Original subtitles

Hello everybody and welcome back.

And now in this lecture we will cover our second tool for the foot printing which is called Nickel now

nickel can also be used for evil penetration testing which basically scans for the Web site and it prints

out if there is only any possible vulnerability on the Web site or if there is any outdated version.

For example the Apache too could be outdated and the though will show us that.

Now this can be put into the active interaction since we are scanning the Web site and you should not

be doing that on a Web site.

You do not own.

So I'll just.

Can the Web site that they put out on my laptop.

A lot of upside web server.

It is a better web server and it doesn't really have anything on it but it's running currently.

So we should be able to see the IP address and the version of the Apache and also maybe some of the

errors it could possibly have so let me just enlarge this a little bit.

Now in order to run though you basically just type your nickel.

It will show you the usage of the command.

Now these are some of the basic options that you can see right here if we want to we could bring the

Senate version this help as it says right here yeah this will be the extended version of the need to

help.

And we can see there are a bunch of the options right here for this program.

Now we won't be covering all of these since that will take a lot of time but we will cover some basically

the most important one would be the.

Let me just find it DeCosta.

Here it is.

Target host.

So in order for you to scan website you need to provide a target host.

Now that target host can be either a domain name or basically are IP address.

Now in my case I will use my IP address since my laptop is on my local network and its IP addresses

one night to that 168.

That one that 15.

Now if you have any available Web site or any other virtual machine you can test it on that one and

you can check out if your local Web site is memorable or something or possibly could be vulnerable to

something.

Now let me just show you this tape here.

Nicole

and basically will specify first of H for the coast and then 192 that 160 that the 15th.

Now did you print out some of the errors it might find such as.

Here we have the A.P. checking extreme options header is not present.

The exercise protection header is not defined.

Now this could be a problem.

It is opening us to an across site scripting attack but it also could be just a false alarm.

See here we can see these allowed HDP methods on the Apache Web site which is get head post and options

and this will take a few seconds to finish basically if it takes a lot of time we will just close it

so I can show you some of the other options that Nico has.

Here we have log in that BHP admin log in page section found portions of this service headers are not

in the database or our newer than the known string OK.

Would you like to submit this information.

We do not want to submit it now.

Now you might be asking uh what kind of logging page or my posting on my laptop.

Well basically I just have a fake Instagram page right there.

I JUST MADE IT.

SO IF WE TAPE My laptop's IP address we just open this up.

It will lead us to a fake Instagram page.

As you can see right here it is not a real Instagram it's basically just my IP address which I.

Which we will use for some of the attacks later on but for now on well we'll just use the unique though

in order to scan this page and as we can see it has finished it printed out a bunch of the options which

could be useful or not for you.

Depending on the website and depending on the errors but let's check out some of these other examples

of this command.

So you just type your H and you can see the shock command once again we can see our options

decency display format hosts evasion encoding technique for example you can use the evasion.

I believe it is tagged as a minus E in the command.

We can use the minus E and specify any of these numbers if we want to for example pick barometer directory

self reference or any other we can write here we will use number 1 random encoding on UTF 8.

OK so we will basically run the same command for the ad that said before that.

Now I believe that this will print out the same output.

So we are not really interested right now in waiting for this finish.

So one more thing I want to show you is that you can specify a port on which you want to scan.

Now most likely that port will always be port 80.

So it is not really needed but in case you want to for example scan import for 4 3 which is the CPS

usual port you can change that with the minus B option as we can see.

Default is 80 so you will just type here Nico and then the coast which in my case wanted to then about

68 at one 15.

And then you specify a port and type your 80 or 440 or any other port you want but most likely it will

be one of those two.

Now let's say for example we want to scan port 80 since my Apache web server is running on port 80 on

my laptop and we want to save that into a file.

Now how we do that with be minus 0 command but they just check here if it really is minus so I'm not

seeing it right here.

I believe it is yes it is output.

So just type here minus 0 dash 0 and we will name a file.

Basically we can name it anything you want you we will name it right here result.

And you also need to specify the file type which I believe is the capital F which is format save file

format.

OK so format which just type your basic 60 we want to say it into a text file and we can run the same

client once again.

And basically right here once it finishes we will have a file with all this stuff written to it.

So don't have to write it manually.

The output to option can be used if you need to provide to someone scan results.

So you can just put that into any file type.

I just decided it to be too for this example and you can just send the file to someone.

Now let's just wait for this to finish so we can check out our file here to ask us again if we want

to report something to the website that leave.

Let me just read once again not to include that the base on your.

Would you like to submit this information all into one do not want to snipe what I care less I should

have a pretty good file as we can see right here.

Now we now know there is a file on the research.

Let's just get it resolved.

We should see all of our output right there as we can see.

Target hostname.

Target port is right here and there are some of the we'll try truly sure why it didn't put all of them

in here.

Or maybe it did.

I just can't see them.

But that's the example of righty writing and output in a file.

Now if you want to run nickel to produce the latest fire for now if you want to run nickel can see that

there is an option to run it over a proxy as you can see.

Use proxy use the proxy defined in the nick that corner of file.

Now in order for you to do this you need to link in that file and the proxy one.

Basically you have one I will show you how to put it there.

I don't really have one at the moment to cover proxy and VPN later on but for now and let me just locate

a nickel that compile.

We covered this command so you step here.

OK.

And then the name of the file and will show us all of the files that are named like this.

And where are they stored.

Now we are interested in the first one which is which is in deep at sea and the Nano to the decoder

compile.

We can see a bunch of options right here.

Let us navigate and find the proxy option.

Let me just check where it is.

Here we go.

Proxy settings still must be enabled by use proxy.

So basically if you wanted to use proxy in the nickel program you would specify use proxy in the command.

And here you would specify the proxy and the proxy proxy coast and the proxy board.

So if you had a proxy with specified proxy IP address right here which for me is just a local host at

the moment in here you will specify the port.

And also one more thing you will need to do is remove the hash in order for this to be configured.

And after that you would just type control all save enter control X to exit and then you could use your

proxy an anecdote.

But since I don't really need it at the moment I will just put the hash back.

So we don't use it.

And I will say once again.

So basically just remember that the file is located in the seat.

You can also find it we do locate command.

So that will be about it for the nickel program.

If you want to you can check other options as well.

I don't find them useful at the moment but if you want to could check out all the other options and

we will continue in the next lecture we do whois program and I hope I see you there and take care.