In the last spectacle, we saw how to identify the servers, the technology, how to identify the domain
and domain name schema and how to identify the service oriented architecture that is the ASWAY information
in this spectacle, we will see how to identify the male Xynthia and name server IP address and the
location and the entities that start the practical.
We have already grabbed the website into the on the screen now.
This the entity.
Go to all transforms and select domain DNS.
We have done this in the last lecture.
Now the domain unclick two DNS name IMEX Mail Server.
This transform returns to mail server associated with the domain by identifying the e-mail exchanges
over attacker's attempt to exploit the vulnerabilities in the server and thereby use it to perform malicious
activities, such as sending spam emails.
Now select the e-mail server and deleted.
Right, click the government entity and select all transforms to DNS name and name server.
But identifying the primary name, server and attacker can implement various techniques to exploit the
server and thereby perform malicious activities such as business hijacking and your direction, the
NSA name server, it is the name servers associated with the domain.
You can see the names, addresses in history.
And as for anyone and us to select all the entities and delete them.
Now, you also need to delete the domain entity.
Right, click the main website entity and go to all transforms the IP address DNS.
This displays the IP address of the website by obtaining the IP address of the website, and attacker
can simulate various scanning techniques to find open ports and vulnerabilities and thereby attempting
to in the network and exploit them right to the IP address entity and select to location, city and
country.
This transform identifies the geographical location where the IP address is located.
You can see the IP address is located in United States.
Were obtaining the information related to geographical location, attackers can perform social engineering
attacks by making voice calls or is wishing to an individual in attempt to leverage sensitive information.
Now, again, we need to find a domain name that's right and go to all transforms and domain DNS.
We have obtained the domain entity, now Solectron transforms and entities from whois IBM Watson.
This transform returns the entities pertaining to the owner of the room in.
Voula, we have gathered a lot of information like the name of corporation, random amyloids, the exact
location where the IP addresses Olstad, the name of the organization HOLDA, and various random phone
numbers.
This is a whole lot of information you can get.
Select all the entities and direct them, but obtaining this information and attacker can exclude the
servers disputing the result or simulate a brute force attack or any other technique to hack into the
admin e-mail account and send phishing mills to the contacts in that account.
Click a new of.
And drag the person and dirty.
The personal entity is in the personal tab, the name of the entity is that a John Doe by default to
assign a target person name DoubleClick, John Doe and type the name of the targeted person will give
the name as Bill Gates.
Now click the entity and select all transforms to e-mail address.
Very common.
Bullah, they've got a lot of women risk, but remember, this is not the e-mail address of the founder
of Microsoft.
That is the Bill Gates.
These are the email addresses of all the people who are registered as Bill Gates, multicore displays,
all the valid e-mail address on your screen, as is the email address, and determine which phone belongs
to the target person.
Now select all the e-mail address and delete them.
This is all for the spectacle in the next spectacle, we will see the HST track website mithering.