WEBVTT 00:00.800 --> 00:07.340 With any great invention comes, of course, the potential for huge problems. 00:07.340 --> 00:13.610 And that is one of the things that we face when it comes to none other than the public Internet. 00:14.000 --> 00:15.470 Sure, we couldn't live without it. 00:15.710 --> 00:16.280 Sure. 00:16.310 --> 00:20.330 Most of the time it is to our in incredible benefit. 00:20.690 --> 00:27.350 But when it comes to foot printing as well, the World Wide Web is going to provide a treasure trove 00:27.350 --> 00:28.370 of information. 00:28.850 --> 00:33.800 We're going to be discussing lots about the World Wide Web and foot printing. 00:33.800 --> 00:40.610 And you are going to be doing lots of flashcard work, assignment work and all kinds of goodness in 00:40.610 --> 00:41.300 this area. 00:41.870 --> 00:48.320 One of the first things that we're going to focus on is search engines and the amount of information 00:48.320 --> 00:53.750 that our attackers are going to be able to extract about a target. 00:54.170 --> 01:02.330 Now, we have to keep in mind that this is most commonly going to be against our publicly accessible 01:02.330 --> 01:03.200 resources. 01:03.470 --> 01:13.910 So I publish, you know, my networking dot com website, and that is going to be providing a ton of 01:13.910 --> 01:16.190 information about me. 01:16.430 --> 01:19.370 And I always have to think when I publish content there. 01:19.400 --> 01:22.730 Okay, this is publicly accessible resources. 01:23.030 --> 01:30.080 So what exactly is it that I want to say about my personal life, about whatever, because it's publicly 01:30.080 --> 01:30.770 accessible. 01:31.370 --> 01:39.290 But as we're going to be discussing, not everything that is going to be surveilled about us is going 01:39.290 --> 01:45.170 to be from the publicly accessible resources we have a dark web. 01:45.350 --> 01:47.590 And what about the dark web? 01:47.600 --> 01:51.860 And are there search engines for the dark web while of course there are. 01:52.100 --> 01:54.620 So that's something that we need to consider as well. 01:54.980 --> 02:02.210 But in this phase of our foot printing discussion, we are talking about publicly accessible resources 02:02.210 --> 02:07.970 using the major engines that you know and love like Google. 02:08.300 --> 02:09.500 I think that's the big one. 02:10.430 --> 02:15.950 How many computer criminals do we know that are running around going, Ooh, I'm going to get really 02:15.950 --> 02:17.390 good at Bing? 02:17.750 --> 02:18.640 Probably not. 02:18.650 --> 02:23.570 No offense to Bing, but man, I know I will. 02:24.020 --> 02:31.910 I'll be in an edge browser left in its defaults, or I'll be on a microsoft Windows machine and maybe 02:31.910 --> 02:40.400 I'm helping someone on their Microsoft Windows and there is no browser installed on their system other 02:40.400 --> 02:41.360 than edge. 02:41.370 --> 02:49.460 So I will fire open edge and it defaults to bing search is in the address bar and so I will do a search 02:49.460 --> 02:55.100 and it will be a bing search and I will not find what I'm looking for, unfortunately for Bing. 02:55.520 --> 03:03.590 So anyways, the major engines are what we are talking about using here and we are talking about using 03:03.590 --> 03:05.870 them like the attackers would. 03:06.020 --> 03:08.950 And that is in an advanced fashion. 03:08.960 --> 03:12.680 So one of the things we need to work with is the advanced search operators. 03:12.800 --> 03:14.170 And you need to know these. 03:15.020 --> 03:16.440 So what are we talking about here? 03:16.460 --> 03:22.840 We're talking about utilizing the advanced operators in something like Google. 03:22.850 --> 03:30.320 And I tell you, I learned this long ago and it wasn't for the purposes of hacking. 03:30.740 --> 03:37.550 No, I learned this long ago with the research that I would have to do for like writing assignments. 03:37.850 --> 03:48.320 So notice here I'm qualifying my search to the site of Cisco dot com and I might qualify the file types 03:48.320 --> 03:58.550 that I want to find to PDF type and I might want to input a date range and I might want to, you know. 03:58.730 --> 04:04.880 Now, typically I wouldn't get need to get that sophisticated, but I would do things like maybe I want 04:04.880 --> 04:08.960 UCS management specifically. 04:09.170 --> 04:11.450 So notice I put that in quotes. 04:11.600 --> 04:14.570 So I get UCS management specifically. 04:14.840 --> 04:18.380 So these are the type advanced searches. 04:18.620 --> 04:27.680 Notice with prefix operators there that we need to be able to perform to find just what it is we need 04:27.680 --> 04:30.170 to find on the World Wide Web. 04:30.590 --> 04:32.330 But notice what we're doing here. 04:32.330 --> 04:36.200 We're not looking for things in a research capacity. 04:36.410 --> 04:37.070 No, no. 04:37.070 --> 04:41.660 We're actually looking to surveil using these prefixes. 04:42.260 --> 04:46.160 Now, there is a lot of potential prefixes that you could use. 04:46.400 --> 04:54.200 So I'd like you to go ahead and attack the next couple of assignments, which are going to be having 04:54.200 --> 04:58.700 you learn and perform these advanced Google search operators. 04:59.210 --> 04:59.810 Now, before. 04:59.850 --> 05:00.000 For. 05:00.000 --> 05:03.390 I leave you though, and send you off to do those tasks. 05:03.660 --> 05:10.170 I did want to point out that there is the tools menu here in Google and notice that's going to allow 05:10.170 --> 05:13.650 you to do your search range. 05:13.800 --> 05:18.000 That's why I don't tend to use the date range prefix. 05:18.180 --> 05:22.260 And just to give you a hint in the upcoming assignment that you're going to have. 05:22.500 --> 05:26.790 The date range takes a julienned date format. 05:27.030 --> 05:36.150 So you would go to Julian Converter, for instance, and you would grab one of the Julian date converters. 05:36.150 --> 05:43.800 And I would say if I was interested in articles from only 2021, I'll just say convert and we will get 05:43.800 --> 05:46.290 the Julian representation of that date. 05:46.680 --> 05:50.280 And then that's what I would use in my advanced operator. 05:50.610 --> 05:53.340 And now I do my search and look at that. 05:53.490 --> 05:59.700 We're getting, you know, a subset of the results that we had gotten. 05:59.880 --> 06:07.860 These are all PDFs that were published, it looks like in 2021, because notice the date range had no 06:07.860 --> 06:09.660 effect on the date of the post. 06:09.900 --> 06:15.930 But I'm thinking this is PDFs because notice we're restricting this to find links involving PDFs. 06:15.930 --> 06:17.880 Anyways, you get the idea. 06:18.180 --> 06:24.510 These are the types of operators that we're going to make you demonstrate the use of. 06:24.720 --> 06:32.400 But that date range, that is not all that commonly used because we have the tools option here with 06:32.400 --> 06:37.770 the date range and also are all results or just the verbatim results? 06:37.770 --> 06:40.260 I'm not sure I know the difference there or no. 06:40.260 --> 06:41.070 Actually, you know what? 06:42.000 --> 06:48.780 I think that's a way to filter the ads maybe, which would be cool on another thing, I want you familiar 06:48.780 --> 06:49.200 with this. 06:49.200 --> 06:52.350 If you go to tools, where is it? 06:52.380 --> 06:52.710 Here. 06:52.710 --> 06:54.060 I want to show you. 06:54.930 --> 06:55.590 Oh, that's right. 06:55.860 --> 06:56.220 Okay. 06:56.220 --> 07:02.730 So if you're on an image search, for instance, you will get different options when you go to tools. 07:03.150 --> 07:04.620 Yeah, that's what I wanted to show you. 07:04.920 --> 07:07.740 So notice I use this a lot. 07:08.280 --> 07:12.840 You'll notice some Creative Commons license things that I'll use in this class, right? 07:12.840 --> 07:16.410 So I'll say, like TCP handshake. 07:16.590 --> 07:24.810 And these, of course, are illustrations because I'm saying in the common domain, under usage rights, 07:24.990 --> 07:30.480 creative common licenses, you know, these crappy things are not protected. 07:30.600 --> 07:35.520 And there you can see the image I used when we were discussing the TCP three way handshake. 07:35.610 --> 07:35.940 Right. 07:36.240 --> 07:38.220 These are for open use. 07:38.220 --> 07:39.990 They are not protected. 07:39.990 --> 07:43.680 They're, you know, shared on wikis and things of that nature. 07:44.040 --> 07:53.250 So we want to get expert using the various tools of search just like those that are attacking us are 07:53.250 --> 07:54.120 going to be doing. 07:54.510 --> 07:54.960 All right. 07:55.230 --> 08:00.690 With all this said, I've got a couple of assignments for you now on those Google advanced operators. 08:00.690 --> 08:01.560 We need you to know.