Steps for Gathering Information

Find out intial information
- Whois
- Nslookup
- Open source public information
Find out address range of the network
- ARIN (American registry for Internet numbers)
- Traceroute (Neotrace)
Find active machines
- Ping
- Ping War
Find open ports or access points
- Portscanners
  - NetBrute Scanner
  - Nmap
- War Dialers
  - THC-Scan
- War Drivers
Figure out the operating system
- Nmap
Figure out which services are running on each port
- Default ports and OS PORT NUMBERS List
- Telnet
- Vulnerability scanners
Map out the network
- Traceroute
- Visual ping
- Cheops
- WhatsUp