Welcome back, everyone.
This is a finish and we have started our most exciting journey, but Web application hacking, OK,
now this is very similar to what we have done, but
dogged Windows machine hacking done machine hacking.
And if you recall, we have conceded things considered an example of how often often our country was
or any.
And Stewart, who's struggling with trying to attack another enemy, an immigrant, basically, and
know what is happening, is before you can even think of attacking the target, you have to understand
some detail about the dog in the territory.
The geography, the better the location, the kind of people you would be attacking with the nature
of them, what kind of weapons they have, what time, the day, what time they won't be available.
This all consider considered a part of information gathering.
And if you see, you will be covering as a part of of us vulnerability of those five from those five
points.
So in the information gathering, we'll be covering all possible information about the target website
or web application that we can use it for our further exploitation and further go further to compromise
our target web application.
Right.
So let's get started.
Well, I'll give you an idea about what all parameters will be helpful as a part of information gathering
stage.
OK, so first, as we if we can gather the beheader information, even if you recall in the SDP in the
demo in the lap is a lot.
But itself, I have shown you how to get the information about the beheader that can be helpful and
you get the idea about Target.
So what's the version of it?
And right then you can if you can get to see what are the bolts and services running on the target web
application, that can be helpful as well, because once, you know, if there's any unwanted board
open, you can probably exploit the target.
Might make use of those unwanted bolts, usually by application works on ETN and 443.
If there is any unwanted bolts or any other ports open, you can send your malicious traffic on those
posts.
And I bet you have services.
Of course, there are many services who which are found to be infected, which are found to be vulnerable.
If the target website or web application is not updated, we can make use of an attack.
We can make use of an attack bait specifically to to to compromise the target by using that vulnerability.
OK, so if we know about what these services is running on the Apache, let's say, for example, if
it's Apache, what would be the wording of it?
And if we get the idea, OK, if that specific Apache version is being affected, it's been impacted
by many of these these sort of vulnerabilities, we can prepare the weapon accordingly.
We can prepare to attack accordingly.
So that's one thing, a known vulnerabilities.
Of course, that's what we are going that if there is any known vulnerability about the target Web application
Web site as well, that would be helpful for this will be making use of scanners.
There are many open source and Web application scanners available.
And NASA's Squillace next post and many more will be making use of each one of them in much more detail.
OK, and this is why this this entire course would be so helpful, because you would be making use of
what this is what is being used in the industry, what is being used in the current situation by all
the industry.
OK, and then sensitive data leakage, if you can find any data of the target application that that
you can possibly make use of it to understand the target, probably that that the application might
be having some hidden files where you have credentials, user information, customer database that can
be adapted for that customer site.
Right.
Finding email addresses, of course, if.
You can probably guess the email address based on the domain name, but there could be a situation about
how how effectively you can find the correct one.
And what would be the use of it if you know the email addresses, if you know the most of the email
addresses of the target site.
You can probably plan your phishing attack accordingly.
If you remember, we have made use of we made use of our payload to attack Windows Machine and for delivery
because both the system was on the same lab.
You made use of a drive by download wherein we will be made use of a batch of server.
But this won't be most of the time useful.
Right.
So that's why the best strategy would be to send a phishing e-mail or probably social social engineering
attack and everything.
In case of phishing e-mail, we have to send our payload in such a way that, yes, user downloaded
that file.
OK, and that's why it is very, very important for us to give the email addresses right.
The targets target site.
And in fact, those email addresses has to be of people who are non technical.
So good social engineering attacks make use of folks from H.R. team folks for a marketing team that's
our team are very much susceptible, very much vulnerable to this attack because that's those are the
folks we're seeing more and more, more and more files from the end user as a part of Fresu man.
So I lose sleep and all the suffering.
When you look at the finance team, those are the juicy folks.
But at the same time, companies understand that.
And for finance team and variety team, there are huge and admin team as well.
There's a huge security already in place.
And in fact, if you try to compromise the I.T. team, you get the email addresses of their own folks
and they know the technology very well, but they might get the idea and they they might not download
the file.
Well, right.
And they may get a load analysis of SSL until you get the idea.
OK, what is the SSL version, dearest version and is there any vulnerability of those words as well?
You can probably compromised the site again.
So this is all carries the supporters of our information gathering speech now.
And this itself will be having will be covering each of this block in much more detail than you have
ever imagined.
OK, so we'll be covering each of these points, each of these points in multiple segments, in multiple
videos, and will be making use of many open source and commercial tools as well in order to districts
to make it more and more realistic.
And because the more you go closer to the industry, the more you understand the this industry of ethical
hacking, cyber security or security testing, whatever you say.
All right.
So let's get started.