WEBVTT

00:00:05.340 --> 00:00:09.870
Hello, everyone! Welcome to Pluralsight and this course, Reconnaissance

00:00:09.880 --> 00:00:14.090
with Shodan. In this Red Team Tools course, you'll learn how to gather

00:00:14.090 --> 00:00:18.180
information about potential targets using Shodan. In the reconnaissance

00:00:18.180 --> 00:00:21.830
phase, red teams collect detailed and relevant information about

00:00:21.830 --> 00:00:26.060
specific targets to plan a variety of attacks from first exploitation

00:00:26.240 --> 00:00:29.680
through lateral movement and even social engineering and physical

00:00:29.680 --> 00:00:30.290
attacks.

00:00:30.740 --> 00:00:33.950
Reconnaissance is the first step in a red team engagement.

00:00:34.540 --> 00:00:38.210
Shodan is a proprietary search engine that is actively gathering

00:00:38.210 --> 00:00:41.220
information about devices connected to the internet, often

00:00:41.220 --> 00:00:43.410
referred to as the Internet of Things.

00:00:43.420 --> 00:00:47.800
Shodan is a valuable tool in reconnaissance because it maintains current

00:00:47.800 --> 00:00:51.460
information on almost every accessible device on the internet.

00:00:52.140 --> 00:00:56.030
We will start this course by learning more about the capabilities of Shodan

00:00:56.040 --> 00:00:59.240
to enable us to find connected devices with IP addresses,

00:00:59.360 --> 00:01:03.360
open network ports, software versions and configuration details,

00:01:03.510 --> 00:01:07.370
digital certificate information, and a list of potential vulnerabilities.

00:01:07.750 --> 00:01:10.930
We will also look at using Shodan from a red team project

00:01:10.930 --> 00:01:14.290
perspective, where we will focus on a specific organization and

00:01:14.290 --> 00:01:16.220
their connected devices and locations.

00:01:16.640 --> 00:01:19.540
As Shodan does the active exploration for us,

00:01:19.550 --> 00:01:22.850
we are utilizing the information collected in a passive manner.

00:01:23.240 --> 00:01:26.100
The target will have no indication of our activities.

00:01:26.110 --> 00:01:29.410
Whether you're trying to gather open source intelligence as part of a

00:01:29.410 --> 00:01:32.310
red team engagement or want to discover and protect your

00:01:32.310 --> 00:01:34.780
organization's connected devices from attackers,

00:01:34.790 --> 00:01:36.720
join me in learning more about performing

00:01:36.720 --> 00:01:39.860
reconnaissance with Shodan, here at Pluralsight.