Let's talk some other foot printing techniques.
In fact, there's so many of these unfortunately, so many different vectors in which we can be foot
printed.
I need to do a video after this one because we need to talk about email, foot printing, DNS, foot
printing in that next video.
So network foot printing is certainly a major category that we need to be concerned about at the very
least.
There is going to be this attempt to gain network range information.
The attacker needs to know the subnet addressing that you are utilizing so they can begin their attacks.
One way they get information like this is with a common tool called traceroute.
Traceroute utilizes ICMP packets and the time to live in order to trace a path from your router to a
from your workstation to a destination workstation.
This typically includes the routers along the path, although there's a lot to that.
Let me show you that.
So here you can see I've brought up the command prompt and I am going to do let's see now I'm on windows
so I believe the command will just be trace.
And that's one tricky thing on Cisco routers, it'll be trace root.
On some devices, it'll be trace Artie on some devices, just trace.
But let's just try one real quick here.
We'll try Yahoo.com out and we probably have to spell out trace root here in Windows.
So let me try that syntax.
No patch about trace Artie.
All right.
Third time is a charm, and that shows how long it's been since I've done this on a Windows system.
But anyways, there we have it.
We are trace routing to Yahoo.com.
By the way, Brian McGann, a friend of mine that is an instructor at Inter Network Expert in Ecom.
He sent me the funniest video once it was of a true like script kitty explaining the traceroute output
and I responded, See, if we just say things as instructors with great confidence, anyone will believe
anything we're saying.
It was such a hilarious video because this young script, Kitty, was so convinced that he knew what
this output was telling him, and he told a very convincing story about what this output was.
And of course, he was totally wrong.
Well, I picked one heck of a great example here.
This was a total coincidence, but it worked out great.
When I did my traceroute to yahoo.com, it started reporting about the path notice.
It started at my system and the very first router hop it went to was my wireless access point.
Sure enough, at 19216801, that is an RF C 1918 private IP address.
That is part of the scope that is used for home networks or small office networks.
That's what I'm broadcasting from right now.
That is my home office device.
That's the first hop notice.
It is not resolved to a DNS name.
Then we start getting DNS resolution taking place.
We hit a router that is at Spectrum, my current Internet service provider and look at there, there's
the IP address of that device.
We then hit a Tampa charter dot com router.
There's the IP address of that device.
These tools are critical, as you can see, for foot printing the network.
By the way, we are also getting response times as well.
So that's additional great information.
And these are the types of reconnaissance attacks that are used against the ethical hacking in the headline
features, many of them that we're going to be discussing throughout this course.
Now understand that I just got really, really lucky.
Notice how everything enumerated in this path.
That is absolutely.
I mean, I need to go play the lottery right now.
None of these devices were blocking the ICMP abilities, so everything was fully enumerated.
And we DNS resolved every single IP address of every single router in the hop from source to destination.
Normally when you are running a traceroute test like this against public destinations and as I just
did, you're not going to get anywhere near that lucky.
Now, by the way, if you need to circumvent ICMP filters, you could use TCP or UDP versions of TRACE
that are available.
We're going to have a lot more to say about this when we talk in-depth about scanning networks.
By the way, tools like Traceroute, as you just saw, they are very, very useful in and of themselves,
as you just saw.
But understand that there's tools that wrap software around traceroute like path analyzer pro where
it starts, you know, storing for you all of the records that you are finding with your traceroute.
And as you're trace routing path after path after path and completely mapping a network, it's helping
you with all of that.
So sure enough, there is great software to enhance the raw capabilities of something simple and yet
powerful like traceroute.
How about social engineering?
Yeah, we're going to have an entire chapter dedicated to it.
Sadly, it is just the bane of our connected technology culture these days.
But the social engineering we're talking about here, remember, is specific to foot printing.
So this is where we worry about things like dumpster diving, going to the organization's bin and getting
out documents that have tons of valuable social engineering info.
Shoulder surfing.
Not surfing.
Surfing.
My optical character recognition software did not do me justice there.
It often thinks my F's are tees, but anyways, that's shoulder surfing as you know, and that is looking
over the shoulder of someone and gaining information as they are working on their workstation.
We know there's those screens that you can put in place where they would have to be directly in your
line of sight to see everything clearly.
Those are a must in high security environments.
And how about eavesdropping?
We're going to see lots of ways to do that, not just listening from, you know, behind the door.
We're also talking about, you know, intercepting Bluetooth communications and things of that nature.
These are all possibilities when it comes to social engineering being used for the bad, bad foot printing
that we want to avoid against our systems.
Yikes.
And I almost stopped this video before mentioning the fourth big one here when it comes to foot printing
in social engineering, and that's impersonation.
We need to watch out for websites or actors that are impersonating legitimate individuals.
Notice.
Training.
That's how you attack social engineering.
There's no ifs, ands or buts about it.
These attacks target your end users.
They are always the weakest link in the chain.
We've got to get them trained to not fall for any of this.