All right, so welcome back, everyone.
This is first news, and this is a decision about discovering subdomains with Rickon in.
OK, so let's get started.
So we'll have to go back to our attacking machine.
And it looks like the system has been.
Stop for some reason, OK?
Sorry about that, so it might take a few moments before we can get into it.
All right, so.
This might happen sometime when you are completely dependent on the water in the moment.
OK, so we'll open the machine that's locking as a rude.
OK, in order to launch a work on energy, you can just type Rickon Energy in here you go.
Just wait for a couple of moments.
Yeah, one wonderful.
See, sometime this is the first time I'll be open up.
OK, but for me, not for you.
If you open this very first time, there might be some problems.
There might be some problem.
You knew this, right.
And you probably won't find the solution from from the online resources.
So usually what happens in the moment, your system, your Rickon energy, thumbs up, you won't find
any of the modules.
Currently, you can see modules are basically services for different activities so that for discovering
any domains, for discovery emails, there are different domains that modules available.
OK, so what really happened is you won't find those modules in the beginning.
So let's say let me show you if I type modules load and you might find this option like.
You see this, so I just type model loads, and when you click spacebar and you get to see all the most
of these are the possible models for Rickon and in the Rickon, you will find companies.
This is one more for company domain's for credentials, for hotspots, locations, everything.
Right.
So in the beginning, you probably won't find all these models available.
So the solution is you have to dive market place, OK, type marketplace and store all OK.
And when you do that, it's it's going to install all the modules one by one.
OK, and this is you will find them on the very first time.
OK.
Once you do that, from next time onwards you want you won't be coming across this challenge because
I have done it already so I won't be having the trouble.
OK, so so our first phone starts with the recordings to take care of these subdomains.
Right.
So we can wait for a couple of seconds.
So in case I have any updates, updated modules as well, I can get those properly.
OK, so you see there are modules getting installed from for Discovery.
There is some import Rickon, which is reconnaissance in the recon as well.
There are some modules for about the company contacts contact such as email address numbers and everything,
and then you get the company host for sure, reconnaissance for domains related to the company and then
the domain contacts.
So Hunter Hunter Io is about getting the email address truly plug ins.
Right.
There are some more as well.
You can probably it can even make use of who is bulk as well.
WikiLeaks, of course, who don't know that we can make use this or can't do it, can make use of WikiLeaks
as well.
Remember, there are some some plug ins which need the API key and how to get that.
You have to go to those sites.
For example, if you if you want to scan from Kelly from the recon tool for to the short run to by making
use of showed an API, you have to get these children API first and then you attach or you insert that
API to the recording and that's how it get connected.
So from now onwards, whenever you search for any any vulnerabilities or any information, it goes through
shodan and you get the response right.
So it's still taking a couple of times.
It's taking some more moments.
All right.
OK, so you can probably escape, there could be many.
So I just suspended this.
So let's get started in order to start the start the operation to detect the no means for the target.
What you could probably do is you can you first have to create the workplace, OK?
You have to first understand, you have to create some subdomain in the directory.
You have to first understand there are multiple directories that you have to call it across.
So for that, you have to specify what base posts you see.
Sorry, I'm actually got out of the engine.
I didn't look at it.
OK, so the models are updated.
What you can do is initially you can first said this is the work workspace, OK, so you can specify
your workspaces and you can give a name like testing domains.
Maybe this is just in the testing domain.
The
sorry.
Oh, sorry.
That's workspace is created and here we are.
So we have just created a distinct domain.
That's a workplace workspace.
Sorry, that's our new workspace, the Fosters.
And we have to insert a building so that you have to force insert any of the domain that you like to
add into your system and then you can do that.
So you can actually this is the way we go to the recording and we can create a workplace as we have
created over the years, so you just have different workspaces, create maybe test.
OK, this is the this is how the work workspaces are defined.
Then you have to add your domain as a as a target for this.
You can type insert beebee domain, OK.
And sort of domains.
Well, that's OK, sorry.
That's Debbie insert domain's and once you get in here, you have to specify the target.
Let's say I consider Twitter or Facebook, Twitter, you can make mention any note as well at this particular.
That's.
So this target has been added now.
So let's launch our model again.
So far, in order to add any modules for this, you have to mention that module modules load and then
you specify the name of the model, which is Rickon domain.
Also, you can even see that, OK, Rickon domains and which one we are looking for is this being domain,
being domain.
So basically a reconning will go to try to gather all the information to Bing search engine.
OK, so you can type history.
Bang.
Domain.
OK, so it has been selected now what search for the purpose and what you can do is now you can just
run these modules and it once it gets started, it might take some force so that it will stop it from
any possible lockdown.
OK, so you see the search or scanning has been started and it's actually got some, but then it take
a pause and it says is leaping to avoid any lock.
Right.
So this is how it works.
So it can't even keep doing it every time.
Otherwise it get locked out.
The system may get locked down and might be taken as a bargain, in fact.
So let's say if we you know, it might take a whole lot of time because Duder has a might be having
multiple domains available.
So you can stop at any moment of time, but you can do comptrollers, then you can type.
So this is how it works.
You get to see all these subdomain for this right to a deck and everything about how this has been selected
and everything.
Right.
BuzzFeed, Leive Analytics Studio and Safety Legal Guide stream, all this stuff.
Right.
This is how we can actually load multiple subdomain.
We can find those subdivisional.
But wait for a second.
We can't even get the hidden subdomains as well as there are some domains, subduct, some some subdomains
which are easily discoverable.
But there are some bits which you can't really detected from search engines for that to you, for in
that case, we have to make use of some modules.
And that is right.
So we can we can apply innumerous.
And the module is Rukun.
And this is in this case, will be making use of brute force, brute force sort of attack.
And then let's run this.
OK, so this is going to run for all the possible subdomain that could exist for any possible sites.
OK.
And this is going to run all across all across the the the possible dictionary for for this upcoming.
Right.
You can stop anywhere if you feel it's done, although it might take a lot of time once it is done.
OK, once it is done, you can get I'm so sorry, so, you know, you're good, you get to see all the
possible hosting deals, right?
And there are corresponding IP addresses as rather right.
This is how you can get the subdomain information which are publicly available through the search engines.
And also you can find the hidden subdomain as well by making use of brute force attack.
Right.
Isn't it really cool?
That's what American energy brings to the table.
Right.
All right.
So I hope you like this nation will get you in the next one.
Thank you.