Linux Fundamentals & Information Gathering (OSINT)

0 Student Details

Fill this before you begin. Your submission is stored and emailed to the instructor, tagged with your name.

Full Name *

Your Email *

Batch / Class

🧭 Scenario

You have joined DEVJIX as a Junior Security Analyst. Management has asked you to run an internal security check on the company's own domain devjix.com. Using Kali Linux, demonstrate basic command-line control, identify your machine's network details, and gather public (OSINT) information using whois and subfinder. Because the target belongs to your own organization, this activity is fully authorized.

📸 Instructions: Run each command in your Kali Linux terminal, write your answer, and attach a screenshot of the terminal output under that task using its “Attach screenshot” button. ⚠️ Only ever perform these actions on systems and domains you own or are explicitly authorized to test.

1 Linux Command Fundamentals (7 marks)

Write the exact Kali Linux command for each task.

1.1 Print the full path of your current working directory.

📸 Attach screenshot

1.2 Create a new folder named recon.

📸 Attach screenshot

1.3 Display the contents of a file named results.txt.

📸 Attach screenshot

1.4 Show the currently logged-in username.

📸 Attach screenshot

1.5 Update the system package list.

📸 Attach screenshot

1.6 In your own words, explain the difference between rm and rmdir.

📸 Attach screenshot

2 Network Identification (6 marks)

Identify your host's network details and test connectivity to the target.

2.1 On Kali Linux, find your machine's MAC address. Which command did you use, and what is the MAC?

Tip: look at the ether line in ifconfig or ip link show.

Command used Your MAC address (AA:BB:CC:DD:EE:FF)

📸 Attach screenshot

2.2 On a Windows machine, which command shows the IP configuration? Paste your Windows IPv4 address.

Windows command Your IPv4 address

📸 Attach screenshot

2.3 Use ping to test connectivity to devjix.com. Paste one reply line (or the average time).

📸 Attach screenshot

3 Information Gathering with `whois` (6 marks)

The whois tool reveals a domain's public registration records — registrar, dates, and name servers.

┌──(kali㉿kali)-[~]
└─$ sudo apt install whois        # install (one time)
└─$ whois devjix.com              # query the domain

3.1 Who is the Registrar of devjix.com?

📸 Attach screenshot

3.2 What is the domain's Creation / Registered date?

📸 Attach screenshot

3.3 What is the Expiry date?

📸 Attach screenshot

3.4 List the Name Servers (NS) shown in the output.

📸 Attach screenshot

3.5 Why is whois useful during the reconnaissance phase?

📸 Attach screenshot

4 Subdomain Enumeration with `subfinder` (4 marks)

subfinder discovers subdomains of a target — expanding the attack surface you must secure.

└─$ subfinder -d devjix.com

4.1 Run subfinder against devjix.com. How many subdomains were discovered?

📸 Attach screenshot

4.2 List any two subdomains you found.

📸 Attach screenshot

4.3 What is the security value of discovering an organization's subdomains?

📸 Attach screenshot

5 Reflection (2 marks)

5.1 Explain the difference between passive and active reconnaissance. Which category do whois and subfinder belong to, and why?

📸 Attach screenshot

📤 Submit Your Lab

Important: Submitted before the deadline: Sunday, 18 October 2026 — 11:59 PM.
⚠️ You can submit only once — make sure everything is complete before you submit.

I confirm I performed these tasks only on authorized systems / my own lab, and this is my own work.

0 Student Details

🧭 Scenario

1 Linux Command Fundamentals (7 marks)

2 Network Identification (6 marks)

3 Information Gathering with whois (6 marks)

4 Subdomain Enumeration with subfinder (4 marks)

5 Reflection (2 marks)

📤 Submit Your Lab

3 Information Gathering with `whois` (6 marks)

4 Subdomain Enumeration with `subfinder` (4 marks)