Original subtitles

Today we're going to learn how to get information about the technologies used by the target website.

So we're going to use a Web site called Netcraft and I'm going to put my target here and as you can

see I already put it there security dot org.

So I'm just going to hit enter and again first of all you'll see some basic information such as the

website title the description the key words.

And when the website was created scroll down you'll see the Web site itself the domain name the IP address

just like we've seen in the previous video the domain register are.

So the company who registered the domain for us for security.

And you also see information about the organization.

And here you can see it for this example because security is using privacy protection but usually you'll

be able to see it and see more information.

We can also see that it's hosted in Netherlands.

We can see the name server which is the Knopf dot net.

And again if you just go to them not dot net you'll discover that this is a Web site for web hosting.

So we know this is a web hosting company in worst worst case scenarios we can use this or try to hack

into them of itself to gain access to security.

Scroll down you'll see history of the hosting company is that security used and we can see that the

latest one is this one and so on and on Linux with Apache same server that we've seen in the previous

video to point three point three one with Unix mode SSL and all the other add ons.

Again this is very important to find vulnerabilities and exploits on our target computer in the security

section you'll see if the website has any spam and you can see that it doesn't really have any spam

scrolling down on the web trackers it will show you the third party resources or applications used on

our target so we can see that our target uses Google Analytics Google CD and and other Google services.

So this could also help us to find or gain access to the tablet computer.

The technology is one of the most important tabs or sections in here because it shows us the technologies

used on the target's Web site so we can see it use an Apache web server we already know that on the

server side we can see that the Web site uses BHB.

So this means the website can run can understand and run ph code.

This is very important because in the future if we manage to run any kind of code on our target then

we know this code should be sent as page code so for creating payloads in Meet asteroid or even evasion

we should create them in PNH format and the target web site will be able to run them because it can

support support ph we on the client side we can see that the Web site supports Javascript.

So if you run javascript or if you manage to run javascript code on the website site it's not going

to be executed on the Web site.

Will be executed on the users who see the Web site because Javascript is a client that client side language

and ph is a server side.

So if we if we manage the wrong ph code it will be executed on the server itself.

If you manage to run javascript it's going to be executed on the users or the people who visit the website

Same here with Jay.

This is just a framework for javascript.

Scroll down we can see that the Web site uses WordPress.

This is very important so Netcraft will also show you any web applications being used on the Web site.

So Wordpress is just a web application so you can see other examples.

In your case and it's open source web application that a lot of other web sites might have.

The good thing about this is you can go and find exploits or vulnerabilities within this web application.

If you are lucky enough to find an existing one then you can go ahead and exploited on the target website.

So for example we have WordPress in our example and I'm going to go to exploit database

and if we go on the search here.

So I'm just going to type in wordpress here and see I'm not a robot.

Then we're going to search

and as you can see we've we managed to find a lot of the exploits related to WordPress.

Now these are related to different versions of Wordpress so you need to make sure that you have the

same version on your target and we'll have examples to see how to use exploits like these.

But it just shows you how powerful information gathering is.

Again going down you can see that the Web site uses C panel.

This is another web application it's a hosting control panel.

Again you can go on exploit database and see if you can find any vulnerabilities or exploits related

to and you can also find other information such as that Web site uses HDMI and five uses VSS and all

that kind of stuff.

So Netcraft is really useful from what we managed to know that the website runs ph.

Iran's javascript it uses WordPress so we can use Wordpress to hack into the website A.E. panel and

we can also if we go up we also manage to know the Web Hosting or even we found that in the previous

video that demin of is the web hosting company of this Web site.

So in worst case scenarios we can try to hack into that web hosting and gain access to our target website.