Hello everyone.
This is saga from a degree and in this lecture we will be talking about the act of information gathering.
So what exactly is active information gathering.
Unlike passive information inactive information we directly communicate with the target.
So there are so many ways in which you can communicate with the target.
You can go ahead and perform scanning.
You can go ahead and perform a nomination.
Right.
So a very very famous tool to perform scanning is and map and to use and map you just see and map.
And then you give the target in this case I have used test SDM all thought one web dot com because you
are free to test this website then you can actually specify some flags like s the s s and there are
so many you can add dash e to be aggressive.
Right.
So there are various kinds of scans available and then map but a standard scan is then you don't give
any bad meter.
So it takes a lot of time to scan.
That's why I performed it in advance.
Now then you press enter.
It's thought this scan and it show you the output right over here.
It says it found for twenty one point twenty two twenty five fifty three eighty one hundred six 1 1
8 1 4 3 4 6 5 and 9 9 3.
And even these different ports.
So you can see there are more ports here.
Right.
So now this is a like this is showing you that what's the service and earning over here.
So this is how you can use and map.
There are many other tools like this and there are many other flags in the map that can be utilized.
Now this thing this is more focused on a penetration testing and offensive hacking stuff.
But when it come to a web application penetration testing generally the active data gathering means
that you go on the Web site that sells for example I mean go on this Web site demo destiny e-mail so
let me just BHP you can go on BHP if you want.
I will go into the esteemed version.
So I just gone this Web site and now I start attacking this Web site.
So for example I may try to go ahead and use some of the payloads in this one which may generate some
like some call for me.
So for example there is a script tag I'm going to use this script dog here.
All right.
And I see.
Let's see.
Alert.
One two three.
All right.
So this is a script I just use I can say go and you can see this.
Pages of under table with the X SS which is gross side scripting you will learn about these things in
the course itself.
But I just want to be clear that in passive information gathering you were not touching the Web site
itself.
You were not testing the Web site you are not interacting with the target in the active information
you interact with the target.
So for example here I just found that there is is as one revealed in this Web site in this search form.
This is how you do the active information gathering.
And generally it was done on the tools like and map on all to gather information.
So this is like the information button weapon testing it's generally about testing the target itself.
That's how you track information gathering.
I'll keep the series going till then.
Have a great day.