The first step in ethical hacking is to gather information on the target system. The tools and techniques used to gather this information is called Footprinting. Footprinting includes gathering information about the network, host and also people who work in that organization. It is a key process that needs to be done thoroughly for any ethical hacker to be successful.
Security posture
Footprinting helps in assessing the security posture of an organization. It allows the ethical hacker to learn the IP addresses, DNS information, operating systems, phone numbers, email ids, and other valuable information. Footprinting can provide an overview of how an organization prioritizes it’s security posture.
Reading an older article? Use the brief to stay current.
This Article Gives You the Background. The Brief Gives You What Changed Next.
Get the weekday cyber brief for new policy moves, CISA actions, and risk developments this article could not cover when it was published.
Free. Weekday mornings. 5 minutes or less.
Built from 100+ trusted cybersecurity sources.
Attack surface reduction
Footprinting allows the ethical hacker to understand the attack surface. One of the first things that and ethical hacker will do is analyze what ports are open and determine the characteristics of the target system.
What is the easiest way to reduce the attack surface? Be sure to close all unused ports. This is a very basic concept but hackers love when this concept is overlooked. And it often is!
Reading an older article? Use the brief to stay current.
This Article Gives You the Background. The Brief Gives You What Changed Next.
Get the weekday cyber brief for the developments, risk shifts, and new signals that changed the picture after this article was published.
Free. Weekday mornings. 5 minutes or less.
Built from 100+ trusted cybersecurity sources.
Network mapping
Footprinting will assist in drawing network maps of the target organization. These network maps cover topology, routers, servers and other key components in the network. Footprinting helps to identify the details of the network components and may even allow the ethical hacker to identify the physical location of the components!
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
How to Stay Secure Managing End-of-Life Software
Legacy software often operates under the "if it isn't broken, don't fix it" mentality until a security crisis forces action. However, managing...
Best 6 Tools to Eliminate CVEs in Container Images
Key Takeaways Container image CVEs often come from inherited base image packages, not only application code. The strongest tools reduce vulnerabilities before...
8 Best Virtual CISO Companies of 2026
The virtual CISO market has changed. A few years ago, many companies hired a vCISO mainly to prepare for SOC 2, satisfy...
The 5-Minute Cyber Brief: August 28, 2026
The fastest way to catch up on what changed after this article was published.
