Original subtitles

Hello everybody and welcome back.

And right now we are slowly entering our foot printing section which will be the last part of the big

intersection including the scanning section that we will do right after we cover the foot printing.

Well before we begin.

While our machine is starting up let us just explain a little bit more what the printing is.

So first of all there are two types of foot printing.

One is active and one is passive.

Now the active foot printing basically requires some in some interaction with the target that you're

trying to attack while the passive foot printing is basically just gathering all of the public available

information for your target.

So for example if your target has a Facebook account Twitter or basically any other account or any other

source of information from which you can gather some of the valuable stuff you might need.

Now let's say for example your target is a company and as a public information online you have the debt

company for example uses Windows XP on their machines.

You can already cut out the Linux exploits and Windows 10 or 7 exploits and you can basically just focus

on writing up Windows XP exploit.

Now we all know that nobody really uses XP anymore because it is vulnerable and it can.

It is basically an open box.

But that was just an example.

There are lots of public information which you can find.

Sorry.

There was a cut in my recording.

So basically what I was going to say is let's go to the some of the practical methods we Google hacking.

We were comfortable with hacking in this material.

So let me just log in.

That's one two three four

and as soon as this machine pulls up.

Well I mean as soon as my desktop puts up we will open our folks and we will run some of the specific

commands in the Google search bar in order to find some of the stuff we might need.

Now this is just one of the tools for printing that we will cover.

And basically the other ones which will be for example harvester Nikko Sheldon and who is we will cover

in the next lectures but for now on.

Let us just open our Firefox.

So just click on your Firefox icon and basically since it will lead you to your Linux website you want

to navigate to Google so just type here.

The Google dot com I'm just waiting for my Firefox to open

it is taking a little bit of time.

Here we go.

It is basically opening right now so you can just leave here.

We can add another tab and go onto Google that com

OK.

Finally open now let's say for example that's Europe that you want to find all the Web sites that have

a user input that could possibly be vulnerable to the SSL injection for example.

So you just on Google search bar you just type here in your URL and then the two dots space and the

apostrophe then index dot BHP question mark and then Heidi equals just find equals on my keyboard.

Here we go.

And then apostrophe once again.

Now what this will do is it will find all the Web sites that end in the index the BHP question mark

IDR equals and then some number.

Now what does that mean.

Well basically if we click on any of these pages check right here your connection is not secure.

There you go.

Let's go check the number one.

I'm not sure why it says that.

Well I have an idea.

But here we go.

So basically as you can see right here this Web site could possibly be vulnerable to these as your injection.

We can check that easily with the apostrophe and if we tried to log in looking for the two incorrect

e-mail address on passphrase.

So basically this site is imponderable at least at the first try but we won't try it anymore since we

shouldn't really do that.

Basically I just want to show you how to feel throughout all of the Web sites that actually have a user

input which could be vulnerable to the rescue all injection.

So basically anywhere where you can type something and then the Web site page can process it could be

vulnerable to the user input which could be a piece of code that you would tweak the server to run for

you so.

But more about that in the Web site hacking section.

Now that was just one of the comments that we just got on Google.

Once again I don't know why I call it in order to find the comments you might need.

There is Google hacking database which basically you just type here can Google will hacking database

and you click here on the first link and it will lead us to a Web site with bunch of the comments be

used in order to find out the things we might need.

For example passports or visa files or Excel files or anything.

So let's just wait for this to open.

Here it is.

And as you can see it says right here it is the database Web site.

The Google hacking database these are just a bunch of documents which you just copy and paste into Google

search bar and it will list you all the files you are searching.

I'm not really sure what these comments are.

It says right here if we click on the one it will lead us to the command which is this one

now I can only guess what this does.

But we can read it in description doc or finding log in porters were well-known company websites hosted

on famous hosting providers such as all of these.

Basically so these commanders that we can try it out if we want to.

It's not really that useful for us but why not.

So you just copy command.

You can do it from here or you can just copy it from here.

It was the first one so we will just copy and paste it and we will see how it works.

So here we are.

They are all basically account log in as we can see account log in my account log in my account log

in so it all throughout all of the websites which have a directory which is slash my account log in.

Now let's see for example another one.

These are as you can see listed with a date.

So this one of them was yesterday we can go.

Let's go off on this one entitled index of SS age.

Now you can read right here that data you find web servers.

A sage version has such keys as such log ins and SSA to dot EMC files as it says right here.

I found a lot of servers using SSA to one point four.

There are usually plus five years old and full of security holes.

Search and exploit database for as each one turns up.

Plus forty thousand exploits for these.

Some may work so this could be a useful command for us.

We can copy it and see what we find with it.

We won't be attacking any of these since we don't have permission but it sure could be useful later

on

as you can see.

We will not mess with this right now.

What we want to do is only use these commands and we will cover hacking of websites later on but not

on these Web.

But on the Web sites that we do own which we will make in our own virtual environment so you'll need

to use these commands only you can basically if you want to search for the example PDA files you can

type here a quick search the and it will show you the EDF I believe too.

Let's see how to find a PDA.

File a man deliberately do not want that in text please find attached log in packs for it.

Well let's see this could be a PDA file that could contain a password.

I'm not sure if I can do it like this I.

So you as you can see right here these all files are PDA files.

You can see right here all of this is a PDA.

Let's see if we open one.

It will ask us to save these files.

We do not want to save it.

Basically this is just all of the PDA files available on the Internet.

Let's just see the more accurate explanation of these command passwords and information on Target's

employees customers also for spear phishing replace PDA extension with any other document essentially.

Doc doc thanks Steve.

Steve.

Okay so that was PDA.

If you can use any of these commands if you want to know what it does you just click on the command

and this one really doesn't have any explanation.

Let's just check out another one as you can see this command which is pretty huge.

Well basically we'll help you to find out.

Videos published in Google drives.

So example.

Yeah.

OK.

So PDA.

And before.

OK.

So bunch of file extensions for videos.

I'm not really sure why PPF is there but there is possibly a reason for that.

So let's say now for example we do not want a PDA if I want excel file we just type here.

They probably take Excel I'm not really sure.

Is there a nature in their let's just check out real fast

they just excel so let's see.

Once again no matching records found show 50 to OK.

So let me just try it like this.

Now we set here on 120 comments so let me just check this out.

Dot Excel s so finding in order to find an Excel file

that doesn't really matter.

So here we are.

There is no doubt that there is an Excel file which is an excel file and basically if you click there

we can see what else it could find a mix of log in portals and passwords.

But this is a huge command.

We will not use it right now.

So that's all I want to show you.

As you can see they basically explain for every command what it does such as for example this one or

this one admin dashboard if we click on it you can see the explanation which is basically just a lot

of logging portals and could be useful if you for example wanted to find some of the horrible sites

to the specific attacks like we showed in the first in the first command or in the first string that

we type into the Google which was that index not BHP question mark I.D. equals which would lead us to

all of the Web sites with user input it could be possibly vulnerable to as injection.

So that's about it for the Google hacking.

Now if you want to you can scroll down and check out all of these other comments.

It could be useful for you but we won't be doing that soon.

There are lots of them and we will continue printing in the next lecture.

So I hope I see you there and take care.

Bye.