Hello everyone. Welcome to another video from section 2
and map Essentials. In this video. We're going
to talk about what is information gathering. Exactly information
gathering is a function for find different
kind of information. Unless the Target in some
cases, attackers come to the Target company to get some
information. Like how many employees work on that company or
what series of the using consistent?
I was also host names and surnames or the eyepiece and
Mac address producing the Cyber Securities industry.
This is the first step or better to say one
of the most important steps in
ethical hacking or pension testing. Because
any information that we are taking in
this step, we're going to use it in the further steps. We're
gonna take strategies how we're going to use it while you're going to use it
and what we're going to use it. So it's one of the most important thing
that we're gonna pay attention because any
formation That We Gather in this step is going to help us to
process. An Executor scenarios, any
basic cybersecurity information gathering process of includes to
type of data collection. Your first one
is collecting mutable data such as public profits,
and Associate domain names is for
cost and public, and private IP blocks routing tables
TCP and running Services. SSL, certificates, open
ports that we Sai
example in last video and Mac orders.
The second one is collecting system related information.
This one is included user narration system
groups or as host names or Os, or purchases the
types. And actually gone out to example in
a further video to how we're going to find out our system of
a user and Company. Also use a mini more
information that we can gather from many ways.
But now we just got to talking about Phil's are
related to our courses. How we are going
to use it. There are several way that we using to
get information from a Target such as social engineering
that including person chats phone conversation
and evil, spoofing attacks and scams through
search engines that web crawlers. And
we kind of call it, maybe Google Docs and
also the social networks such as Facebook, Twitter, LinkedIn, Instagram,
and other networks that you
Gonna build a information profile based on their activities.
There's a domain names is
already registered by organizations governments public
and private.
Agencies and people. Therefore, there are greater starting point
when you want to investigate some targets, personal
information project, services, and
Technology, they using.
Also, there is an internet services. DNS
servers are a great source of information. As they often
include a very single surface Point ex post
the internet's which means the direct link to the related services
such as HTTP, email then, Etc. So
now we know that creating a full list of the information gathering
tools could be really helpful for
us for our process.
As I said, there's a many ways to help
you in this process, but our beloved need
for the scanner and our subject in. This course
is nmap. That could be always the first position
when it comes to the data Gathering tool. It
can be used, not only to scan ports, and
services and fingerprinting. But also as
an illness in the mauritian and network, mapping tool is
a great way to do the information gathering
in your first.
And in one of the most important steps in control testing or
ethical hacking. So let's have it. We do summary. First
of all, we have a quick brief on information gathering. What
is information getting exactly the second we
have some examples for running some example for you and
alas we talking about why and how
we are going to use information gathering and
talking over the concept. In the next video. We're
going to talk about TCP and UDP. See you in the next video.
Good luck.