WEBVTT 00:00.480 --> 00:07.140 It's time for us to discuss more about search engines and, of course, foot printing. 00:07.600 --> 00:15.630 So realize that there is going to be other engines that reconnaissance folks are going to be utilizing, 00:15.840 --> 00:23.550 like reverse image searches, where we will start with an image and then it will break down the metadata 00:23.550 --> 00:25.410 that is associated with that image. 00:25.710 --> 00:32.040 There will be, of course, video search engines that we can reverse engineer, videos from metasearch 00:32.040 --> 00:38.640 engines that are going to be searching specialized searches on the metadata. 00:38.880 --> 00:43.140 Remember, metadata is data that describes other data. 00:43.440 --> 00:53.640 And of course, we can search for EFTPOS resources made available via HTTP and https, but we might 00:53.640 --> 01:00.840 even need to do specialized FTP search engine type work, which will be gathering information from Iot 01:01.050 --> 01:02.000 search engines. 01:02.010 --> 01:07.260 We're going to show you some of those when we discuss Iot in specifics later on. 01:07.560 --> 01:14.700 Of course, financial services, job sites, all of these can provide valuable footprint information. 01:15.420 --> 01:21.030 Now, be aware there is the deep web and the dark web. 01:21.210 --> 01:24.600 And we're going to go into details on those for you in a moment. 01:24.900 --> 01:32.040 But there are going to be browsers and World Wide Web virtual libraries that are going to be enabling 01:32.040 --> 01:39.150 you to traipse into that deep or dark web if you are so brave, by the way. 01:39.930 --> 01:44.970 One of the things that we're going to educate you on here is what is the difference between the deep 01:44.970 --> 01:46.770 web and the dark web? 01:46.920 --> 01:48.030 And I'm going to give you a hint. 01:48.040 --> 01:49.710 We're going to elaborate on it later. 01:49.950 --> 01:52.530 But think about identity. 01:52.830 --> 01:53.250 Okay. 01:53.250 --> 01:56.430 So that's going to be the key difference between the deep and the dark web. 01:57.660 --> 02:03.780 Let's also use a tool if we are practicing reconnaissance in a pen test. 02:04.080 --> 02:10.470 Let's use a tool that will find all the top level domains and there subdomains that an organization 02:10.470 --> 02:11.100 might have. 02:11.430 --> 02:19.740 So imagine that they're mapping out the entire structure of your web environment with a tool like Sub 02:19.740 --> 02:20.430 Lyster. 02:20.430 --> 02:23.550 And gosh, you got to love some of the names of these tools, right? 02:23.880 --> 02:30.540 The sub list are a tool for enumerating the subdomains that a public web server might have. 02:30.540 --> 02:32.920 For example, location. 02:32.970 --> 02:40.320 Of course, location can be recon with things like Google Earth, Google Maps, wiki mapping on social 02:40.320 --> 02:41.460 networking sites. 02:41.460 --> 02:47.640 There's going to be people searches that are done within telia's pepe ben verified white pages peak 02:47.640 --> 02:56.430 you know these and even run through the exercises with these right to make sure that you're familiar 02:56.430 --> 03:00.570 with them and the type of information that they're going to feed you. 03:01.050 --> 03:10.950 So be familiar with these ways to perform recon with social networking, and be familiar with a utility 03:11.190 --> 03:13.680 that is amazing to see work. 03:13.830 --> 03:21.900 And that is the Harvester which will go into LinkedIn, for example, and call all of the email addresses, 03:21.900 --> 03:24.150 let's say, for an organization. 03:24.570 --> 03:25.260 Imagine that. 03:25.260 --> 03:30.210 So sure, we could go in there and we could manually pull them out. 03:30.210 --> 03:36.720 It's public information, but this tool will go into LinkedIn and just scoop them all up for an attacker 03:36.900 --> 03:45.660 who may be building a map of everyone in the organization so that they can go in and socially engineer 03:45.660 --> 03:48.900 with knowledge of the organization and all the email addresses. 03:49.320 --> 03:57.240 And once again, we find ourselves amazed at the ease of use of the recon tools and the abundant different 03:57.240 --> 03:59.670 ways in which there are to perform it.