Hi, and welcome back to the Deep dive into
netted. Assessments by easy console. This
is section for advanced network
security techniques. In this video,
will take a look at in emerging boots. Wall hose on
discovering. What are there? Any hidden websites? So,
without further Ado, let's dive on
in.
To get started. Let's have watercolor acts
like so, and let us open our
terminal.
Once we're on Oak Islands machine with
an alarm. Let's use the ipde Dr. Come
on to verify our interfaces and
a network. We're connected to currently, I'm
connected to a private network
using my ethernet zero doctor. And I'm
on the 192 168 56102 Network.
So I'm going to copy this IP address. I sue,
and I'm going to perform a simple
and lots can sew on a
to space the network ID
together with the network prefix
lightest. What is, do you prefer my
tires can within my private Network
and show me the number of devices are available
together with any device and a
open ports. Currently we
have a device which is 192 168
ft 611,
On this computer's IP address just in case we
can Seaport. It is
open and the cool thing is 40. T
is Mark II. Hdb this mean
to say there's a web server running on
this target system.
Next, we can use and map to actually
perform. Something new has HTTP enumeration.
So, let's do a map, space dash dash
script.
Space, are you type http?
Dash enough for
numeration, unless pacify
or Target.
And mop will simply seek out any URLs,
any hidden directories and
presented to us on the stereo system.
Convo, look up all the responses. We got.
This is a lot of results. Results a
little bit better. So I'm going to play
this one that's wrong. Not to come on but this
time let's use - P unspecified Port
80. So therefore and map will
not perform scanning on any additional ports on
our Target. So that's it. Answer. Now.
And results is going to retune. So,
as you can see, our results
is a bit cleaner. Currently, we
can see their various.
Resources that are available on a
Target system.
So what we can do next is we can simply visit
all the Target by opening a web browser, on visit,
each of these actual resources,
which may be Fuller's oil insensitive
directories.
I'm not sure we can use as something known as their Buster.
So let's type derb bus. The
lightest on hit, enter on. This
will open the user interface lightest to
get started. We can simply enter
the IP address of all the target virus,
unless specified, actual protocol, hdb
colon slash slash and actual
IP address of our Target. And what
we want to do next is to actually find a
word list using witless will help.
Their bastards are Aquarius Willis, take two
words, or to the actual Target deer for
the wordless assembly. Help the roster to find any
sort of hitting directories, Ono, Target
system.
So do I would let us under Buster?
Let's click on browse right there. And
let's navigate to our us
are directory. So let's use a drop-down. Let's go
to the root directory. Like so and we
have a bunch of wood listed in
the US are on inside here.
Let's look forward list.
Pocket simply click on a folder lightest and
i w o r d on it. So quickly. Find
full of worthless and check this out
inside. Hit it. A tons of Willis are
we can use. So that's quick wanderb. And let's
choose. Let's say, for example, we use
a common woodless, which is common, the
TXV. Let's click select.
No, Tashi, perform
the scan. Let's click on. Start on Starz
right here.
So what's happening? It is actually
seeking out all the hidden directories and presenting
it to us right here on a
command line interface. So you can see if I'll
phone and we can also see, directories are
being found.
Let's click on Oakey and
you must answer. Okay, that's
the conference before. This one. Are you showing
the console? Yes, so it
will continue on this should take a couple of minutes to complete.
So why the scanners running? We going to wait a few minutes and what
we can do now, why? It's kind of running. Let's
click on result listview. We
can see all the fossils found. We
have some hdb 200,
cool, such a successful. We have some food
trees. Let's click or result review
and this feels really important. Cuz
this Fusion show us the actual hierarchy of
where Susan directory saw
located together with where these resources
can be found. Or example, we can
see is a few folders inside are so there's
a h t pass WD Hulu, let's forget
all hideous. Nothing inside here. Let's click
on one that has two hundred such as phpmyadmin
on try this
out. We actually have you on subdirectories. You could've, I
expand these directories look for sensitive information.
We have a table full of inside. It
is a peach pie Peach and is
even to channel resources hidden in
some of these folders here.
Sinus tablets to cuz, as you can
see, it will take a very long time to complete, which is approximately three
hours. So, at this point, you have
an idea on how to use a map to actually perform in the
mauritian. And you also have seen how to
use their Buster. If they all he's under Buster because
it's using would list. It takes a really, really long
time to complete. However, as a cybersecurity
professional or even met with security professional, you
need to ensure that a scam completes because
you can even find his not sensitive information that is
within web applications on such
information can lead to security vulnerabilities.
In this video. We took a look at actually performing
in numeration off a website only target
host.
In the next video, will be covering identifying on.
Assessing reverse proxy mechanisms. I
hope this video has been informative for you, and
I'll see you at the next one.