And this lecture we're going to have a look on a tool called Multi-year Multicore is a program that
allow us to gather information about pretty much everything you can gather information about people
using their name, their phone, their email.
You can gather information about websites, servers, anything really.
We're going to focus on gathering information about websites.
But as I said, you can use it to gather information about anything.
So we're going to go to Cali and we're going to go to all programs here.
And I'm going to type in multicore.
And that's the right here.
Now, the first time you're on the program, it's actually going to ask you to create a new username
and password for the program.
I've already done that.
So you can just do it like next.
Next next, create a new username and password and then just log in.
So once you do that, you'll see this and this is the main screen of the program now, right here on
the right, you'll see some plugins or additions that you can add to the.
These additions allow you to gather different types of information, so if you want to install any of
these additions, for example, let's say we wanted to install the passive total tool, then all we
have to do is just click on the install.
Click.
Yes.
And that'll in store for you now, I'm just doing this just to show you, but let's go ahead and create
a new blank page and we'll see how we can use it.
Use this to gather information.
So this is the main view of Monteagle in here in the middle, you have your graph where you can put
your entities and track how you gather the information.
On the left, we have the polit where you can add entities and gather information about them.
And you can see that we can add any type of entity.
For example, we can add the person using their name, their email address or their phone number.
You can also add people based on social networks.
For example, they can add a Facebook account, a Twitter account and start gathering information from
there.
But what we are interested into is a website.
So we're going to start by adding a domain name from here.
So I'm going to click and drag that to my main view right here.
And when you add that in here, you can see that on the right, right here, you can modify the attributes
of this entity and on the left you can run Transformer's.
So I'll get back to transform.
Transformer's in a second.
For now, let's first modify the domain name, and I'm going to use a domain that I actually have permission
to test its security and its security dot org.
So now I can run transformers that allow me to gather information about this domain from the left,
from here by clicking on the play button, or I can.
Right, click it and run a transformer.
So I'm just going to go to the home screen right here and I'm going to do is right here, you can see
that we have the Transformers categorized into different categories and you can click the button right
here.
So you can see that there's actually a double click button here and that'll run all the transformers
inside this specific category.
If you click on the category itself, you'll see the specific transformers that you can run.
So, for example, I have a DNS or a domain right here, and I want to see the websites associated with
that domain.
So I'm going to run the transformer to a website based on search engine, and that'll show me the websites
associated with this domain name.
And right here, you can see that we have three websites, we have w w w dot Wi-Fi dot security dot
org and we have a security dot org.
Now these two websites are the same, so I'm going to delete one of them.
I'm just going to click it and delete it.
So that our graph looks better.
Now, let's see what other information we can get from this song.
Right, click it again and let's see and try to get all the subdomains that exist within this domain.
So we're going to track it to name schema.
And again, I'm going to click on the play button right here.
And now we have more websites, we have news that is security dot org, we have a security dot org,
which is essentially the same as this.
So I'm going to delete this one.
And we have the FTP, that security dot org and mail, that high security dot org.
So now we have information we know we can connect to it based or through this web, this subdomain.
Now, again, all these websites are associated or stored on the same server, so we can go ahead and
try to hack into one of these and gain access to our main website, or you can use them to gain access
to our main server, basically.
All of these transformers, you can run them the same way, so I'm not going to go over all of them.
Let's just have a look on one more, which is the next record and what this will do, it will see the
mail servers that the target website uses, and we can see that they're using Google to handle their
mail.
So, again, this is very important because, for example, if there was a certain vulnerability in
Google or in the e-mail server that they're using, then we can exploit that to gain access to their
emails and maybe use that to gain access to the website.
So I'm going to delete the Google servers that we got because they're no use, because I just want to
keep the useful stuff in here.
We can use each of these entities now together even more information about it again.
All you have to do is click it right click and then run Transformer's.
But we're still not finished with the domain.
So I'm going to go back to the domain and I'm going to go back to the main menu.
And right here we can see that we can get the domain all in our details so we can get stuff like the
email addresses.
We can check for entities from the Who is information and we can also check for phone numbers.
So I'm going to go back and run on the double play and click on the double play to run all the transformations
within this category.
Now, I security is using privacy, so we won't really get much, but if the target's website wasn't
using privacy, then you'll be able to get their phone numbers, their address and very important information.
So, again, I'm going to delete the useless stuff right here.
And we're going to have a look on one more transformation.
So, again, we're going to go back to the main menu and we're going to look for files and documents
from this domain and again and again to all transformations within that category.
And this will show me any files or maybe any interesting files stored on that domain.
OK, so this finished running, and as you can see, we got a lot of files now, a lot of these are
just pdf pdf books.
But again and again, a lot of websites, sometimes you will get files like the password file or files
with sensitive information.
So, again, this could be really, really useful in your information gathering step.