OK, so for now, we took a look at a couple of tools used for information gathering, but what happens
if some of the tools stop working or if they get outdated, what are we going to do?
We cannot depend on certain tools, if at all breaks.
We must find our way around to do the task, either using other tools or by creating that tool ourselves.
Well, luckily, there are a lot of tools available for us to download online, and we cannot cover
all of them, but what is important to cover is how we can download them.
So in this video, we're going to be searching for an information gathering tool that we can download
online and then run in clinics.
And the best place where we can find those download is GitHub.
Most of you, if you are either a developer or a programmer, are already familiar with GitHub.
And for those of you who don't know what GitHub is, GitHub is world's largest community of developers
that build and share their software.
So let's see how we can download some additional tools from there.
First of all, open up your Firefox.
And when we download tools, we either know exactly which tools we want to download.
So we search them by their name or we have no idea what tools even exist.
And this is the case with we don't even know what we want.
We only know that we are looking for a tool used for information gathering.
So let's just type that in search bar type information gathering tools, GitHub.
Up here, information gathering tools get up, press enter.
OK, so let's just click and go with the first link information gathering tools, make sure that it
is from the GitHub page and down here it will update us with a bunch of different tools that are used
for information gathering.
As we can see in the description, scan all possible codes for a given domain name, information gathering,
websites, reconnaissance.
This is a program to detect probability of admin page and we got a bunch of different tools.
If we go to some other links, we will also see some other tools available.
So from the second link, we get the Sherlock, the Photon F Society and testing Bible, if we go all
the way down, here is the harvester.
Remember this tool we used in the previous video?
And by the way, if you didn't test out once again whether you managed to get some of the results with
it, try it out right now.
And down here, we will get Discover, which is also known to Rikoon striker Fred Hauk Sand Map and
a bunch of others as well.
And let's just go with any one of them.
Let's just go with this one that does fit the description.
It says all in one tool for information gathering, for ability scanning and crawling, I must have
for all penetration testers.
OK, so it seems interesting.
Let us click on it.
Click on Redhawk and here is the page of The Tool.
These are all of the files that the tool has.
We can see them right here.
Down here.
We got freed me.
This is what we can perform with Fred Hawk so we can read what are our available options with it and
down here, released versions changelog down here, we also get how we can install it, how to configure
it, and we get usage.
Now, sometimes you will need to install some of the requirements that tool needs in order to run,
and you can almost always find the comments that you must run on this tool page.
So as we can see right here, we got the usage and installation.
So all we need to do is follow both of them.
And different tools might need different requirements.
But this is something that you will get better at the more tools you install.
However, to just download a tool from GitHub, you will always use the same command.
And for this command, what we need to do is we need to copy the link to this top.
So copy up here, this link, right.
Click copy.
Let us lower this page and open our terminal.
And the comment is git clone and by the way, make sure that you're in the desktop directly before you
run this then type git clone space and then paste the link and press enter.
And this is the command that we use to download a tool from GitHub.
As we can see right here, it downloaded all of the files and right now on our desktop we got the folder
called Redhawk, which is our tool.
And also keep in mind that sometimes once you're searching for a tool, you might need to download multiple
different tools before you run into a good one.
So let's test this Redhawk tool out.
Let's see whether it is any good to run it.
Well, we don't know how to run it, but we can go to the Redhawk directory and see what files we got
right here.
So we've got some configuration files, functions.
These are all of the files that we really are not interested in at the moment.
If there was, for example, I use a file, we would most likely want to read that in case the tool
is complicated.
But for now, we've got this Redhawk dot file.
And out of all of these files, this is the file that seems to be the tool.
So how can we run this?
Well, first we notice what type of file it is.
It is a PDF file.
So to run it, we must type B and then the file name.
If it was, for example, a python file, we would type Python and then the file name.
So depending on which file type it is, we run it like this.
So Fred, that BHP and press enter it to load this with its banner and it tells us right here that some
of the modules are missing and it tells us that we can try fix command or we can simply just install
it ourselves using terminal.
So let's see whether this tool will install it for us if I type fix.
Checking if Colonel Module is installed, commands not installed and installing Kearl operation requires
the permissions you might be asked for password.
This asks us for pseudo password and let's put it.
And it seems to be downloading the kernel module for us automatically and we don't need to run other
comments.
It is also installing the second thing that time missing.
So let's just wait for this to finish.
And it tells us right here, job finished successfully.
Please restart Redhawk.
So let's clear the screen and find once again Redhawk.
And right now we don't get any error messages right here.
It only asks us which website we want to scan.
So let's just go with Google.
Why not?
Let's see what are the available options that we have and to run for HTP or enter two for DPS.
And since Google DPS, of course we will select two.
And here all of the available options that we can use with our Redhawk basic recon title IP address
called For Detection.
So let's see just the basic fraction of Google.
If I type numbers zero, it should perform the basic recon.
And here are some of the basic output for Google.
So we got site title to be Google IP address web server CloudFlare and it seems to be stuck at CloudFlare,
so let's just control it.
It could be just the back and let's run it once again.
I have Google Dotcom Type two for https and let's go once again with zero just to see whether it will
perform it correctly right now.
And never mind, it seems to be stuck at CloudFlare once again.
So let's just go with other options and test them out.
Now, this is what I'm talking about.
Maybe if you don't like this tool, maybe you want to consider going and finding some other one.
But for now, we only tested one of the options.
So let's go with other ones as well and see what else can we get.
The hope is look up.
Let's go with that one.
And we get the who is responsible for our Google good, so this option seems to work, it tells us an
incomplete presented to continue.
So let's continue and let's go with Geo IP lookup.
This should tell us the coordinates of the Google, and it does tell us the country, the IP address,
the latitude and longitude, but city and state seems to be unavailable.
Let's go with another option.
We got carabiners, DNS lookup subnet calculator and map ports can and this option right here is something
that we are not going to run right now, since this is something that we cover in the scanning section.
The subdomains scanner is also something that we are not going to be doing right now.
These options as well.
So these are just some of the advanced options that we are going to cover later on.
So we won't be running them at the moment.
We can go with it, for example, DNS lookup to check out which DNS service it has.
And here is the output.
So this tool seems to be pretty good.
It does give us some of the information for Google.
Now, of course, there are other options that we didn't run and that I would advise you not run, since
some of them can be considered advanced scanning methods.
But nonetheless, we will be covering them in the next section.
So for now on what we did is we managed to find the random tool on GitHub, install it and get it to
work.
We also tested it out and it did give us some of the information.
Now, what they want you to do for the next video is try to download the same way a tool called Shedlock,
it is also tool from GitHub.
We saw it up here.
If I go one step back to this page, the first tool that we saw was, I believe, called Sherlock.
Try to download this tool, it is a tool that is used to discover different accounts on different platforms
based on the user names that you specify.
Try it out and we will see how to download it and run it in the next video.