OK, so the next tool that we're going to use is actually a website called Search DNS, dot net craft
dot com.
So you can use this Web site, you know, to give you insight on DNS information for a given domain
so you can potentially learn things like, you know, the names of all the subdomains that exist for
a domain.
Who owns that domain IP addresses of their servers, names, server addresses, DNS admin information.
You know, where is where these servers that these websites hosted.
And you can even learn the operating system sometimes that is actually running on this system.
OK, so when you get back into Kaylin, just click the little icon right here and just open a Web browser
and it's going to take you to like the home like callisthenics page, like by default.
It's just a file that's on the system.
Like a copy of the website is online so we can do its search.
DNS, the next cruft dot com.
And just give it a second to load and then we're going to have an option, so let's say a site contains
let's just say we're doing doo doo doo doo doo Amazon.com.
We just want to learn a little bit more about Amazon.
So let's go ahead.
So we accept these cookies we're learning about.
So you see right here, this is Amazon.com.
This is a subdomain and click on this to figure out information.
But you can see right here as like a little sciver portraying click on and get more information.
But it has the operating system right here.
Obviously, Amazon.com is running Microsoft Windows Server 2012, which isn't really the best idea right
now since it's 20 20.
But we're getting different subdomains and just different information.
And as a report like on each one that we can look at.
So it's pretty neat.
And you can gather just a lot more information on our website.
So if you're doing like a penetration test, you can get all kinds of information that people don't
know on the Internet.
So you can see this is all publicly available information so that anyone can just go out and, you know,
search the Internet for it is definitely something that's worth using when you're conducting like an
external assessment.
See, it's pretty good.
You know, you can have you get an IP address right here.
We have the operating system is pretty neat.
So I recommend that you guys definitely add this to your arsenal if you don't like passive recognizer's.