SANS ISC: InfoSec Handlers Diary Blog - SANS Internet Storm Center

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

InfoSec Handlers Diary Blog

Overview

One of the sections on the ISC Tools page is Information Gathering at https://isc.sans.edu/tools/#info-gathering. This collection will help you easily find out how your browser and plugins look to the outside and lists some other information lookup tools.

Features

Browser Headers - https://isc.sans.edu/tools/browserinfo.html
How a server sees your browser.

• https://isc.sans.edu/tools/browserinfo.html#your-info - You public IP and various pieces of Header iformation
• https://isc.sans.edu/tools/browserinfo.html#additional - Additional lookups that require javascript be enabled
• https://isc.sans.edu/tools/browserinfo.html#plain-text - Plain text information summary you can copy/paste for analysis

Browser Plugin Detector - https://isc.sans.edu/tools/adobinator.html
This page attempts to detect various browser plugins. The detection code used was created using PluginDetect.

• Lists plugins detected and various version information for each.

Site Availability Check - https://isc.sans.edu/tools/sitecheck.html
Checks if hostname is reachable.

• Single input box.
• Displays failure if unreachable.
• If reachable, outputs:
  • Page load time
  • Page size in bytes
  • Return status code (ie. 200 success)
  • Final URL

Site DNS Check - https://isc.sans.edu/tools/dnscheck.html
Hostname to IP DNS resolver.

• Single input box.
• Output IP if system is able to resolve.

Whereis[IP] - https://isc.sans.edu/tools/whereis.html

• Multi-line input box. Enter one(1) IP per line.
• Output table contains:
  • IP ADDRESS queried
  • ASN of IP
  • NETWORK assignment
  • COUNTRY abbreviation
  • ISP name
  • RIR - Name of registry

Content Security Policy Test - https://isc.sans.edu/tools/csptest.html
Created for Firefox 4 but features may be found in other browsers.

• Lots of details and information on the test outlined and explained on the page

Post suggestions or comments in the section below or send us any questions or comments in the contact form on https://isc.sans.edu/contact.html#contact-form
--
Adam Swanger, Web Developer (GWEB, GWAPT)
Internet Storm Center https://isc.sans.edu