Hello, my name is Typhon.
And in this lecture, we're going to learn how to gather domain information in Linux using subsystem
tool.
We will utilize a subsystem tool to perform domain harvesting.
This tool is not preinstalled in Kali Linux, however, it can be installed by running the sudo apt
sudo apt install sub lister in the terminal.
So but if you don't have updated your apt yet, just use pseudo pseudo apt update here kali and after
updating your apt you can install the sub or last version of sub listed here apt sub list or.
Let's sub list.
AP to install.
Of course if they install sub lists are here.
So this tool is written in Python, which will enumerate the subdomains of primary domain using the
open source intelligence techniques.
So it utilizes API such as the ask search engine, Google, Bing, Baidu and other search engines.
Additionally, it also performs searches in net craft, VirusTotal DNS dumpster tradecraft and reverse
DNS, while also performing DNS brute force using a specific word list.
So once the tool is sold, you can run a pseudo sudo sub list 3rd and for example our target.
In this case I'm going to write for example, like GitHub.
GitHub.
Of course this is not an attack in purposes of course RT here and a with this E parameter you're going
to specify the Bing or a search engine.
For example, you can also specify the Google to use search engine for finding subdomains somehow.
Bing.
And in this case, we're going to use the being search engine and press.
Enter.
Enter your carly password which is default is carly as well if you download it from official carly linux
website.
OC.
So.
Pseudo sob blister three day the GitHub.
And tea tree.
Let's actually now try google.com.
Okay.
As you can see here, we got the subdomains that openly available by.
Google here.
So one might encounter an error message of, uh, VirusTotal blocking.
The request is can be fixed by adding your own API.
K by entering export v rt api k and here are your API key here.
So an API key can be generated by creating an account in adobe virustotal that comes official website.