Welcome back, everyone.
This is the lecture on finding the email address again, so what's so special in this session?
In this lecture, we'll be talking about a new tool, a very powerful tool called Rickon Hyphen.
Engy, this is the tool in.
All right.
And in this tool, basically the free tool.
So you don't really have to depend on any commercial tool to gather more and more email addresses.
You don't have to pay any single dollars, any single penny for this.
Right.
Enough talking.
Let's get started with this.
All right.
So let me go to the clearly and I'm in the galley at this moment with my crew taxes.
And the first thing that you need to do is just just go to this application.
And for doing that, just type the name of the application, Rickon Hyphen Engie.
All right.
So the moment you do that, it might take some time and then get started.
Lovely.
You see, Rickon Energy is ready here.
This is a tool for information gathering.
Remember, we are currently in the precleared actress.
Now, usually, if it's your first time, you might find more.
None of the modules are loaded.
What are modules for every features in the stool?
There are separate modules for the Bing search for any appose for Lingnan for Facebook.
Every gathering information from different media.
There's a different modules created for different APIs as well.
So you may find some difficulty initially as zero module selected and all the stuff.
If you are in the same piece you can make use of a command market place, market place, install all
and thus give you an.
This will also give you an idea about what all modules as basically install.
All right.
So if you see closely it installed modules that are part of discovery, that are part of reconnaissance
and, you know, install the the plug ins, the modules related to finding any interesting fuzz, this
could be configuration files for the target in case of a website or something.
It can find the email addresses or any sensitive file from your target, LinkedIn account, Facebook
account, Instagram or any social media.
It can even find the sensitive information or your desired information from search engine like Ben VA.
Some apps, it can even find the sensitive informations.
I like subversions get CCTV camera information which is publicly exposed with this API.
I'll talk about it in the in the later classes.
But this all integration has been done through this powerful hurricane.
And due to trust me, if you learn the signal tool, you actually learn almost everything about information
gathering.
And with this tool, you don't really have to depend on any commercial groups or so we are done.
So once that is done, you can actually organize your activity, you can organize your all your activity
by creating workspaces.
So currently we are into the default.
If, let's say you have to create your own workspace workspaces, you can type workspace space and then
you define, create and define my space.
Let's see.
OK, so the moment you do that, you are in my space.
You see this.
So I'm currently in my workspace workspace.
That's where you organize all your activity and it could be saved as well.
Now, in order to gather my idea, my my intention is to get the email business email addresses for
the target organization.
Let's say I want to get the email business email for maybe Twitter or maybe Tesla.
OK, so for this you have to first add the domain, right?
So if you remember Hunter or some other sites, you have to specify the domain name.
So exactly the same when you first type in DB insert domains.
Once you hit enter, it will ask you to specify the domain name that I specify puter dot com and then
it will ask you to give some description or any details itself.
And once you do that, then it will give you any.
Need the email address or you can also from Twitter, OK, once you hit enter, one rule has been selected.
That means the storming is a part of it on how you can verify showed means.
OK, so this way you get the idea about what are the stuff you have into it.
Right.
And you can even make use of Sugarmann and you can get to know these are the possible stuff.
You can make use of shell companies your contact credentials once you added to it.
Right.
So that this you get more clarity on what exactly you are doing it.
All right.
So let's say I first of all, I need to know about email addresses, the contacts basically.
So for this, what I'll do is basically I'll add a more use for gathering the email addresses.
And for this, I need to add a module which is really needed to to collect those email addresses.
Right.
So I'll make use of modules, load recon, then you can do domains.
You can you can make use of that command to autocomplete contacts and who is right.
So I want you to hit enter.
It has been selected and finally you can executed by Red Command.
Once you hit enter, it will start fetching all this information and you will be amazed to look at it.
It is actually looking at all the who is information to get the email addresses of employees via Twitter.
So this is making use of who is database, who is basically maintains the website information or a website
information of their registrar, which is posted by the registrar.
So every each one of the each one of the, you know, companies will be amazed to know that you get
to see all the business email address of of employees.
But Twitter now, is it some kind of a map?
Is it some kind of different stuff that or, you know, unknown stuff or some sort of magic?
It's not really it just that this tool makes makes the hunting easier.
It just added this tool makes your information gathering job easier.
How exactly that is database called Who is OK, who is maintained by many other organization or I would
say domain providers.
So let me show you what what I'm actually talking about.
If I let it go to you know, I just type who is domain, OK?
And there are many, many information for this site.
Let's say if I make use of GoDaddy, everyone provides that I can as well.
And let's say if I make use of GoDaddy for a while and I again make use of some domain over here, OK?
And if I do search, this will give me information about this domain.
There are Destra information, the registrar who registered the domain on behalf of the users and you
get the information about their registrar registrar organization, you get the name server information,
the domain name Isbel and many other stuff as well.
And they would start immolators to now, just like GoDaddy has got there, who is database, which maintains
the domain information exactly the same way.
There are many, many organizations who maintains the who is database.
Now, this tool is basically reaching out to all those who the information and database where they can
find the email address attached to it, where where there is a customer or customer domain admin or
domain.
It mentioned their company email addresses as well by by for information communication purposes.
For many of the purposes.
It's basically gathering the information which is publicly available.
But this tool making your job easier that you.
Right.
So finally, let's come back to our tool again.
We have got the information about that.
It has processed all the activity.
Now let's let's organize it.
If you want to know what all email address that these activity has completed, you can make use of your
contacts and hit enter.
Lovely.
You see.
Seen the table.
Lovely table.
You get to know their first name, last name, email address and location as per the Who is database.
And this is giving the.
The help of doctors who is going back to this is based on who is going to be, can you similarly make
use of another plugins as well?
Maybe like then bang and many of the search engine modules as well.
And that also be that also be making use of the public publicly available information.
Right.
So this is that is the reason why this is this tool is so powerful, because just with few clicks,
just by knowing this index, you can gather a lot of information without going to multiple sites and
it saves really good, you know, hours of your time while you do the information gathering.
All right.
I hope this was useful for you.
We'll get you in the next one.
Thank you.