On our third session on ethical hacking and penetration testing, our main topic of the session was about information gathering and the tools we’re going to use for information gathering. We were introduced with a lot of tools that would be useful for information gathering such as maltego and theharvester. theHarvester and maltego are tools that give the registrant details of the domain. Those tools are considered as a very powerful tool to be used for information gathering because it could leak out some private or even sensitive information that would be useful for penetration testing. theHarvester could give out the information such as emails, the date the domain was made (or even expired), subdomains, etc. And harvester uses the search engine (or social platforms) as their base on searching information about the domain. Maltego has the same features as theHarvester, but maltego is more of a GUI based.