So this is the first Netsch and we are on the next and the another wonderful session and this session
is about Rickon energy to Briga and G is a very powerful tool and it's an open source intelligence to
OK.
And this is going not going to solve a whole lot of problems of our information gathering speech.
Let's get started.
So this is how it looks like it comes up with the CLIA option.
So we just have to go to the command prompt.
I mean, the candy and just Ergon Energy and you're good to go.
Yes, it is already built in with the decanting, so you don't have to install any anything special
with it, if not than you can of course, install.
It depends on which version you are.
OK, so as I said, it's it's an open source, information gathering, intelligence, information gathering
tool and whatever they say that it means it is used to gather information from openly available sources.
What are those sources?
It could be these, but not limited to that's for sure.
Google, Twitter, Bing for sure.
As Shodan Israel.
For those who who don't know my children children is a pretty powerful tool, will be talking very much
about children because children is the tool, which is mainly mean for hackers or I would say organization
as well, to know what are the devices vulnerable from the external world.
Right.
So you have CCTV cameras, you have your Web servers.
If you just want to know from the external world which which of my applications are currently vulnerable
to any of the attacks or which of my boats, which are these sensitive ports open from the external
world, this this show that has multiple probes which keep keep scanning to the owners of your devices,
login banners.
And that's how we get to know what is the current status.
There has been millions of devices got exposed in the past and their credentials as well.
All credit goes to shorted.
People say it's not really a good tool or not legal or something, but I would say it is very much in
it and it is used by many of the enterprises as well, because initially it was leaving a whole lot
of, you know, a whole lot of information which can be exploited, which can be used, which used to
be used by the backor as well.
But this also help organization as well to strengthen their security posture.
OK, so you have about the short let's get started.
The next point is about what what all it basically take care of.
So it basically take care of the Cretaceous, some metric on it, and we can look for any compromise
credentials outside of the, you know, and anywhere on the network we can get to know about if contacts,
contacts could be email address of the target organization.
So if I want to know about the email address of the DOGOOD organization or anybody the any any email
address in the dog, maybe a job, maybe it's a marketing team, anybody.
So if they have posted or they have mentioned their email address, maybe on the LinkedIn somewhere
or any of the job postings and all this stuff.
So this tool can capture all those who can deliver to deliver it to us.
Right.
Link, data, domain and horse.
So that's what we would be talking about.
Domain's and Horse does basically we can get to know about subdomains.
We can capture all the subdomains of the target website.
And now how exactly to do it's doing is basically making use of brute force attack as well.
Right.
So it has multiple ways to do it.
But these are some of the some of the possible techniques that it can stop it.
All right.
So we'll be making use of of angel recon and not just for subdomain, but will be making use of it for
a couple of more tasks as we go ahead.
Although we are we are we have to start with subdominant initially to understand how we can make use
of Rickon energy to gather subdomains of the dog website to understand what are the different, you
know, activities.
The target domain is basically taken care of and then we get more clarity about it.
Right.
So we'll get you in the next session then.
Thank you.