All right, welcome back, everyone.
This is his mission, and this mission is about finding and discovering the e-mail addresses of the
dogged network or to the dogged domains.
So understand, this finding email address is very, very important.
But because if you get the right email address or if you get the even valid email address of anyone
in the target organizations, it would be easy to launch an efficient campaign in which has the highest,
most success rate for compromising the target better than anything is right.
So let's see how we can make use of Rickon energy for the same purpose.
And you will be amazed to know that it's going to work just awesome.
All right.
So let's get started.
OK, so will launch terror attack machine and we are looking it and again, will launch the attack on
energy.
And yes, in the U.S., you might have noticed the Marines were already installed because I have because
I have reinstalled my Kelly.
So you could see the Marines are not present.
What are you could do is basically you can do a marketplace install and this would start the installation
of all the packages.
And this is what you would see very first time when you launch your recon engine.
OK, and that's the time.
That's the that's the time when you don't have any more news in the system.
And this time in order to get all the more required modules, you have to make use of the marketplace
installed on.
And this would start installing all the packages.
And once that is get ready, then you can actually go ahead and, you know, launch the campaign.
Correct.
So it might take some time.
So till then, we can hold it for now.
And Wilkening once said get get it done.
All right, so it's all done.
The packages are in stone and you see, well, now you go ahead and you know, you see all the modules
you will definitely find on the monitors available.
So let's see if they have modules and load.
And if I do.
And if I do, yeah.
You can see all the monitors are already being present on the system.
OK, so now let's first insert our target in order to launch the elastic module to gather all the email
addresses of the target list first inside the door.
So the insert and the domain.
Now you defined the domain and what we can actually use.
Can we use any recognized domain Bedazzler, Twitter, Yahoo dot com?
I would say yes, because there's nothing wrong.
I mean, we are not making use of any malicious threat vector or something.
We are basically making use of open source tool, which is freely available on the browser as well.
So let's say if we if you make use of Twitter, Twitter, dot com for gathering and give any notes gathering
e-mail addresses, you're done.
Now let's load the module.
So in this case, they have to load remodelers so modules or Rickon and then the modules to let's say,
let me give you the DAP.
So which one are we going to actually use?
So we'll have to make use of domain host and who else?
And that's what we are going to do.
We need to find the contacts which are related to the domain.
So all the email addresses, the e-mail addresses are of the dominant server like the dot com John and
the right to the dot com and all the stuff.
Right.
So so domain contact still in contact.
OK, here we go.
This is what we are looking for.
So the domains.
Contact and then who is right?
So that's done now the model has been set up.
Let's run the run this morning and let's see how it looks.
Right.
It might take some time to gather all the e-mail addresses required and it might take some pauses.
Oh, yeah, it's done.
Now, let's once it is done, in order to see earlier in order to check out the host, we have made
use of so hote straight.
But in this case, because we are looking for contacts with have to type two contacts.
Lovely.
You can see.
Oh let me maximize the window.
Yeah.
So you could see all the contacts of the folks.
These are names, their last name, email address and the location as well.
Right.
So it is that quick and that that one of them.
OK, this is something which is being available on the open source platform.
Maybe, maybe and faced by the you know, who is Look-Up it.
So these might be and deal of the advent of Twitter because what basically happened is it make use of
whois lookup database to get the information about it.
Right.
We can also make use of other other sources as well, Google and other stuff, in order to get those
contacts to better.
And I can assure you that money is low.
And let me show you that.
So if I do that, you could see the reason we are looking for domains to contact you.
So you can see we have domain to contact.
One option is Hunter Dot, Hunter IO, which we can also make use of it.
We can also make use of WikiLeaks.
That means it will also fetch the email address, which has been available on WikiLeaks.
Right.
So we can get to know if those has been linked to somewhere we can possibly get more information about
it.
Also, we can even get to know about if there is any -- list, which is if any of the any of the email
addresses had been compromised or has been has been involved into any data breaches, maybe Facebook,
LinkedIn or something where the passwords may also be or hashes of those passwords may also be available.
This is just about making use of the open source platform.
Nothing really special.
It just that it makes your job pretty easier.
But if you've gone into I hope you like the session we got you in the next one.
Thank you.