Hi, guys, welcome back to another episode on How to Hack.
So today we're here a week on energy and this is a reconnaissance framework tool that could help us
find out more information about a company, Arbol, an individual, and looking for a lot of details
of what kind of systems, services that you're running so that we can get those information.
All right.
Before we launch an actual exploitation, before we try to look up, what are the common vulnerability,
exposure details associated with those services so we can actually help us speed up the process of performing
reconnaissance or information gathering.
And what it does utilizes multiple tools to help us consolidate and aggregate those findings.
So what I can do here is I have recon, Angie.
All right.
And we can look at the information.
So it's a full featured reconnaissance framework, very, very similar to what we have used a framework
in terms of how the interface looks like, how we can issue instructions into the framework to perform
our reconnaissance.
So what we can do is we can go ahead and open up terminal so I can open up terminal here and I can enter
pseudo recon.
Angie, I do run a super user and I can enter the password to my login.
All right.
And this would begin.
Rickon Anji.
So what we have here.
Right.
We can see immediately.
All right.
All those information.
So I've installed pretty much all the modules.
So by default on energy comes alongside with colonics.
And of course, we have a lot of API required to run.
So and kind of check, for example, open source intelligence for shodan get up.
And many of this other APIs are needed to utilize those open source intelligence platforms to help us
do to searching and crawling across the list.
All right.
So Paulist and many others.
So what we can do is we can take a look at some of the molecules that we may not have an API for it.
So all you got to do is enter help.
And this would actually show us all of those different instructions so we can.
All right.
So we have a dashboard, we have the workspaces database.
We have the index to marketplace where they will list on all those modules and you can select whether
you want to choose to install them or not.
All right.
So what we can do here is we can enter a marketplace, OK?
And we can do a double tap to see all the instructions that we can look out for and we can enter search.
And I could hit enter on this and just show us all the molecules that we can access from marketplace.
So unlike the earlier version of Recology, where all the molecules are installed by default, which
can possibly take up a lot of space, what we have here is we Conergy and all the modules and we can
see, for example, here by scrolling up the table, the POF all right.
A path, the version, the status and update it.
All right.
And of course, right here, we can look at the different kind of subcategories, discovery, exploitation,
in part reconnaissance companies, contacts using being linked in cash.
All right.
We have domain's information as well.
All right.
We have Shodan organization using showed and do due to reconnaissance for us.
We have contacts and we have credentials Domain's companies that we can find out more information.
And we have domains hosted using search engines, again, helping us find out more information about
all the domains inside that particular domain name or web server.
OK, so again, we can look up all this different details here.
We can even look for location ports, looking at various total.
All right.
So we're utilizing a lot of all these platforms within what we want you to help us speed up and accelerate
the whole cycle of information gathering.
So moving on, what we can do is we can utilise it in modules.
So all I got to do is enter the following modules.
All right.
Now we can double tap on it.
We can see that we can load very specific values.
So I'm going to zoom in a little more so it's easier for you to see.
I can.
To load.
All right.
Now we can look at all the molecules that we install.
OK, so we have credentials, credentials.
We have many different values that we can utilize.
So we can look at one of those modules, which is the hacker target that we can utilize.
So this is one of the most one of the more popular molecules that we can utilize as part of information
gathering.
OK, there's also many artists that you can try it out.
All right.
So obviously we would not have time to go through all of the modules here.
So it's important for you to practice all this different framework.
And you can also do a manual approach, meaning you go to say Bing dot com and you try to search those
results yourself using specific search apparatus.
All right.
You can look at, say, shodan or acritical a calendar, create an API, make the app available to you.
We can't and you integrate them and then you can utilize the modules directly from Rickon Agit itself.
OK, so what we can do next is to use the hack or target module to actually help us specify a domain.
And we can try to look up more information regarding that particular.
Domain or particular company?
OK, so what are we going to do is, is to look into all right.
Following so we can just enter values vote and we can try to enter Rickon Gulabi Domains that shows
spellchecker target hit enter on this.
All right.
And what we can do next is to enter info.
All right.
To look at the information regarding this module.
All right.
And is source Demis, we have to set all what the domain name so I can enter set options, set source
and then followed by the domain name, in this case, Loy and dot com.
All right.
So once we specify that you can enter, run, hit, enter on this game, checking more information regarding
the domain.
So in this case, we follow a number of services which has this sub domain information.
So in this case, we have Web disk C panel webmail fler resolve to auto discover Sepi Callender's CPP
contacts.
And again, if you look at the IP address, it's all being hosted.
All right.
From one particular web server or server and server has multiple subdomains which could be used for
many different kind of services.
So this very quickly help us identify those domain information.
All right.
So once again, I hope you trial all the different values we've been reconning.
So this is an introductory so that you can get started and try all the different events, Molineux,
so that you can learn more about cybersecurity.
So once again, I hope you've learned something valuable in today's session.
And if you've any questions, feel free to leave a comment below and I'll try my best to answer any
of your questions.
And we'd like sharing subscribe to the channel so that you can be kept abreast of the latest cybersecurity
to Target.
Thank you so much once again for watching.