[{"data":1,"prerenderedAt":1229},["ShallowReactive",2],{"content:\u002F%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95-%E4%BF%A1%E6%81%AF%E6%94%B6%E9%9B%86":3,"surround:\u002F%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95-%E4%BF%A1%E6%81%AF%E6%94%B6%E9%9B%86":1228},{"id":4,"title":5,"body":6,"categories":1203,"date":1205,"description":1206,"draft":1207,"extension":1208,"image":1209,"meta":1210,"navigation":1212,"path":1213,"permalink":1213,"published":1209,"readingTime":1214,"recommend":1209,"references":1209,"seo":1219,"sitemap":1220,"stem":1221,"tags":1222,"type":1226,"updated":1205,"__hash__":1227},"content\u002Fposts\u002F2026\u002F渗透测试-信息收集.md","渗透测试 · 信息收集",{"type":7,"value":8,"toc":1162},"minimark",[9,13,17,20,24,27,32,47,51,54,149,153,156,161,217,221,224,233,238,259,263,266,322,327,331,339,343,349,354,362,367,372,376,381,385,405,409,429,433,475,477,481,488,492,495,499,504,558,563,623,628,720,724,727,731,734,739,746,750,753,757,771,775,778,782,793,797,800,814,816,820,824,830,835,839,856,861,865,881,885,888,891,893,897,901,961,964,1012,1015,1045,1048,1096,1100],[10,11,12],"h2",{"id":12},"前言",[14,15,16],"p",{},"在渗透测试中，信息收集是非常关键的一步，它为后续的漏洞发现和利用提供了重要的基础。以下是系统化的信息收集方法论。",[18,19],"hr",{},[10,21,23],{"id":22},"一被动信息收集","一、被动信息收集",[14,25,26],{},"被动信息收集是指在不与目标系统直接交互的情况下，通过公开渠道获取目标系统的相关信息。这种方式通常不会留下痕迹，具有较高的隐蔽性。",[28,29,31],"h3",{"id":30},"_11-搜索引擎","1.1 搜索引擎",[33,34,35,39],"ul",{},[36,37,38],"li",{},"使用 Google、Bing 等搜索引擎，通过输入特定的关键词（如公司名称、域名、产品名称等）来搜索与目标系统相关的信息。这些信息可能包括网站公开的信息、新闻报道、用户评论、社交媒体帖子等。",[36,40,41,42,46],{},"利用 ",[43,44,45],"strong",{},"Google Hacking"," 技巧，通过构造特定的搜索字符串来搜索互联网上的敏感信息，如数据库文件、配置文件、后台登录页面等。",[28,48,50],{"id":49},"_12-网络空间搜索引擎","1.2 网络空间搜索引擎",[14,52,53],{},"使用 FOFA、Shodan、ZoomEye、鹰图、360Quake 等网络空间搜索引擎，搜索互联网上的在线设备和服务，帮助发现目标系统的网络架构、开放的端口、使用的服务等敏感信息。",[55,56,57,73],"table",{},[58,59,60],"thead",{},[61,62,63,67,70],"tr",{},[64,65,66],"th",{},"平台",[64,68,69],{},"地址",[64,71,72],{},"说明",[74,75,76,93,107,121,135],"tbody",{},[61,77,78,82,90],{},[79,80,81],"td",{},"FOFA",[79,83,84],{},[85,86,87],"a",{"href":87,"rel":88},"https:\u002F\u002Ffofa.info\u002F",[89],"nofollow",[79,91,92],{},"网络空间资产测绘",[61,94,95,98,104],{},[79,96,97],{},"Shodan",[79,99,100],{},[85,101,102],{"href":102,"rel":103},"https:\u002F\u002Fwww.shodan.io\u002F",[89],[79,105,106],{},"联网设备与服务搜索",[61,108,109,112,118],{},[79,110,111],{},"ZoomEye",[79,113,114],{},[85,115,116],{"href":116,"rel":117},"https:\u002F\u002Fwww.zoomeye.org\u002F",[89],[79,119,120],{},"网络空间搜索引擎",[61,122,123,126,132],{},[79,124,125],{},"鹰图",[79,127,128],{},[85,129,130],{"href":130,"rel":131},"https:\u002F\u002Fhunter.qianxin.com\u002F",[89],[79,133,134],{},"奇安信出品",[61,136,137,140,146],{},[79,138,139],{},"360Quake",[79,141,142],{},[85,143,144],{"href":144,"rel":145},"https:\u002F\u002Fquake.360.net\u002F",[89],[79,147,148],{},"360出品",[28,150,152],{"id":151},"_13-whois-查询","1.3 Whois 查询",[14,154,155],{},"通过 Whois 查询获取目标域名的注册信息，包括注册人姓名、邮箱、联系电话、注册商、注册日期和到期日期等。这些信息有助于了解目标系统的所有权和联系方式，甚至可能通过邮箱反查找到管理员的个人信息。",[14,157,158],{},[43,159,160],{},"常用平台：",[55,162,163,171],{},[58,164,165],{},[61,166,167,169],{},[64,168,66],{},[64,170,69],{},[74,172,173,184,195,206],{},[61,174,175,178],{},[79,176,177],{},"站长之家 Whois",[79,179,180],{},[85,181,182],{"href":182,"rel":183},"https:\u002F\u002Fwhois.chinaz.com\u002F",[89],[61,185,186,189],{},[79,187,188],{},"爱站 Whois",[79,190,191],{},[85,192,193],{"href":193,"rel":194},"https:\u002F\u002Fwhois.aizhan.com\u002F",[89],[61,196,197,200],{},[79,198,199],{},"全球 Whois",[79,201,202],{},[85,203,204],{"href":204,"rel":205},"https:\u002F\u002Fwww.whois365.com\u002Fcn\u002F",[89],[61,207,208,211],{},[79,209,210],{},"ViewDNS",[79,212,213],{},[85,214,215],{"href":215,"rel":216},"https:\u002F\u002Fviewdns.info\u002F",[89],[28,218,220],{"id":219},"_14-icp-备案查询","1.4 ICP 备案查询",[14,222,223],{},"如果目标网站搭建在国内，则需要进行 ICP 备案。ICP 备案是指网站所有者向工信部的备案管理系统登记网站域名、IP 地址、服务器位置、运营主体信息（企业\u002F个人）等内容的登记手续。",[225,226,227],"blockquote",{},[14,228,229,232],{},[43,230,231],{},"不备案的影响","：网站被关闭、受到行政处罚、影响网站运营、信誉受损等。",[14,234,235],{},[43,236,237],{},"查询地址：",[33,239,240,247,253],{},[36,241,242,243],{},"官方：",[85,244,245],{"href":245,"rel":246},"https:\u002F\u002Fbeian.miit.gov.cn\u002F",[89],[36,248,249],{},[85,250,251],{"href":251,"rel":252},"https:\u002F\u002Fwww.beianx.cn\u002F",[89],[36,254,255],{},[85,256,257],{"href":257,"rel":258},"https:\u002F\u002Ficp.chinz.com\u002F",[89],[28,260,262],{"id":261},"_15-企业信息查询","1.5 企业信息查询",[14,264,265],{},"通过企业信息平台查询目标公司的工商信息、股权结构、分支机构等。",[55,267,268,276],{},[58,269,270],{},[61,271,272,274],{},[64,273,66],{},[64,275,69],{},[74,277,278,289,300,311],{},[61,279,280,283],{},[79,281,282],{},"天眼查",[79,284,285],{},[85,286,287],{"href":287,"rel":288},"https:\u002F\u002Fwww.tianyancha.com\u002F",[89],[61,290,291,294],{},[79,292,293],{},"企查查",[79,295,296],{},[85,297,298],{"href":298,"rel":299},"https:\u002F\u002Fwww.qcc.com\u002F",[89],[61,301,302,305],{},[79,303,304],{},"爱企查",[79,306,307],{},[85,308,309],{"href":309,"rel":310},"https:\u002F\u002Faiqicha.baidu.com\u002F",[89],[61,312,313,316],{},[79,314,315],{},"小蓝本",[79,317,318],{},[85,319,320],{"href":320,"rel":321},"https:\u002F\u002Fwww.xiaolanben.com\u002F",[89],[225,323,324],{},[14,325,326],{},"⚠️ 不要充会员，基础信息足够使用。",[28,328,330],{"id":329},"_16-社交媒体和专业网络","1.6 社交媒体和专业网络",[33,332,333,336],{},[36,334,335],{},"在 LinkedIn、微博等社交媒体上搜索目标公司的员工信息，可能获取到管理员的个人资料或联系方式。",[36,337,338],{},"加入网络安全相关的专业网络或社区，与其他安全专家交流，获取最新的安全动态和技巧。",[28,340,342],{"id":341},"_17-子域名查询","1.7 子域名查询",[14,344,345,348],{},[43,346,347],{},"目的","：扩大攻击面。主域名下的子域名对应不同的业务系统，这些子域名可能存在安全问题。",[14,350,351],{},[43,352,353],{},"在线工具：",[33,355,356],{},[36,357,358],{},[85,359,360],{"href":360,"rel":361},"https:\u002F\u002Ftool.chinz.com\u002Fsubdomain\u002F",[89],[14,363,364],{},[43,365,366],{},"挖掘工具：",[33,368,369],{},[36,370,371],{},"Layer 子域名挖掘机",[28,373,375],{"id":374},"_18-ip-反查域名","1.8 IP 反查域名",[14,377,378,380],{},[43,379,347],{},"：在仅提供 IP 地址的情况下（如 HW 行动中），通过 IP 地址反查域名，获取对应 IP 绑定的域名。",[14,382,383],{},[43,384,160],{},[33,386,387,393,399],{},[36,388,389],{},[85,390,391],{"href":391,"rel":392},"https:\u002F\u002Fdns.aizhan.com\u002F",[89],[36,394,395],{},[85,396,397],{"href":397,"rel":398},"https:\u002F\u002Ftool.chinaz.com\u002Fsame",[89],[36,400,401],{},[85,402,403],{"href":403,"rel":404},"https:\u002F\u002Fsite.ip138.com\u002F",[89],[28,406,408],{"id":407},"_19-通过域名获取-ip","1.9 通过域名获取 IP",[33,410,411,422],{},[36,412,413,417,418,421],{},[414,415,416],"code",{"code":416},"ping"," \u002F ",[414,419,420],{"code":420},"nslookup"," 命令",[36,423,424,425],{},"专业 ping 平台：",[85,426,427],{"href":427,"rel":428},"https:\u002F\u002Fping.chinaz.com\u002F",[89],[28,430,432],{"id":431},"_110-威胁情报平台","1.10 威胁情报平台",[55,434,435,445],{},[58,436,437],{},[61,438,439,441,443],{},[64,440,66],{},[64,442,69],{},[64,444,72],{},[74,446,447,461],{},[61,448,449,452,458],{},[79,450,451],{},"VirusTotal",[79,453,454],{},[85,455,456],{"href":456,"rel":457},"https:\u002F\u002Fwww.virustotal.com\u002F",[89],[79,459,460],{},"文件\u002FURL 多引擎扫描",[61,462,463,466,472],{},[79,464,465],{},"微步在线",[79,467,468],{},[85,469,470],{"href":470,"rel":471},"https:\u002F\u002Fx.threatbook.com\u002F",[89],[79,473,474],{},"威胁情报分析",[18,476],{},[10,478,480],{"id":479},"二主动信息收集","二、主动信息收集",[14,482,483,484,487],{},"主动信息收集是指通过直接与目标系统交互来获取信息，这种方式",[43,485,486],{},"可能会留下痕迹","，需要谨慎操作。",[28,489,491],{"id":490},"_21-端口扫描","2.1 端口扫描",[14,493,494],{},"使用 Nmap 等端口扫描工具对目标系统进行扫描，识别开放的端口和服务。Nmap 支持多种扫描技术，如 TCP SYN 扫描、UDP 扫描、ICMP 扫描等。",[496,497,498],"h4",{"id":498},"常见端口速查表",[14,500,501],{},[43,502,503],{},"Web 类：",[55,505,506,516],{},[58,507,508],{},[61,509,510,513],{},[64,511,512],{},"端口",[64,514,515],{},"服务",[74,517,518,526,534,542,550],{},[61,519,520,523],{},[79,521,522],{},"80",[79,524,525],{},"HTTP",[61,527,528,531],{},[79,529,530],{},"443",[79,532,533],{},"HTTPS",[61,535,536,539],{},[79,537,538],{},"8080",[79,540,541],{},"HTTP 代理",[61,543,544,547],{},[79,545,546],{},"8443",[79,548,549],{},"HTTPS 备用",[61,551,552,555],{},[79,553,554],{},"9090",[79,556,557],{},"Web 管理",[14,559,560],{},[43,561,562],{},"数据库类：",[55,564,565,573],{},[58,566,567],{},[61,568,569,571],{},[64,570,512],{},[64,572,515],{},[74,574,575,583,591,599,607,615],{},[61,576,577,580],{},[79,578,579],{},"3306",[79,581,582],{},"MySQL（默认禁用远程连接）",[61,584,585,588],{},[79,586,587],{},"1433",[79,589,590],{},"MSSQL \u002F SQL Server",[61,592,593,596],{},[79,594,595],{},"1521",[79,597,598],{},"Oracle",[61,600,601,604],{},[79,602,603],{},"5432",[79,605,606],{},"PostgreSQL",[61,608,609,612],{},[79,610,611],{},"6379",[79,613,614],{},"Redis",[61,616,617,620],{},[79,618,619],{},"27017, 27018",[79,621,622],{},"MongoDB",[14,624,625],{},[43,626,627],{},"常用服务类：",[55,629,630,638],{},[58,631,632],{},[61,633,634,636],{},[64,635,512],{},[64,637,515],{},[74,639,640,648,656,664,672,680,688,696,704,712],{},[61,641,642,645],{},[79,643,644],{},"21",[79,646,647],{},"FTP 文件共享",[61,649,650,653],{},[79,651,652],{},"22",[79,654,655],{},"SSH",[61,657,658,661],{},[79,659,660],{},"23",[79,662,663],{},"Telnet",[61,665,666,669],{},[79,667,668],{},"25",[79,670,671],{},"SMTP",[61,673,674,677],{},[79,675,676],{},"53",[79,678,679],{},"DNS",[61,681,682,685],{},[79,683,684],{},"110",[79,686,687],{},"POP3",[61,689,690,693],{},[79,691,692],{},"139",[79,694,695],{},"Samba",[61,697,698,701],{},[79,699,700],{},"873",[79,702,703],{},"Rsync（可能存在未授权）",[61,705,706,709],{},[79,707,708],{},"3389",[79,710,711],{},"远程桌面 RDP",[61,713,714,717],{},[79,715,716],{},"5900",[79,718,719],{},"VNC",[28,721,723],{"id":722},"_22-网络映射","2.2 网络映射",[14,725,726],{},"通过网络映射工具（如 Wireshark）分析目标网络的流量模式和网络结构，构建网络拓扑图，了解目标网络中的关键节点和流量分布。",[28,728,730],{"id":729},"_23-dns-枚举","2.3 DNS 枚举",[14,732,733],{},"对目标域名进行 DNS 枚举，发现与目标域名相关的其他域名或子域名，扩大攻击范围。",[14,735,736],{},[43,737,738],{},"常用工具：",[33,740,741,744],{},[36,742,743],{},"DNSRecon",[36,745,371],{},[28,747,749],{"id":748},"_24-敏感目录和文件扫描","2.4 敏感目录和文件扫描",[14,751,752],{},"向目标网站发送大量 HTTP 请求，尝试访问可能存在的敏感目录和文件（如后台登录页面、数据库文件、配置文件等）。",[14,754,755],{},[43,756,738],{},[33,758,759,762,765,768],{},[36,760,761],{},"御剑（支持指定网站类型）",[36,763,764],{},"DirBuster",[36,766,767],{},"Dirsearch",[36,769,770],{},"7kbscan",[28,772,774],{"id":773},"_25-cms-指纹识别","2.5 CMS 指纹识别",[14,776,777],{},"识别目标网站使用的 CMS（内容管理系统）类型，可据此查找针对该 CMS 的已知漏洞和攻击方法。",[14,779,780],{},[43,781,738],{},[33,783,784,787,790],{},[36,785,786],{},"WhatCMS",[36,788,789],{},"BuiltWith",[36,791,792],{},"手动分析 HTML 源代码",[28,794,796],{"id":795},"_26-绕过-cdn-获取真实-ip","2.6 绕过 CDN 获取真实 IP",[14,798,799],{},"如果目标网站使用了 CDN，可通过以下方式获取真实 IP：",[33,801,802,805,808,811],{},[36,803,804],{},"多地 ping（如 itdog 等平台）",[36,806,807],{},"查询子域名对应的 IP 地址",[36,809,810],{},"查看邮件头中的邮件服务器域名 IP",[36,812,813],{},"历史 DNS 记录查询",[18,815],{},[10,817,819],{"id":818},"三其他信息收集方式","三、其他信息收集方式",[28,821,823],{"id":822},"_31-旁站","3.1 旁站",[14,825,826,829],{},[43,827,828],{},"概述","：同 IP 下不同服务器上的不同站点（如同一栋楼里的不同楼层）。",[14,831,832,834],{},[43,833,347],{},"：与子域名枚举一致——扩大攻击面。同一服务器上的系统可能共享服务配置、权限或存在关联漏洞，通过渗透旁站可能间接获取目标网站的权限。",[28,836,838],{"id":837},"_32-c-段扫描","3.2 C 段扫描",[14,840,841,843,844,847,848,851,852,855],{},[43,842,828],{},"：C 段指 IP 地址前三个字节相同的一组 IP 地址，如 ",[414,845,846],{"code":846},"111.222.333.1","、",[414,849,850],{"code":850},"111.222.333.2"," 等都属于 ",[414,853,854],{"code":854},"111.222.333.0\u002F24"," 这个 C 段。",[14,857,858,860],{},[43,859,347],{},"：扩大攻击面。很多企业网络中，除了公开服务（如官网），还可能存在未公开的内部系统、测试服务器等，这些资产可能未被纳入安全防护体系，存在漏洞风险。",[14,862,863],{},[43,864,738],{},[33,866,867,874],{},[36,868,869,870],{},"Cwebscanner：",[85,871,872],{"href":872,"rel":873},"https:\u002F\u002Fgithub.com\u002Fse55i0n\u002FCwebscanner",[89],[36,875,876,877],{},"Nmap（Kali 自带）：",[85,878,879],{"href":879,"rel":880},"https:\u002F\u002Fgithub.com\u002Fnmap\u002Fnmap\u002F",[89],[28,882,884],{"id":883},"_33-社会工程学","3.3 社会工程学",[14,886,887],{},"通过电话、邮件等方式与目标公司的员工进行交流，尝试获取敏感信息或建立信任关系。社会工程学是一种非常有效的信息收集方式，但需要谨慎操作以避免违法行为。",[14,889,890],{},"*不要随意点击不明链接，不要在未核实的网站上输入个人信息，定期更换密码，开启双重验证功能。",[18,892],{},[10,894,896],{"id":895},"四工具平台速查汇总","四、工具平台速查汇总",[28,898,900],{"id":899},"域名whois-类","域名\u002FWhois 类",[55,902,903,912],{},[58,904,905],{},[61,906,907,910],{},[64,908,909],{},"工具",[64,911,69],{},[74,913,914,923,932,941,950],{},[61,915,916,918],{},[79,917,177],{},[79,919,920],{},[85,921,182],{"href":182,"rel":922},[89],[61,924,925,927],{},[79,926,188],{},[79,928,929],{},[85,930,193],{"href":193,"rel":931},[89],[61,933,934,936],{},[79,935,199],{},[79,937,938],{},[85,939,204],{"href":204,"rel":940},[89],[61,942,943,945],{},[79,944,210],{},[79,946,947],{},[85,948,215],{"href":215,"rel":949},[89],[61,951,952,955],{},[79,953,954],{},"爱站工具网",[79,956,957],{},[85,958,959],{"href":959,"rel":960},"https:\u002F\u002Fwww.aizhan.com\u002F",[89],[28,962,963],{"id":963},"资产测绘类",[55,965,966,974],{},[58,967,968],{},[61,969,970,972],{},[64,971,909],{},[64,973,69],{},[74,975,976,985,994,1003],{},[61,977,978,980],{},[79,979,81],{},[79,981,982],{},[85,983,87],{"href":87,"rel":984},[89],[61,986,987,989],{},[79,988,97],{},[79,990,991],{},[85,992,102],{"href":102,"rel":993},[89],[61,995,996,998],{},[79,997,125],{},[79,999,1000],{},[85,1001,130],{"href":130,"rel":1002},[89],[61,1004,1005,1007],{},[79,1006,139],{},[79,1008,1009],{},[85,1010,144],{"href":144,"rel":1011},[89],[28,1013,1014],{"id":1014},"威胁情报类",[55,1016,1017,1025],{},[58,1018,1019],{},[61,1020,1021,1023],{},[64,1022,909],{},[64,1024,69],{},[74,1026,1027,1036],{},[61,1028,1029,1031],{},[79,1030,451],{},[79,1032,1033],{},[85,1034,456],{"href":456,"rel":1035},[89],[61,1037,1038,1040],{},[79,1039,465],{},[79,1041,1042],{},[85,1043,470],{"href":470,"rel":1044},[89],[28,1046,1047],{"id":1047},"企业信息类",[55,1049,1050,1058],{},[58,1051,1052],{},[61,1053,1054,1056],{},[64,1055,909],{},[64,1057,69],{},[74,1059,1060,1069,1078,1087],{},[61,1061,1062,1064],{},[79,1063,282],{},[79,1065,1066],{},[85,1067,287],{"href":287,"rel":1068},[89],[61,1070,1071,1073],{},[79,1072,293],{},[79,1074,1075],{},[85,1076,298],{"href":298,"rel":1077},[89],[61,1079,1080,1082],{},[79,1081,304],{},[79,1083,1084],{},[85,1085,309],{"href":309,"rel":1086},[89],[61,1088,1089,1091],{},[79,1090,315],{},[79,1092,1093],{},[85,1094,320],{"href":320,"rel":1095},[89],[28,1097,1099],{"id":1098},"ip备案类","IP\u002F备案类",[55,1101,1102,1110],{},[58,1103,1104],{},[61,1105,1106,1108],{},[64,1107,909],{},[64,1109,69],{},[74,1111,1112,1122,1132,1142,1152],{},[61,1113,1114,1117],{},[79,1115,1116],{},"ICP 备案查询（官方）",[79,1118,1119],{},[85,1120,245],{"href":245,"rel":1121},[89],[61,1123,1124,1127],{},[79,1125,1126],{},"备案查询",[79,1128,1129],{},[85,1130,251],{"href":251,"rel":1131},[89],[61,1133,1134,1137],{},[79,1135,1136],{},"IP 反查域名",[79,1138,1139],{},[85,1140,391],{"href":391,"rel":1141},[89],[61,1143,1144,1147],{},[79,1145,1146],{},"多地 Ping",[79,1148,1149],{},[85,1150,427],{"href":427,"rel":1151},[89],[61,1153,1154,1157],{},[79,1155,1156],{},"IP138",[79,1158,1159],{},[85,1160,403],{"href":403,"rel":1161},[89],{"title":1163,"searchDepth":1164,"depth":1164,"links":1165},"",4,[1166,1168,1181,1191,1196],{"id":12,"depth":1167,"text":12},2,{"id":22,"depth":1167,"text":23,"children":1169},[1170,1172,1173,1174,1175,1176,1177,1178,1179,1180],{"id":30,"depth":1171,"text":31},3,{"id":49,"depth":1171,"text":50},{"id":151,"depth":1171,"text":152},{"id":219,"depth":1171,"text":220},{"id":261,"depth":1171,"text":262},{"id":329,"depth":1171,"text":330},{"id":341,"depth":1171,"text":342},{"id":374,"depth":1171,"text":375},{"id":407,"depth":1171,"text":408},{"id":431,"depth":1171,"text":432},{"id":479,"depth":1167,"text":480,"children":1182},[1183,1186,1187,1188,1189,1190],{"id":490,"depth":1171,"text":491,"children":1184},[1185],{"id":498,"depth":1164,"text":498},{"id":722,"depth":1171,"text":723},{"id":729,"depth":1171,"text":730},{"id":748,"depth":1171,"text":749},{"id":773,"depth":1171,"text":774},{"id":795,"depth":1171,"text":796},{"id":818,"depth":1167,"text":819,"children":1192},[1193,1194,1195],{"id":822,"depth":1171,"text":823},{"id":837,"depth":1171,"text":838},{"id":883,"depth":1171,"text":884},{"id":895,"depth":1167,"text":896,"children":1197},[1198,1199,1200,1201,1202],{"id":899,"depth":1171,"text":900},{"id":963,"depth":1171,"text":963},{"id":1014,"depth":1171,"text":1014},{"id":1047,"depth":1171,"text":1047},{"id":1098,"depth":1171,"text":1099},[1204],"Practice","2026-07-26","系统整理被动、主动与辅助性信息收集手段，并附常用平台与查询入口。",false,"md",null,{"slots":1211},{},true,"\u002F渗透测试-信息收集",{"text":1215,"minutes":1216,"time":1217,"words":1218},"9 min read",8.975,538500,1795,{"title":5,"description":1206},{"loc":1213},"posts\u002F2026\u002F渗透测试-信息收集",[1223,1224,1225],"Pentest","Recon","Notes","tech","dRI58bt-lOKm2lk4PFIAWy1iSSwAyGLlYDFopWaQwac",[1209,1209],1786294717517]