Hello, my name is Typhoon.
And in this another oxygen lecture, you will learn how to gather usernames and email addresses and
use scraping techniques.
A technique that attackers utilize to extract a large number of data sets from websites whereby extracted
data is stored locally in a file system is called scraping or web scraping.
In this lecture, we will utilize some of the most commonly used tools in Linux to perform scraping.
So let's gather usernames and email addresses by using the Harvester tool.
So the Harvester is a and script that searches through popular search engines and other sites for email
addresses, hosts and subdomains.
Using the harvester is relatively simple, as there are only five command and switches to set here.
The first layer I'm going to share this commands and use all of them of course.
So let's actually use the harvester.
As you can see, we you just writing the harvester and running in terminal.
We'll get something like that.
And here we're going to run this.
The harvester, our rock.
Let's call the Help.
And here there's an.
Options you can use when performing and running the harvester and using scraping techniques.
Here.
So now we're going to use the DT parameter domain.
So here we will use our own domain here.
The Ha star.
The.
This is, uh.
This means we're going to enter the domain after this parameter here.
Oxley.
On Slate.com.
And after that, the here we're going to enter the L limit.
We're going to limit the number of search results.
As you can see here, default is 500.
So if you don't enter any parameters, the default is going to be 500.
But I don't find a lot of results because it's my website and I know what's inside it here.
We're going to set and limit to 200, for example, and now we're going to use the be Google.
Google.
This is the browser that we're going to use here.
Let's translate it p source here.
There's an.
Options you can use as search engine or other kinds of engines that search things such as repeat DNS,
GitHub code, hacker, target hunter, interlink omni, send security trail supplies.
The rest, you know, we all use this tool DNS dumpster and other search engines, for example, being
Baidu and Google.
Yahoo!
Zoom here enter in also invalid search because there's no Google option here.
Then.
Then we're gonna use Bing or.
Being Google GitHub.
Yeah, we will use the Bing here.
Target Telecom.
This is our own websites.
No, not nothing is found because our website is not so famous in Bing and we don't actually give the
search and scraping access to being here.
Let's actually use DuckDuckGo.
Duck.
Duck, call.
Same result here.
It's actually use Yahoo!
And let's actually use the.
GitHub.com.
No emails found.
Ing.
I'm going to search on the bank.
And here we got the IP addresses and subdomains about containing to GitHub.
So.
Here and the attackers can utilize the LinkedIn IP to extract a list of people within a given domain
and easily form a list of possible valid email addresses and usernames.
So an example will be when an organization uses the first and last names within the format of for example.
Example at uh at Oxley dot com for example at Oxford dot com.
The Harvester tool can be utilized to enumerate the user details on who is currently working on organizations
also.
So we can also use the obtain user information in next lectures with tiny.
I'm waiting you in the next lecture.