  • 6.Goby
• 十四、敏感信息-网盘资源
• • 1.[ 十大网盘搜索引擎 - 凌风云](https://www.lingfengyun.com/)
  • 2.[ 大力盘 - 网盘搜索引擎](https://www.dalipan.com/#/main/search?searchtype=1&restype=2)
  • 3.[ 云盘狗-百度云网盘搜索](http://yunpangou.com/)
  • 4.[ 盘131](https://www.pan131.com/)
  • 5.[ 搜盘网](http://www.soupan.info/)
• 十五、敏感信息-文档
• • 1.[ 百度文库](https://wenku.baidu.com/?_wkts_=1689413649720)
  • 2.[ 道客巴巴](https://www.doc88.com/)
• 十六、敏感信息-GitHub & Gitee
• 十七、社工
• 十八、证书透明度
• • 1.[Certificate Search](https://crt.sh/)
  • 2.[Censys](https://search.censys.io/certificates)
  • 3.[spyse](https://spyse.com/search/certificate)
  • 4.[certspotter](https://sslmate.com/certspotter/api/)
  • 5.[entrust](https://www.entrust.com/ct-search/)
  • 5.[facebook](https://developers.facebook.com/tools/ct)
• 十九、App分析 在线平台
• • 1.[七麦数据](https://www.qimai.cn/)
  • 2.[Apkpure](https://apkpure.com/cn)：可以在这里下载apk
  • 3.[AppInfoScanner](https://github.com/kelvinBen/AppInfoScanner0)：一个APP分析工具
• 二十、WAF识别
• 二十一、邮箱信息
• • 1.[verify](https://github.com/Tzeross/verifyemail)
  • 2.[skymem](https://www.skymem.info/)
  • 3.[搜邮箱](https://www.skymem.info/)
• 二十二、历史快照
• • 1.[archive](https://archive.org/web/)
  • 2.[cachedview](https://cachedview.com/)
  • 3.[loc ](https://www.loc.gov/search/)
• 总结