Original subtitles

OK.

Now on to what is going to be your absolute best friend in your entire life and in your career.

Google Google everybody.

I cannot stress how important it is to be good at googling and you know how to be amazing at it.

But there are so many things that people approach me with that you can find on Google in a second.

And if you've never seen the Let Me Google That For You.

That's a that's a lot of my life when it comes to the questions I get asked in what makes a really good

pen tester or really good anything especially in I.T. is the ability to Google.

So being able to look this stuff up on your own and be able to find your own resources and find solutions

to your problems are going to make you a way better pen Tester and just way better at your career with

troubleshooting and everything else.

So I'm done harping I just want to stress how important I think Google is.

So I'm going to show you today what's called a little bit of google fu so I'm already out on the interweb

so I'm out to Google.

And here we've got Google up but I want to show you that I just search for Google Search syntax in the

first one Google search operators came up.

If you look at this page this is a really nice list of some things that you can run on Google and we'll

help you out.

I'm going to show you just a few things that we can use to search for and how we can start narrowing

down some results.

So if we go to Google and we just type in something like Tesla

that's going to bring up Tesla here.

OK.

We found the main Tesla site but we're going to get news articles and we're gonna get all kinds of stuff.

OK.

We get the Twitter and maybe we want this.

Maybe we do but maybe we don't.

We don't want all this mess.

Maybe we only want items from Tesla so he could just say something like site Tesla dot com which we've

discovered here.

And notice I'm not putting in the W WW Because that would limit us to that specific domain.

So we have the WW WS in here but you could see that is starting to pull in something like shop and other

items.

Right.

So we can search for tests that are calm and maybe maybe we don't want Tesla dot.com.

W w w maybe we take out with the subtract here maybe we just take out w w w and we're going from six

hundred and almost seven hundred thousand results to one hundred and thirty one thousand results and

you can see now we're pulling in I r we're pulling in forms and we're pulling in shop we're getting

all these different unique subdomains.

So I've showed you some list here and I've showed you other ways to find subdomains including the harvester

but you can find subdomains like this as well.

And let's say you only want to find things like you know I IRR then we can come in and we can say IRR

dot or maybe you don't want w w w and you don't want IRR you could take those both out and you start

finding more like partners that tests shop again is coming up so you can start finding different subdomains

this way.

Pretty good.

Couple other things that we could look for.

What about file type we could say file type like this and we could search for something like I don't

know Doc X music Doc x out there and there's one doc X case a survey.

Probably not useful to us.

Maybe we can search for PDX where the company's biggest Tesla is probably gonna be a lot to search through

but there are thirty three hundred of these almost thirty four hundred of these.

So they've got different items here that we can look through you know maybe Excel access Excel right.

Actually that's X and you could see if there's any excel and CSP so what we're doing here what's the

point in me doing this.

Well the point of me doing this is me looking for potentially sensitive files out there or information

you would be surprised a little bit of hunting on a domain.

Now give granted here that Tesla is a big company big domain and it's gonna be hard to find some of

this information.

But you'd be very surprised with a little bit of prodding a little bit of google fu in narrowing down

the type of results that you can get off of a company.

I mean we can find all kinds of interesting stuff.

For an example just the other day I found a backup page of an entire Web site just by doing something

like this entire Web site credentials source code everything.

And just through a little bit of Google.

So again Google is your absolute best friend before you ask anybody a question no matter how complex

I challenge you to google it first.

Make sure you have done your research and then ask somebody you know it's just good to get in the habit

in this is what is going to make or break you.

I believe in your career so please please do not ignore the Google machine.

It is out there to help you and it will pay your salary over and over again.

So that's it for this video.

We've got one more video left in this series or this subset.

We're going to talk about a little bit about social media and how we can target that.

So I'll catch you over in the next video.