WEBVTT

00:00:01.540 --> 00:00:03.160
Welcome back to our lab environment.

00:00:03.540 --> 00:00:04.600
In the previous demo,

00:00:04.610 --> 00:00:08.160
we saw how to enumerate the information about our target domain.

00:00:09.140 --> 00:00:13.970
Now, in here, let's take a look on how to visualize the data that we collected.

00:00:13.970 --> 00:00:18.560
First, we can check out the previous scans by using a database module.

00:00:19.340 --> 00:00:20.030
For example,

00:00:20.040 --> 00:00:25.060
let's run amass db to specify that we want to use the database

00:00:25.060 --> 00:00:30.410
module, and then let's use ‑dir to specify the directory in which I

00:00:30.410 --> 00:00:35.340
have the data saved, and then let's use ‑list to list out the

00:00:35.340 --> 00:00:36.860
enumeration attempts that we've done.

00:00:38.940 --> 00:00:42.660
Then take a look, we have here the two enumeration attempts that we had.

00:00:43.540 --> 00:00:47.310
Let's take a look at the results of one of them. For that, I'll

00:00:47.310 --> 00:00:50.830
use the same command, but instead of using list,

00:00:50.990 --> 00:00:55.600
I'll use ‑enum and then the number of the enumeration attempts that I want.

00:00:57.040 --> 00:00:57.740
After that,

00:00:57.750 --> 00:01:00.800
I'll use the flag ‑show to indicate that I want to see all

00:01:00.800 --> 00:01:02.350
of the results from that enumeration.

00:01:04.540 --> 00:01:04.959
Perfect.

00:01:04.959 --> 00:01:09.390
Take a look, we have here the results from our first scan, and

00:01:09.390 --> 00:01:12.890
this can be really useful if you run multiple scans against the

00:01:12.890 --> 00:01:14.860
same domain across a period of time.

00:01:15.740 --> 00:01:18.610
For example, you can run this once a week and then

00:01:18.620 --> 00:01:20.960
compare the results to see what is new.

00:01:22.640 --> 00:01:23.070
Okay,

00:01:23.080 --> 00:01:27.920
now, let me show you how we can create a cool graph with this data. For that,

00:01:27.920 --> 00:01:31.860
I'll use the amass module called this from visualization.

00:01:32.640 --> 00:01:36.680
I'll add to this command the ‑dir and the name of the directory

00:01:36.680 --> 00:01:41.760
that I have the data saved, and then I'll use ‑d3 to specify that I

00:01:41.760 --> 00:01:46.260
want to graph in the d3‑format. And once I run this, amass will

00:01:46.260 --> 00:01:49.340
take all the data from the enumeration attempts, and then we

00:01:49.340 --> 00:01:50.660
generate a graph for us.

00:01:52.140 --> 00:01:56.360
Then all you have to do now is go to this directory using the File Explorer.

00:01:58.140 --> 00:02:00.450
And in here, you see the globomantics folder.

00:02:01.340 --> 00:02:02.210
Once you open it,

00:02:02.220 --> 00:02:09.050
you see this HTML file, and this is where we have our report. Then

00:02:09.050 --> 00:02:12.250
take a look, this is a really cool graph showing the domain and

00:02:12.260 --> 00:02:13.750
everything that is associated to it.

00:02:14.640 --> 00:02:18.560
In the center, in this red color, we have the domain that we enumerated.

00:02:19.440 --> 00:02:22.460
Each circle is one piece of information associated to it.

00:02:23.440 --> 00:02:24.110
For example,

00:02:24.120 --> 00:02:27.850
those orange circles are the IP addresses associated with the domain.

00:02:29.040 --> 00:02:29.760
Pretty cool, right?