- [Instructor] Footprinting and reconnaissance
can also include evaluating obscure information.
In this segment, we'll outline ways
the team can investigate the deep and dark web.
The threat landscape is constantly evolving,
and malicious actors continue to use more ways
to conceal their identity and location.
Because of this, the team may include
deep and dark web footprinting
as part of their assessment.
First, let's talk about the different parts of the web
as shown in this graphic.
The surface web includes content
that is indexed by traditional search engines
and viewed using a standard browser.
The deep web represents content
that is not indexed by traditional search engines
as it consists of primarily private and paywall sites.
And the dark web is a subset of the deep web
and made up of encrypted and anonymous networks
that conceal user identities and activities.
While footprinting the hidden parts of the web,
the team might be able to identify login credentials
that have been stolen
and possibly sensitive information
and trade secrets for sale.
Because of the hidden nature of the dark web,
there are a few precautions you'll need to take.
You'll want to set up to search anonymously
by using a sock puppet.
A sock puppet is a fictitious character
used while researching,
and you can read more about it here.
In addition, you should use a virtual machine and VPN
as there can be dangerous malware variants
that can easily infiltrate and infect your machine.
And because much of the activity
in the deep and dark web is concealed,
it can be difficult to search.
There are search engines that you can use,
and I found a few on this webpage.
Now, websites on the dark web
use the .onion top level domain
instead of .com or .net.
These sites aren't accessible through regular browsers.
While searching the dark web,
you'll need the Onion Router or Tor Browser,
which will encrypt the communication
and allow you to browse anonymously.
I'm here at Project Tor,
where you can learn more and download the Tor Browser.
Now, keep in mind,
when moving through the dark web, exercise caution
and avoid any illegal activities or marketplaces.
Now let's test your knowledge.
Outline ways the team can investigate the deep and dark web.
You can record your answer on the challenge worksheet.