WEBVTT 00:00.750 --> 00:06.540 Hello, my name is Stefon, and in this lecture you will learn about OCR framework. 00:19.560 --> 00:28.770 OCR framework is a tool designed by Visio to perform open source trade intelligence as a web interface 00:28.770 --> 00:31.870 with console such as OCR, ref console. 00:31.890 --> 00:41.580 So to install this framework, you have to install the pip tree by running sudo apt install python three 00:41.670 --> 00:43.140 pip here. 00:43.630 --> 00:43.860 Here. 00:44.040 --> 00:46.200 You have to run this command in terminal. 00:46.200 --> 00:54.730 If you have any problem, just update your app by using the sudo apt update command. 00:54.750 --> 00:57.720 Here the pip three is already installed here. 00:58.080 --> 01:09.210 Finally lets the OCR framework tool can be installed directly through pip three by running the let's 01:09.210 --> 01:18.390 clear by running the sudo actual not sudo pip three install OCR framework. 01:37.380 --> 01:44.130 OCR framework provides the threat intelligence about keywords in multiple sources and also provides 01:44.130 --> 01:48.570 the flexibility to be a standalone tool or a plugin or to maltego. 01:48.570 --> 01:55.470 So there are three handy modules that come with OCR framework, each of which can be utilized by penetration 01:55.470 --> 02:00.030 testers during external threat intelligence data collection. 02:00.030 --> 02:03.240 We we have user face user for here. 02:03.390 --> 02:04.230 So. 02:05.640 --> 02:06.790 Uh, here we are. 02:06.790 --> 02:13.650 Also, as you can see, we got a user fee not found but can be installed with sudo apt apt install OCI 02:13.680 --> 02:14.190 framework. 02:14.190 --> 02:16.650 So let's install the user framework here. 02:16.650 --> 02:22.920 So the apt install OCR framework frame work also. 02:31.970 --> 02:34.100 Who see our framework. 02:35.620 --> 02:36.100 Here. 02:36.520 --> 02:38.590 This is just a four megabyte file. 02:44.340 --> 02:45.060 Here. 02:45.060 --> 02:46.200 They use VI. 02:46.620 --> 02:47.420 Here, let's run. 02:47.430 --> 02:48.580 Use ify now. 02:48.600 --> 02:50.230 As you can see, we run this. 02:50.250 --> 02:58.530 So the use of this is used for searching on multiple search engines to identify the keywords in a URL 02:58.530 --> 03:03.060 and to automatically enumerate and store all the results in c. 03:03.060 --> 03:04.260 S v format. 03:04.260 --> 03:10.230 So this command runs like this using FI and parameter. 03:10.230 --> 03:11.580 For example Oxley. 03:18.020 --> 03:19.130 So you can see here. 03:27.230 --> 03:29.860 Here we are waiting to, uh. 03:29.900 --> 03:31.670 Let's open our. 03:32.440 --> 03:33.220 While. 03:34.020 --> 03:37.230 See anything is created or not. 03:38.440 --> 03:40.690 Your open folder. 03:45.790 --> 03:49.210 As you can see here, we got the profiles that si se ve. 03:49.210 --> 03:52.150 Let's oc As you can see here, there is the. 03:53.280 --> 03:56.030 Profiles that we got here. 03:56.040 --> 03:57.000 So. 03:58.190 --> 04:05.660 As you can see here, we have Oxley uh, account, which is, uh, most of them is not, uh, belongs 04:05.660 --> 04:06.770 to Oxley, but. 04:08.230 --> 04:08.980 Here. 04:09.520 --> 04:14.630 As you can see here, we can also use the mail file. 04:14.650 --> 04:21.530 This identifies a keyword and adds the email domains to the end of the keyword. 04:21.550 --> 04:27.700 So here, Mail Phi and here, for example. 04:27.700 --> 04:28.540 Oxley. 04:28.750 --> 04:29.710 Like this. 04:34.800 --> 04:35.430 Here. 04:35.970 --> 04:37.590 We got the example here. 04:39.820 --> 04:43.960 This is verifying the email addresses. 04:52.220 --> 04:55.290 Got a little error here at the. 04:56.600 --> 04:57.680 And of the jackpot. 04:57.680 --> 05:01.740 Here we got the no email font on these websites. 05:01.760 --> 05:04.460 We also have search phi. 05:06.530 --> 05:07.790 Search. 05:10.860 --> 05:11.180 Why? 05:11.190 --> 05:17.550 So this searches for a keyword in Facebook, GitHub, Instagram, Twitter and YouTube so the testers 05:17.550 --> 05:19.070 can run search. 05:19.080 --> 05:20.970 Why here? 05:21.060 --> 05:24.180 Q And in this process. 05:25.490 --> 05:26.390 Double codes. 05:26.420 --> 05:28.490 Oxley, your string here. 05:38.530 --> 05:39.100 Here. 05:43.440 --> 05:55.560 Let's open the profiles, CCTV and all the data will be saved here in profile Start CCTV data format 05:55.560 --> 05:59.190 so you can play with this tool more. 05:59.190 --> 06:03.330 But it has so many examples and parameters. 06:03.330 --> 06:05.310 You can do it by yourself.