WEBVTT

00:00:00.240 --> 00:00:05.480
Hello, everyone!

00:00:05.490 --> 00:00:09.450
Welcome to Pluralsight and this course, Reconnaissance with SpiderFoot.

00:00:09.460 --> 00:00:12.440
Before a Red Team even begins planning its attacks,

00:00:12.440 --> 00:00:16.500
it needs detailed and relevant information about specific targets.

00:00:16.510 --> 00:00:18.910
This is the reconnaissance phase,

00:00:18.920 --> 00:00:21.360
and it's one of the first steps in Red Team engagement.

00:00:21.640 --> 00:00:24.370
The Red Team can use that recon information from the very

00:00:24.370 --> 00:00:26.950
first exploitation into lateral movement,

00:00:26.960 --> 00:00:29.740
and even social engineering or physical attacks.

00:00:29.750 --> 00:00:34.390
SpiderFoot is an open source intelligence automation platform containing over

00:00:34.390 --> 00:00:38.690
200 modules and utilizing a variety of online data sources.

00:00:38.690 --> 00:00:42.050
Starting with some initial target information and the level

00:00:42.050 --> 00:00:44.100
of detail you want to get from that scan,

00:00:44.100 --> 00:00:47.780
SpiderFoot will passively gather data from those online sources

00:00:47.790 --> 00:00:50.060
based on the type of target information provided,

00:00:50.060 --> 00:00:52.660
or it will actively probe the target.

00:00:53.040 --> 00:00:55.500
It can start with a seed of target information,

00:00:55.510 --> 00:00:58.140
such as a domain name, IP address, email,

00:00:58.140 --> 00:01:02.080
or name, and then grow the search based on the data it finds.

00:01:02.510 --> 00:01:06.800
SpiderFoot presents discovered information in a fairly effective web user

00:01:06.800 --> 00:01:09.660
interface and can be managed through a simple command line.

00:01:10.040 --> 00:01:12.970
We will start by learning more about the capabilities of SpiderFoot

00:01:12.970 --> 00:01:17.150
to enable us to select an appropriate scan type and initial target

00:01:17.160 --> 00:01:18.950
so that our searches can be effective.

00:01:19.540 --> 00:01:23.340
We will also look at using SpiderFoot from a Red Team project perspective,

00:01:23.340 --> 00:01:26.300
where we'll focus on a specific organization and the

00:01:26.300 --> 00:01:28.450
information they expose to the internet.

00:01:28.840 --> 00:01:32.550
As SpiderFoot uses both passive and active exploration techniques,

00:01:32.550 --> 00:01:35.990
we'll explore options to collect information in a passive manner.

00:01:36.100 --> 00:01:39.120
The target will have no indication of our activities.

00:01:39.120 --> 00:01:41.440
Whether you're trying to gather open source

00:01:41.440 --> 00:01:43.690
intelligence as part of a Red Team engagement,

00:01:43.700 --> 00:01:47.520
or want to discover and reduce your organization's information exposures,

00:01:47.520 --> 00:01:50.230
join me in learning more about performing reconnaissance

00:01:50.230 --> 00:01:52.660
with SpiderFoot here at Pluralsight.