d0ctorsec/informationcollectionedgeassetsmining

This repository is a Chinese-language reference guide for asset discovery and reconnaissance during authorized penetration testing engagements. The author assembled it to replace scattered notes and tools with a single, ordered workflow. Most of the text is in Chinese, but tool commands and search syntax appear in English. The guide is structured as a sequential chain. You work through each stage in order, and the outputs from earlier stages feed into later ones. The first stage covers collecting basic information about a target organization: looking up company registration data through equity transparency platforms, finding registered domains through China's ICP filing system (the Ministry of Industry and Information Technology database), tracing historical WHOIS records to find shadow domains the organization may have forgotten, and reverse-searching contact details from WHOIS records to discover additional domain registrations. The second stage expands from the main domain into subdomains and IP addresses. The guide recommends combining automated tools with asset mapping platforms. Tools covered include Tscan (a multi-platform tool that aggregates results from several intelligence platforms at once) and subfinder (an open-source subdomain discovery tool that pulls from sources like Shodan, FOFA, Censys, and GitHub). Asset mapping platforms covered include Hunter, Quake, and FOFA, each with their specific query syntax for domain lookups, ICP registration number searches, and favicon hash searches. The guide notes that certificate wildcard matching can produce false positives that need manual filtering. The document continues through additional stages covering IP range validation, port scanning, web fingerprinting, and identifying edge assets: services that belong to a target organization but sit outside its main perimeter, such as forgotten subdomains, cloud storage buckets, and third-party integrations. The project is described as practical field notes from real pre-sales security assessments, compiled to save time during future engagements. The guide is intended for security professionals performing authorized assessments, not for unauthorized use.