It's time for us to discuss more about search engines and, of course, foot printing.
So realize that there is going to be other engines that reconnaissance folks are going to be utilizing,
like reverse image searches, where we will start with an image and then it will break down the metadata
that is associated with that image.
There will be, of course, video search engines that we can reverse engineer, videos from metasearch
engines that are going to be searching specialized searches on the metadata.
Remember, metadata is data that describes other data.
And of course, we can search for EFTPOS resources made available via HTTP and https, but we might
even need to do specialized FTP search engine type work, which will be gathering information from Iot
search engines.
We're going to show you some of those when we discuss Iot in specifics later on.
Of course, financial services, job sites, all of these can provide valuable footprint information.
Now, be aware there is the deep web and the dark web.
And we're going to go into details on those for you in a moment.
But there are going to be browsers and World Wide Web virtual libraries that are going to be enabling
you to traipse into that deep or dark web if you are so brave, by the way.
One of the things that we're going to educate you on here is what is the difference between the deep
web and the dark web?
And I'm going to give you a hint.
We're going to elaborate on it later.
But think about identity.
Okay.
So that's going to be the key difference between the deep and the dark web.
Let's also use a tool if we are practicing reconnaissance in a pen test.
Let's use a tool that will find all the top level domains and there subdomains that an organization
might have.
So imagine that they're mapping out the entire structure of your web environment with a tool like Sub
Lyster.
And gosh, you got to love some of the names of these tools, right?
The sub list are a tool for enumerating the subdomains that a public web server might have.
For example, location.
Of course, location can be recon with things like Google Earth, Google Maps, wiki mapping on social
networking sites.
There's going to be people searches that are done within telia's pepe ben verified white pages peak
you know these and even run through the exercises with these right to make sure that you're familiar
with them and the type of information that they're going to feed you.
So be familiar with these ways to perform recon with social networking, and be familiar with a utility
that is amazing to see work.
And that is the Harvester which will go into LinkedIn, for example, and call all of the email addresses,
let's say, for an organization.
Imagine that.
So sure, we could go in there and we could manually pull them out.
It's public information, but this tool will go into LinkedIn and just scoop them all up for an attacker
who may be building a map of everyone in the organization so that they can go in and socially engineer
with knowledge of the organization and all the email addresses.
And once again, we find ourselves amazed at the ease of use of the recon tools and the abundant different
ways in which there are to perform it.