And Lou everybody when it comes to my advanced ethical hacking networking penetration testing goes
a very good thing to know before attacking it would the kitchen is that you have to know if that Web
is behind you firewall what I mean by that we know about the locations they have the firewall which
is set up there so that when you try to send in mandatory spending load and then do firewalls fight
resist against it so it doesn't let your payload into the system.
So that's how the firewall works.
All right.
But in in in this machine there is a very high level tool to do think that.
So what you have to do you have to open up your kind of UNIX machine OK you might use on your end but
it's minimizes.
Wouldn't you read a new worksheet now for this moment let's minimize it.
Then what are you going to do you're going to try to open a new terminal by white clicking on this icon
and new window then the tool is name is Love w o all f you have to really find if it is installed on
your system.
If not you got twin study.
So that's.
Let's see if it is going to start in as well.
We knew it was a little f OK.
It's there.
So with application firewall detection tools tool kit that's good.
You will we need to target set.
Yes I know.
So if your carry machine does it have it so you can either go to Google Google it and try to install
it all you can of digital current UNIX machine or you can just type attitude get it install and love.
Yeah.
And anyway Senator.
Well since we have these so we don't need to install it now we are going to show you how you can put
a target website to find out if it is behind some firewalls.
But first thing first to know oh to know the number of firewalls that you know or was tool can detect
you can type while for the building or if and then minus error was an error.
This is the number of your firewalls that your machine can add to your tools while you can attack it
is oh we have perfect net net continue cloud fair code Freya which is highly known.
Yeah.
And many stuff.
All right.
So now let's try to put together target let's say that Facebook is for Target matching.
So we take a while for that will you.
And what we're going to type is the Facebook account.
Now Facebook account is the Facebook Facebook Web site is Facebook com etc. and we have to wait till
discussion is complete OK.
Checking
we will see if Facebook is behind you or this trial for June or for your strategy when this thing is
come.
It seems that something is wrong.
It's going to be on Wi-Fi I a let's see.
It's been
and it's to go to or it should go continue you she would you did it to you is be that's way you have
to change it.
None of these I know if I can.
So let's go here again I trying to
try to find us if I want to be I need
here we are.
Jeanne Moos seems to be behind the award for US Homeland Security reason reasonability green.
Okay.
So we find your final result.
So let's try to find one on our website.
It's a it's a you know a
it's trying to find some kind of firewall behind it.
This is a very well known tool.
Guys it is the most well known tool to detect the Web Application Firewall one w or f since the itch
to be weakest.
Which which indeed.
Which identifies they will be given file was C O K banking is being done at connection.
Good luck.
Okay.
It seems to be hey firewall.
Yeah.
So there's no choice to do but come on again sometimes.
Why in sending you to be we kissed.
Does it work then.
Wow.
Since the Miley shoes is GDP weakest.
This is how it works.
This is exactly how it works.
If sending email issues each week gets failed then wow an ally is previews in the industry people would
cast and use and use this simple I'm going to check in with you about the kitchen fire what is responding
to the attack.
If it does not compute instead including nukes.
So you have to try first.
As we have showed you earlier you think that they're okay.
Rocky you are.
If it's not there just type up to do and get it started and then you can start it.
Okay so we're finding in this book it he's been doing that connection but get me that.
Oh yeah.
It has some firewood.
Let's try this book.
No mistake this book
is not going off and we can try.
No one can detect it by generic addiction.
This means
making this one of our minds when we try.
If we do this they seem to be behind firewall lose and it's over we turn it into a sprint could good
when it is trying to be good.
The Blacklist not money we spend is too easy.
All right.
So good.
So listen if you have some time before this is how we can try to find if your web application has a
potential firewall behind it.
Guys.
Okay bye.
By using a map we can try to find it as well.
And what is in map as if we have very much elaborated on it on a previous course.
If you didn't have it if you didn't buy it yet we encourage you to go back and try to buy the first
course so and map is the security or DTM tool mostly used by textures by attackers or by by black hackers
and network administrators and map is used in information gathering of the target.
So let's try to use now to find if we can detect if your website contains.
If I was behind it.
So what are we gonna do.
I'm gonna type in map map and script script equal.
It be.
It should be.
Love your point and then we type the website let's say.
Oh God do I do that.
Come come in then senator so let's let the wheat
kill kill we find something we find something or to kill gays and nothing suspicious.
Let's try it on our website.
Let's say that you try to put this this this site.
Come see it has some fireworks with some fireworks behind it.
No money issue.
It takes so long so vociferous against claims.
OK so.
Well into his thing.
Oh exactly.
We missed one Dutch Scottish
now wait a minute to see you find some.
As you can see these parties depend on storybook its GDP as we do.
So this tool is encouraging news.
They are really useful but when using love without this describe it is faster much more faster.
But it does it mean that this one does it will not give us some kind of information here we can try
to.
To us they did think and then we can type instead of data.
We can type fingerprint as we showed you earlier but to detect it we sure show us some some some information.
And then when we try to finger pointed it will certainly give us the firewall a name.
So let's try something.
Let's say that we will let's try to detect in this Web site.
No don't come come come and then the presenter does what kind of information we would get.
It's weird for this guy in
awfully to come with some wizard.
All right.
You see so we get a lot of information.
Let's let's try to be worth it.
It says that it used to be what they take home.
We find a lot of firewall which is great in this one.
It is behind it.
So document cookie scoop.
Okay.
So and this put 440 actually to its GDP is again do the firewall is detected.
So we see the payload.
We see how it is.
Okay.
So interesting.
So by the way this is then the information that we did think when we try to use when we try to use its
GDP a friend.
I did it.
Okay.
So now what's a bold new fingerprint your fingerprint will give us exactly the name of that firewall.
So let's try to have some modifications.
Now we tell you in your point no no.
Let's see what kind of a firewall behind it excellent.
This is it.
The detection of the firewall is CloudFlare.
This is exactly.
So by the way.
So this is when we use any map tool.
But if you want it doesn't matter.
You could use a different comment that we have showed earlier and is his wife that video and or I mean
it was your f..
And then you type that comment was under you we go in legal the Noto is behind it CloudFlare.
We see it.
It gives you exactly what you want with no more info.
I mean we'd know more stuff if you wanted to get it for a while.
So it gives you the name of that firewall.
OK.
Got it.
So so this is how you can detect if a website or application is behind a firewall so that you can start
your attack.
All right.
We really think that this video was informative for you.
Oh we are looking forward to seeing you in the next video.
Thank you.