So let us get started with the last lecture of information gathering, and in this lecture, we will
use a search engine showdown.
Sudan is basically a tool which is used to get information about the devices which are connected to
the Internet, for example, Iot devices.
And it is really a useful information, useful tool.
If you want to find out the information regarding Wi-Fi, then CCTV cameras, Iot devices, etc..
So for this force, do we need to go to the browser on all browser?
And then I will show you how to use Shuren to carry out valuable information.
So let us get started.
So as you can see, we have used the Google to launch showdown, so what you have to type is just type
Suranne as it should be, and and then hit enter the first website, Shora and not IO is the website,
which is very useful.
Now here you can either register or create your account and then serve or you can just serve.
But for the purpose of getting more information, I will click, login or register.
I will register in front of you, so I will click register button.
And if this window appears in front of you, you just have to fill in your username and password and
then create an account for shodan.
So I will now create account for myself.
So right now, I'm in the front page of the show right now, once you register for the account, you'll
get an activation email.
Please click that link and then head on to the main page of Suranne.
So what is your plan?
As you can see on the screen, which is Suranne is your browser, which is used to basically search
the devices which are connected to the Internet, for example, the Wi-Fi, then network security tools,
CCTV cameras and much more.
So what we just write in the search box will write, oh, that's a webcam.
Let's see what let's see what we can get if you click search, we can get IP addresses of all the Web
cameras which are being installed and connected to the Internet.
And these the are actually the live webcams, so if the webcam is not configured, the hacker can click
and, you know, just explode the camera.
So I've clicked the first IP address here and see what I can get out of this IP address.
Now, some IP addresses cannot be Lauder's will just go back and then check if we can get some other
IP addresses.
So I've clicked the IP address.
So right now, I click IP address one fifty nine point one thirty eight point two, forty one point
twenty five.
And I've got the location that the country, the organization, the Internet service provider.
The last update was on It's Too Late the day, which I have been shooting this video.
Then I've also got the ports which are open like eighty, eighty, eighty one, eighty to eighty two
also open.
And if I scroll down I can get the services.
And if you closely observe this content header, you can see that it is it is powered by speed darknet.
It is powered by using the Apache Fusion is Pinole Bujon then the languages and using English.
And if you scroll down you will get a lot of information about the actual website or the web camera
which is connected to the Internet.
Now I will explore another camera.
Um, let's say I get a webcam, so I will just click the arrow.
And as you can see on the screen, we have got a live camera out here.
Now, this this camera is actually not secured.
So let us try doing some things.
I will just go up and I will click source three JavaScript.
I will just change anything that is the only source five.
And they go, I can actually see that camera that is in Serbia and it is a live camera.
I will again check another source.
And if I let's say I this was the source, then you can see this is the live recording.
So hackers can actually hack this.
Now, if you go and if at the bottom you can see it is powered by a webcam, seven words and one point
five point three zero.
Now that is here on the Google.
That is, it will end there.
You can type webcam seven.
And then just type the virgin.
One point, five point, let us see what was the verdict and just see the Virgin again, it is one point
yes, one point five point three, one point five point three point zero.
And you can go there and find the default password.
Just go down and click and you will get a lot of it if you just go to any random site, will find a
lot of information.
There you go.
You have the login page of the game seven.
And what hackers do is hackers try and brute force all these systems.
I'm trying a random password admin, which is the default password for many servers.
And the password is which means this is secure.
But again, this page might have vulnerabilities.
So now you can see here the wording is one point two point four point zero.
So what hackers will do is hackers will go on to some websites where experts are already available and
they can just enter the world number in the webcam number and they will find out that the experts and
now you can see that the connection is not secure.
This is not a secure website, which means that hackers can even hack this website.
So.
So we saw how you can actually gather a lot of information, so what you find out to find out which
version of a camera was using, you also find out the default passwords.
You got a login page.
And what hackers can do is hackers can use automatic scanning tools to get the vulnerabilities.
And this is why shorthand is really useful.
Now, what we'll do is we'll go again and we will see another Web cam if it is live.
And there you go.
It is again live.
So you can also get a function that you can actually tilt, zoom and change the angle so you can see
if you click the buttons.
This might change, but in our case, it's not changing.
It's.
So, uh, I guess the website is not functioning properly, so this is how Web cam really works.
If it is, let's check on source.
Do we actually have something inside the house?
And this camera is actually, you know, connected to the Internet.
So you can see as a security expert, this information is really very crucial.
Now, go up in the search bar and let search verify.
And.
You can see all these wildfires are actually connected to the Internet and let us check one of the wildfires.
Let's check the one in the Hong Kong.
And yes, just if prompts, let's click advanced and go ahead accept the risk.
And
there you go again.
Got some login page, which is how you like, you know, again, as a hacker or as a security expert,
my first steam would be to crawl the Web site to use the FTTH to track a website, Koppio, to download
the website, to check the virgin of the website.
And then I will see if I find any experts available on the Internet.
So this is how hackers use Suranne basically to find out all the devices which are connected to the
Internet.
And in this article, we also saw that the webcam, which was connected to the Internet, actually peeks
inside of a house.
So this is how Shonen is really very useful in getting a track.
You can also find Iot devices like robots or computers which are connected to the Internet and are open.
So again, using these tools requires your knowledge, your search filters, how you apply proper steps.
And the most important is your target should be fixed.
You can't just come here and say, I want to search your life and hack.
It is a target based system.
You should be forced, fixed your target and then use the information gathering tools.
So this was all for this lecture.
And from the next lecture we will see the second phase of ethical hacking, which is scanning and enumerating
targets.
So let us get started with the second phase.
If you have any doubts, please feel free to ask us to read out sessions.