To make our spearfishing email even more convincing than just using a real notification sent from Facebook
or from your bank or your organization, you're going to need to understand a little bit more about
IP addresses to see what I mean.
Let's open up our Windows VM again, and I'm going to go to Google Chrome and I'm also going to going
to open my command prompt.
Remember, the command prompt is just seemed.
So I'm going to need both Google Chrome and the command prompt open for this, if I go to a familiar
Web site like Google dot com, if I type in Google dot com into my browser, that domain name from our
domain name system or DNS system that runs most of the Internet, that domain name system resolves that
name Google dot com to a Web address.
And that Web address takes us to this Web site.
And we've got a different doodle for today.
The same thing for Facebook.
Dotcom takes me to the Facebook Web page.
So I type in just a name and it takes me to a Web site, which is actually a Web server running at a
specific IP address.
But how can we find out the IP address of that server?
Well, let's come back to our command prompt window and let's use the ping command ping www.youtube.com.
You notice it gives me an address for Google.
There are lots of addresses for Google out on the Internet because they have tons of redundant servers,
seventy four point one twenty five, twenty one point ninety nine is one address.
If I highlight that using my mouse and I have to highlight it.
Exactly.
And Windows 10, I just have to click and then.
Right.
Click to copy it.
Or on other versions of Windows you can right.
Click and mark and then highlight it.
But Windows 10 will let us do this.
If I ping that address and just right click the paste 74 dot, 125 dot twenty one point ninety nine.
Notice it responds as well.
That means I have connectivity out to Google.
If you don't have network connectivity on your Windows 10 bucks, maybe try turning off and turning
on the network interface from the main window.
I'll show that one more time really fast.
Click down here, disconnect your network adaptor, then reconnect it, then try to connect if you're
having trouble and make sure you are on that public net address.
Make sure you're on that public net address tonight at 9:00, dot something, and if I do an IP config,
I can see I'm on the 10.1 95 address right now, so I'm on that tendo at Nine Public Network.
So let's see that ping command again, paying without Google dot com.
And it gave me some address, 74 dot 125 just happens to be what we're using here.
So if I take this seventy four point one twenty five that twenty one point ninety nine or whatever address
you get for Google and switch back to Chrome.
Many people don't know that we can do this.
We can paste that address right here and hit Enter and it takes us to Google as well, we can do the
same thing for Facebook or any other website.
But here's another step there.
I'm going to show you two more ways to change this URL so that it's not immediately apparent that we're
running something from a Calli Linux computer.
Let's say that I were to type.
Let's try this Facebook or B.W., that Facebook dotcom com at.
Google dotcom, you've probably never seen this before, but Facebook dotcom at Google dot com, this
at Simbel is a holdover from the days when we used to do FTP or file transfer protocol and other user
log ins through a browser.
So this will take everything that appears before this, as long as there are no slashes or other illegal
characters.
Dots are OK.
That will take everything before this and use it as a username to try to pass to this Web site, the
site after this.
So I would expect by looking at this just really quickly, it starts with www.youtube.com if you don't
notice the rest, you would expect this to take you to Facebook.
But if you put HTP colon slash slash before this address, notice that it grais out the first half because
it tries to see that as a username at Google dot com.
Watch what's going to happen.
It's going to load Google, not Facebook.
Well, the same is true here if I go to Facebook.
And if I say htp, colon, slash, slash, Twitter, Facebook dot com.
You have to type this exactly at and use that IP address for Google paste seventy four point one twenty
five point twenty one point ninety nine.
Now, this looks like it really is a Facebook dotcom Web site, right?
HTP colon slash slash w w w dot Facebook dot com at.
And then some numbers.
Most people don't realize that that will take you to wherever this address goes.
And that took us to Google.
Well, it could just as easily take us to our ten point nine four address, but let's get even trickier.
We can convert this number to a different type of number, to an integer to one single number, instead
of the four numbers separated by dots that we normally see as an IP address, we can change this so
that it is one single long integer, one single number.
Let's see how that works.
First of all, make sure that you get to Google from that address.
Good.
We're going to look for an IP address to integer convertor IP address to integer converter, and you
can pick any of the results that come up on Google.
You can do this by hand yourself as well.
I'll show you how.
But I just happened to pick IP, address guy dotcom slash IP and I'm going to enter that Google address
that I got seventy four point one twenty five twenty one point ninety nine and click convert.
And it tells me that that IP address seventy four point one twenty five to twenty one point ninety nine
is equal to this integer.
Well, this number is just this number, 74 times, 256 plus this number one hundred twenty five.
Multiply that hole number by two hundred fifty six, then add twenty one, multiply that new result
by two hundred fifty six, then add ninety nine.
You can try it on your calculator, you'll get the same result.
Will copy this address or this number.
And now here's the magic type in http colon slash slash.
And that number.
One, two, one two four nine seven one one four five nine in this case was, what, seventy four point
one twenty five twenty one point ninety nine converted to as an integer just by doing that math and
hit enter.
Notice it converted it really quickly to a four component dotted IP address and then took us to Google.
We're going to make use of that in our spearfishing email.
We'll see how to change our URL so that it looks exactly like it's taking us to WWOR.
Facebook, dotcom fact.
Let's test it here really fast.
W Facebook dot com.
At and that integer Paiste.
Just remember to hit HTP Collins before it, and this will not take us to Facebook dotcom, it will
take us to Google dot com, we're going to see how to redirect that to our Calli Linux IP address in
the next lesson.