And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
today we are going to embrace the topic of as m.
What is it exactly.
A 70 B is a simple matter transfer protocol.
So today we are going to show you guys how you can find a lot of information from a particular website.
For example if you want to target a g man or if you want to target Facebook so you can try to figure
it out.
Listen.
In this course we are not going to show you any illegal activities.
So we will do everything just for your knowledge.
So just so that you understand how do we life works.
So don't use and don't abuse people.
It will be your problem to go to jail or something like that you know.
So I will never wish that for you guys.
But please be in mine that you can attack but attack what you own.
Attack what you are doing to to attack.
OK so let's go.
Exactly.
Yep OK.
So we can say that simple mail transfer protocol.
It's an application layer.
What I mean by that.
So that application layer allows you to send e-mail as a sender as a meter and then to receive e-mail
address.
So how it works let's say here you are the sender.
Here it is this sender let's say s so.
And then so it can go here.
You will go here.
This is the user agent.
They say he uses an agenda user user
user name Agent Orange and let's say that.
OK.
And here again these for we have to know that so.
So who is this sender.
Email so let's make it bigger.
OK.
So and then here this is the middle cube.
So let's do metal cube made a cube and then Here open this board can be that may Sarge transfer agent
side transfer agent that's it.
M.S. M.S. M.S..
Yep.
So he this is the connection.
This is the communication between the server and decline.
This is the server which will be responded to the message.
This is the client.
Let's see.
See.
And in this server S3 is the V.
OK.
And then here M.S. again so this the and research transfer as default it is it has 25 as port number
as a discipline connection.
So the DCP connection DCP if you don't know exactly what is DCP you can just call coding.
So for the sake of this video do whenever going am with all of them.
So this is 25 port number for this connection.
Twenty five.
Well okay let's go.
I'm not good at images but never mind.
So I use a mailbox.
This is a user mailbox.
Let's say mailbox and b mail box books.
So.
And then.
And that the communication is up and down.
So yeah.
And then again who is the user agent who's your agent.
Oh it was Agent US A.
If you I say what.
Yeah.
So you were you use agent okay.
Is the whole world and then the last step is that we see her.
So how do we see her.
Is our do we see her son.
Okay.
That's how it works here.
If I did tell me at all.
Indeed it is.
As it turned out.
So the sender sent a message to the receiver.
But before getting to the receiver so it has some steps that it is undertaken by the server.
So these several receive it.
And now when the receiver or goes to his email address or you can find and you can click and do it.
That e-mail address.
OK let's go.
Let's let's minimize this page.
Okay.
Let's go to Google let's go to our Web site.
So here you can just type S and M S N S empty P comment so s m p is a comment on that.
So here OK.
So you will find many things and then just check them out here.
So we will find them.
We will work and show you how it works on coloring books.
OK.
For specific precision.
So let's see that.
So simple e-mail.
What is it exactly.
It is an application layer protocol.
The client wants to send the email or prints it DCP connection as a default number 25 and to the s empty
P server and then send him the e-mail address of the connection that connection which we have showing
you here.
So this connection and then yeah.
So what next s empty P server is always on listening but always as soon as it listens for DCP connection
from any client from any claimed the S.M. to be processed initiates a connection on that twenty.
I was we have stated earlier I've just successfully stopped breaching so statistically connection decline
process sends the e-mail instantly.
So the simple model.
End to end McDonald and start informing on you guys at this Web address so you can find a lot of information
and then stuff like that just so.
Just to check it on your own okay so we can simply dive.
They seem to be you into Yeah.
So we've got a lot of listings which provide some information about us so we can wait.
So this is what we have to
start
without going to wade.
What's the
oh.
Uh I mean I can.
It I.
Indeed.
Oh good.
So here we can we will go to terminal and then we check in.
Tell me Na let's check first if we have internet connection so we can check our internet connection
like that.
It's a game.
Anything.
Look at the comments a couple of gone.
OK.
So it's working that means so by that connection is on.
Well.
No one to do guys.
So now I'm telling you exactly that thing.
So if we want to know how some dippy super is working so we can try to find some information about some
Web sites.
OK let's say that we are trying to define information of a call and let's go in this record and then
move on looking at whether or not interesting.
This is the IP the public IP address of course of Google.
You can try to take a look of any real estate Facebook that's gone
in Dallas and address.
Okay.
Well you can try amazon by not promoting the common good.
So there is no good activity of what I'm doing here because it's just to find public addresses so we
can find them as you call each one.
It's a no.
Yeah.
Oh okay.
So now what we were not trying to do.
So we can try to find e if this website has opened in 70 silver I mean brick.
So.
OK.
So what we can do we can try.
Jim.
Jim do you know that com has a good result.
So OK.
So now it's if you have a target a victim so you can find out this information from him.
That's that's quite nothing.
You know for for attacking but so we would show something more interesting.
So OK let's go.
No.
Yes and Nikki server and the IP address to name like do you can find two s centipede any of them.
Let's say that if you're going to try to to find if some Web sites are open for this empty beach.
So in all kind of machine we can try these we can just like to land and then as MTV as DP and in your
web site in your website the com.
But listen.
So when we do like that we will try exactly to connect to its server Deasy's seniors.
Now if you succeed we are good to go.
We are good to find something like much more information and light e-mails and do some activities.
So let's let's do something simple.
Let's see if if we can find something on General Assembly B there's a bit of good demand that come let's
wait trying to get an angle you know it's good.
Let's look at it it again or something.
Oh yes.
OK OK.
Something is missing because we forget we can try to stop it.
Stop it.
OK.
We as always as we showed you is MTV always used to put 25.
So we forget adding.
So listeners.
Exactly.
So now we are connecting and then here it they did the G.M. boat.
Now is Dejima 870 people.
He's got 10.
So you can try to figure it out.
If we can type him out and just.
Well let's see something.
We can say hello.
OK.
So before typing I will show you.
Now go to Google and start page 70 feet deep.
It's an awesome DP.
My comment was in a so you can hear to find how we can white and what kidney disease but a basic assumptive
comments before dissonant message.
You can type Hillel into told me not of course declined since this comment to the 70 P so for it to
indicate Dante fight itself and initiate the S&P conversation the domain name or IPO traces of the S.A.
P clients is usually seen as a commit together with the common Halo.
If a domain name is used as an argument we take a look when it must be fully qualified domain name.
Okay let's go here.
Let's do it.
Have we done this megaphone specifies the email address of the sender.
This command are also tells the S&P server that if you made a transaction is starting and makes this
server to we said all its days tables and Beaufort and so on and so on.
But first and foremost is this how we can type it and this is declined.
And then this is the silver.
So we type a d here into a terminal
form and then dot to to do it and made something that com so [REMOVED]
well.
So you see guys here we have a lot of them.
This is exactly the things that we can do with SMB to be so.
It's incredible what it is will.
So that's why I would ask you first do it on your own and do it on your own website.
Well you have your white
yeah so to do it and then bid on it may mean anything gone.
So.
Okay.
And she couldn't say you do because you own it.
Do you mean that come.
And then we put into it.
But I'm not gonna present it right now.
I'm going to expand to first.
If this user on this assignment if in this user exist deceiver it will tell you that this user exists
or otherwise it would just tell you that this user account doesn't exist.
Yeah.
OK so here for the sake of this video we and I'm gonna do it.
Any illegal activity.
So let's stop disconnection and then try to connect to or own website.
So let's see.
Firstly if you tell me you're following two to see what's going on.
Okay so no one is trying to do with it.
We readable on site marketing.
In here so we can type and we can person or if it arose as an to be so that we will will connect automatically
like we did before for German government.
So let's see you see that we sort of came through when our detriment toward this type of case and that's
going to be an equalizer in okay.
Here we get a lot of information about what we can do.
For example the auctions are minus m n Maximum number of processes default filing and listing.
And this is what I get you file the final few of names to check with yeah s A.P. services.
If you type the command in t post server or several host warning listen to be service and so and so
on.
Let's check this one for them.
Oh yeah
check this.
My name is Andrew
and copy
pasta to
pasta to me.
Oh.
And then we have to check it.
So
here we put the target machine IP address or we can just put the IP of Google was something like this.
So we put it like that.
If this if this IP was for Google.
So if this is if our baby and this we present it but we are then to go into us either because if it
was into and then it's illegal activities.
So yeah we can we can type not only do the number you can try to put Jim at that corner and 80 percent
and then that's it.
That's OK.
We are so glad to have you in this video single in the next video for the next listen.
Looking forward.
Thank you.
Bye.