Understanding passive information gathering, passive information gathering is when you lose an indirect
approach to obtain information about your target.
This method obtains information that's publicly available from many sources to eliminating direct contact
with the potential target based on information gathering is usually fruitful, and a lot of organizations
usually publish information and details about their organization as a marketing strategy for their existing
and potential customers.
Sometimes, when organization advertise and reconcile when a job, uh, recruiting website, the recruiter
now post technical requirements for the potential candidate for penetration testers.
Point of view The technical details can indicate the types of platforms and applications that are running
within the organization's network infrastructure.
We have covered the concepts of past information gathering in previous lectures.
Um, so now let's take a deep dive into learning about open source intelligent in the in this lecture.
Understanding open source intelligent OSINT, as mentioned previously on the first stage of penetration
test, is to gather as much information as possible on a given chariot or organization gathering information
prior to exploiting and gaining access to a network.
Ori System will have penetration.
Tester narrowed the scope of the attack and the design specific types of attacks and payloads that are
suitable for the attack surface of the target.
We will begin our information gathering phase by utilizing the largest computer network in existence.
This is the internet.
And the internet has many platforms ranging from forums and messaging boards to social media platforms.
A lot of companies create an online presence to help make their products and services potential clients.
In doing so, the creation of a company's website Facebook, Instagram, Twitter, LinkedIn and so on
ensures that their potential customers get to know who they are and what services and products are offered.
The marketing department is usually responsible for ensuring that any organization's online presence
is, uh, is, uh, felt and their origin and their digital portfolio is always is always up to date.
A caching we have open source intelligence tools here, as you can see here, information gathering,
DNS synth analysis, Maltego we have here and other tools here.
We will all use all of these tools in this course.
So organizations usually publish information about themselves on various internet platforms, such as
the blogs and the requirement recruitment websites as the internet is so readily available and accessible.
It's quite easy for someone to gather information on how to get the organization simpler by using search
engines and determining their underlying infrastructure.
This technique is known as open source intelligent OSINT.
This is where a penetration tester or ethical hacker uses the various tools and techniques that harness
information that's publicly available on the internet to create a portfolio of the target.
Open source intelligence is a type of passive information gathering where their penetration tester does
not make direct contact or a connection with the actual target, but rather asks legitimate and reliable
sources about the target.
Over the years, I have noticed a lot of job hunting web sites where recruiters post vacancies for internet
technologist positions within a company.
But the recruiter specifies that an ideal candidate should have experience with the specific technologies,
so this can be a good thing for the company and the applicant.
However, it can lead, it can be as well.
So there are some pros and cons of companies posting their technologies or requirement websites.
The purpose of this, the potential candidate will know what type of environment to expect if they are
hired and the process will.
The potential candidate can determine beforehand whether they have the skill set required for the job
and then as a concept as well.
Here, the company is passionately exposing their technologies to public so ethical can when there's
infrastructure and better selling exploits and tools to perform cyber attack.
So let's uh, we have open source intelligence tools here in this next year to be able to demonstrate
some of the most popular Open-Source intelligence tools that are available for Linux.
You should all that help us create a profile about a target using various sources of information that
can be found on the internet over the knee and then five subsections.
We will cover awesome tools like Maltego here uh, Maltego Recon Engine.
Uh, the harvester here we have, uh, the harvester.
As you can see here we have here, the harvester, the Shodan.
Here we will.
Shorten is the left side.
Um, so we can use it as well or see a framework.
We will, uh, use it.
So let's start with Maltego.
Multiorgan was created by, uh, here let's open a browser, so we will need it.
Surely we can't close it as well.
Here, don't say.
Uh, Maltego.
Uh, Proterra, whatever uh, matter of, uh, that come.
So multiple was created by Patrick Van Adcom as a graphical interface, interactive data mining application
with the ability to query and gather information from various sources on the internet and present data
in easy to read graphics.
The graphs demonstrate the relationship between each entity and the Typekit, so to get started, you
need the user account to access these functions and features of Maltego.
So, um, go to this website here, Maltego here, and uh, click on, uh, plants here, actually.
On plants here.
Oh, it's eight a.m. and as you can see, we have Maltego community here and click on that.
Here we can register and download it free.
So this is for free for non-commercial use is available across platforms and Amazon ships with colored
inks out of the box, as you can see here.
We have them all together here.
Multi-Angle.
We have here Maltego, so I've not done with it.
So.
Actually, we need open user accounts for logging in.
Let's all let's load the mouse over here.
And we need to, uh.
Yes, uh, actually, we don't need to install multi, uh, rigged system Maltego for using here, I
think.
But in previous months, actually it was like, yes, we have to log in here after reading the license
agreement.
Click next.
And here, as you can see here, uh, we have to give passwords and email addresses.
So I will, uh, use fake email here.
Uh, that go here.
And, uh, let's email fake.
OK.
Open this man with a crate and register and donate here, so let's, uh, first name is, for example,
hokey pokey, and it's get corporate as a.
And here are passwords.
As for this year?
And I'm not a robot.
Motorcycles, yes.
And click on to register.
Actually, it's safe passport, so emails sent to this.
P.M. Here, this is the.
Fake email, temporary use, so it will.
Come here, let's uh.
Let's start with Page.
OK.
Yes, it's 3:00 a.m. We enter tomorrow to go here.
Actually, it's trying this here.
She be six harsh words.
It was six hush.
Each year.
Well, it's sort of in your account has not been activated.
Click here.
So the email provides mean letters to a principal number here.
So email didn't came.
Here, so we will use we will open up baby news actually another a.m. fake here, email fake.
Uh, here.
Temporary email.
You can't use it.
So let me copy.
It didn't came right.
Yes.
It didn't came here, so let's open a new account.
Here's our email address here.
Years.
We'll keep watching.
Yes, and I am not a robot here.
And click on to register Sabes as well.
Mail sent.
Your inbox is empty.
Which is a problem here, I will start with you.