---
id: 8328
title: "10 Techniques for Blindly Mapping Internal Networks"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/10-techniques-for-blindly-mapping-internal-networks/"
published_at: "2012-07-16T00:00:00Z"
tags: ["reconnaissance", "pentest", "dns", "internal-network", "network-discovery", "arp"]
phying_url: "https://phying.com/item/8328"
lang: en
---

# 10 Techniques for Blindly Mapping Internal Networks

## Summary

Catalogs ten blind internal network discovery techniques: DHCP info, traffic sniffing, ARP broadcasts, net view, DNS zone transfers, domain accounts, traceroute, and ping or port scans.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2012-07-16T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/10-techniques-for-blindly-mapping-internal-networks/
- **Phying News:** https://phying.com/item/8328