WEBVTT

00:00:01.290 --> 00:00:01.760
Awesome.

00:00:01.770 --> 00:00:03.000
I hope you enjoyed the demos,

00:00:03.160 --> 00:00:05.440
but before we go I want to leave you with more

00:00:05.440 --> 00:00:06.950
information about this amazing tool.

00:00:07.680 --> 00:00:10.430
First, I do recommend you learning more about theHarvester.

00:00:11.140 --> 00:00:13.550
This tool can easily be expanded for your needs.

00:00:14.140 --> 00:00:16.260
For example, you can create new modules that will

00:00:16.270 --> 00:00:17.920
automate specific searches for you.

00:00:18.280 --> 00:00:20.050
And trust me, it'd save you a lot of time.

00:00:20.780 --> 00:00:24.150
And also, you can integrate theHarvester with other tools that you may use.

00:00:24.640 --> 00:00:25.240
For example,

00:00:25.250 --> 00:00:28.230
I created a little automation script that takes all the emails that

00:00:28.230 --> 00:00:30.850
we find and searches them in password databases.

00:00:32.009 --> 00:00:32.470
Also,

00:00:32.560 --> 00:00:35.360
since theHarvester is a common line tool it can

00:00:35.370 --> 00:00:37.860
automate several searches. For example,

00:00:37.920 --> 00:00:41.000
it can create batch scripts that do dozens of searches at once.

00:00:41.300 --> 00:00:44.830
So, go check out the GitHub page for this tool. In there you'll find

00:00:44.840 --> 00:00:47.060
tons of interesting information and even a wiki,

00:00:47.070 --> 00:00:50.010
which will teach you how to use the tool and how to customize it.

00:00:51.040 --> 00:00:51.480
Also,

00:00:51.600 --> 00:00:54.200
you may be wondering what you can do to protect your company

00:00:54.200 --> 00:00:56.150
from this kind of information gathering attack.

00:00:56.840 --> 00:01:00.090
Well, the first suggestion is to use theHarvester against your own

00:01:00.090 --> 00:01:02.750
company so then you can see what is available to the world.

00:01:03.140 --> 00:01:04.450
You may find really interesting things.

00:01:05.040 --> 00:01:05.600
For example,

00:01:05.610 --> 00:01:08.410
I found that my email address was on the About page of an

00:01:08.420 --> 00:01:11.400
old website that I used to have. And that explains why I

00:01:11.400 --> 00:01:13.050
used to receive tons of spam email.

00:01:13.840 --> 00:01:16.440
And once you find information that is available to the internet you

00:01:16.440 --> 00:01:18.750
can try to reduce your footprint on the internet.

00:01:19.480 --> 00:01:20.060
For example,

00:01:20.130 --> 00:01:22.110
you can ensure that your DNS records are not

00:01:22.110 --> 00:01:23.850
revealing any sensitive information.

00:01:24.340 --> 00:01:27.750
Or you can try to delete your email address from all the pages you can find.

00:01:28.240 --> 00:01:31.240
Or you can even make sure that you decommission old websites

00:01:31.340 --> 00:01:33.350
so then they are not available for hackers.

00:01:34.540 --> 00:01:36.210
So that's it. That's the end of this course.

00:01:36.510 --> 00:01:39.000
I hope you liked our demos and that now you have a new tool in

00:01:39.000 --> 00:01:41.040
your belt for your next red team engagement.

00:01:41.310 --> 00:01:42.550
So, I'll see you later.