Welcome to the Deep dive into Network, assessments
by Avicii console. This is
section 2 assessment assessment methodology.
And in this
video will be covering the fundamentals of
reconnaissance. So let's dive on in reconnaissance, to
put, simply it is information gathering on.
What are you up to a nutrition tester on?
Ethical hacker. The first fees is
God as much information as possible on your
target there. Two types of reconnaissance or there's
two types of information-gathering. This passive information
gathering and is also active information. Gathering,
with passive information gathering that taco,
simply uses various resources, which I
found, let's see you on the internet.
Such as social media, websites search
engines for blogs and
someone to gather as much information as possible
about the target itself. The cool
thing about using passive information-gathering is that
it uses indirect methods to
gather information about a Target without actually engaging
a Target. So it's
like trying to get a phone number or Flexio
Target organization. But rather than you visit the
actual website of the target, you
simply perform searches on that says social media
websites on. Check to see if the numbers available on.
Let's see, the organization's Facebook
page or perhaps a Twitter page or even their
Instagram page Mission guttering
house mansion and indirect approach. However,
only so
much information, possibly. However, if
we need to determine, let's say for example.
Open DNS records running operating
system on their web server, the web
application, only publicly available servers and
even specific details such
as water bill at ease, then we need to
perform active information-gathering when using
active information-gathering or active reconnaissance Del
Taco, simply actively engaging directly
engages. A Target to get a specific details
needed. So while passive
information gathering and shows are there some level
of anonymity, we can't always
get everything. So they put simply sometime, you have to use
active information-gathering to retrieve a
very specific details about a Target the
main objectives of reconnaissance to
put. Simply it is to collect Network information such as
the Target to me. Neem. Subdue means
publicly-available, IP addresses, only
public servers.
She going to retrieve the private IP scheme
for the internal Network. We need to determine what type
of network. Protocols are being used and determine
the network. Protocols can simply leave
you to identify invulnerable or even unsecured protocols,
which we can use to take advantage
or to put simply to exploit. We
can even got us some information through various
techniques of Lexi enumeration on.
This is some information can be
usernames user groups, the
routing table system names and types.
Imagine getting a list of
Valor usernames for a system. Then.
Like have to work down there.
All we need to do next is to actually get a valid, password
to match. The corresponding username.
I will get access into the system.
We can even look at collecting organization information
such as employees data company,
directory location details. A lot
of employees whose a lot of
sense of information of social media. Websites that say,
for example, that he has an employer, you take take a
picture of the desk and they are perhaps. Let's see,
post it or even notes, containing sensitive
information that is publicly reveal to anyone
on Linton employees even take
pictures of your employee ID badges. He's going
to lead to attract actor, whose actively looking
for ways to actually get his glasses into the
company. This tractor can simply use
at 4 to use a little photo editing and
make a fake ID badge for him or herself.
Do you have various reconnaissance techniques? Some
of these techniques will include checking search
engines such as Yahoo, Bing,
Google even doctor,. So
I'll try to get as much information about the
target itself. What are
the tide is analyzation or even a person? We can
even perform advanced Google search techniques or better
than what's Google Hawking or even Googled. Walking information-gathering
through social media platforms is
also very, very easy to
do. These platforms are that's a Facebook LinkedIn,
Instagram Twitter. We
can even do footprinting on
the company's website to determine any subdue
means any love on photos, whether it
is specific person's name, extension.
Telephone numbers, email addresses,
and anything I can help us
to perform a Cyber attack.
Information coloring techniques. Also include
performing email reconnaissance techniques even
using who is to identify the registration
information of a Target organization
do mean performing DNS. Reconnaissance can
also lead to identify additional
subdue means another servers
that is related to the parent. To
me also has a shop. You can even
perform Network for printing techniques to discover who
systems running Services, open ports,
and even vulnerabilities on a network using
social engineering can help us to
retrieve an even tricked us into
revealing sensitive information on these
persons can be employees of the lies Asian. We
can even try to trick them into performing some type
of action. What it is to click a
malicious code to allow us to compromise the organization.
In this video, we have cover the fundamentals of
performing information-gathering, on explored various
techniques and tools, are they
use in information gathering in Section,
3 will be covering the practicals on
Hands-On exercises of using Kali Linux
to perform, both active and passive information
gathering. In the next video. We will
take a look at the popular Network scheduling
tools of the trade. I hope this video has
been informative for you and I will see you in the next
one.