OK, so the next tool for opensource reconnaissance is called Shodan is the website, a shot in the
eye and is actually known as the hacker is Google.
And this because it's a site that literally has information about almost every single device connected
to the Internet.
You can find a valuable information about targets and they discover vulnerabilities that are affected
by them.
And this is all open source intelligence.
OK, so let's go ahead and check out showed.
And this is the home page, the should.
And I really think these guys should go there and actually check it out and search around and actually
create an account because you get a little bit more of access.
But typically you want to come here to search something like an IP address, like a specific server.
So let's say like you're doing a penetration test for a company and you have their domain name, you
want to go ahead and figure out what the what the actual IP address.
You just do a quick, like, DNS lookup and figure out the exact IP address of that domain and type
it in here.
So for just for this example right here, I'm just going to do the Google DNS or the public one that
anyone can use.
So it just eight.
Daddy, Daddy, Daddy.
And we're going to search and see that it came up with a specific machine.
So right now, is it necessary?
So, of course, you know, Port fifty three is going to be open on that.
So we have, you know, the country of origin.
We organization, Internet service providers.
Also Google, you know, the last one that this was updated.
We have hostname information and what you might see with some other systems.
I'm not going to show you any public systems that might have vulnerabilities, but what you'll see over
here is like, you know, hey, this vulnerability might be susceptible to this vulnerability because
it actually goes through and actually like looks for these things.
So it's pretty neat and it's a pretty powerful tool.
And I believe that you can also type in, you know, like different like code names and such as well,
are you URLs and find things here, too.
I'm not going to show you too much because you never know what you could find when you start something
on here.
So be very careful.
Once again, I'm not giving you permission to do anything malicious, but when you're doing open source
intelligence research and you need to find information about a public site, I definitely recommend
that you guys check out Shodan and.