Original subtitles

Hello everybody and welcome back.

And in this lecture we will cover one more foot printing tool which is basically called who is now the

WHO is is an important for printing tool because it basically gives us a bunch of informations about

the website that we scanned.

Now the information can be used for multiple further attacks since the information that we get from

the Web site from the voice command or program is basically who is who registered the website where

is it registered.

Which date does the registration expires.

We get a bunch of addresses telephone numbers email addresses and bunch of the other options so let

us just type here just who is it is installed in the clinic so you don't need to install it.

You will have it already there.

And as we can see what the usage is is who is then the option then the object.

These are bunch of the options that you have.

We will not cover it and we will just basically scan the site with the host option.

So we will just type here.

Let's scan a big site for example so we can so that we can get a bunch of the information.

So CNN dot com.

If you type here who is CNN dot com.

It should print out a bunch of the publicly available information about that Web site let us just wait

for this to finish it shouldn't take too long.

Here we go now.

First thing we see right here is that the notice one which says you're not authorized to access a query

or who is database through the use of high volume automated electronic process or for the purpose or

process or purposes of using data in any manner that violates those these Terms of Use.

So basically this is not illegal.

You can see right here by submitting a who is query you agree to abide by the following in terms of

use.

You agree that you may use the data only for lawful purposes.

So basically you shouldn't be using any of these data for any of the attacks that will cover if you

do not have permission to do so we'll just check out the data.

We will not use it for any further attacks.

So let's just see what we got from this comment.

As you can see the first thing we have here is the domain name that we typed.

CNN dot com the registry domain I.D. we can see that the registry who is server is this one.

Now most of these commands do not really interest us.

We can see this could be possibly interesting for us which is the name server it would be useful for

some of these DNS attacks.

But until then we will just check out all of these options.

Let me just see if there is anything interesting right here.

Register abuse contact e-mail.

We can see an e-mail right here.

Contact phone registry expiry date so we can see when does it expire.

Creation Date.

Updated date.

It does go a little bit down here.

Terms of Use.

OK registry the main idea.

This is basically all that we seen already.

So here are some of the publicly available information so you can see the registrant email team group

at Turner dot com.

So for example if you were an attacker and you were hard to test a company and you test their their

website ideas and you be a bunch of these emails you can use them for some of these further attacks

such as a malware sending you can send a malware for example from this email is just a hypothetical

example.

It can be used for somebody for their attacks such as sending malware to this email and hopefully waiting

for someone to open it then you will have a backdoor install on the inside of the company.

So here we can see more of the publicly available options such as directs city state postal code country

bunch of the other mobile phones emails as we said here down here we just see another email right here

and the name server as we can see this can be useful.

Let me just check you.

That is that so basically you use this command in order to gather more information about the company.

It surely can provide some of the information you might need.

So in order to for example say this to a file as we did in the previous command in the previous lecture

with Nick though let me just see if it has an option to save to a file.

I'm not sure if it does but if it doesn't.

You can do that with simply a digital screen.

Here let me go to the root directory.

So we're in the root directory.

You can just appeared in command and you can type the arrow into result of the XY now.

It won't print out anything here I believe and it will print all of the output into the result a text

file.

So when this finishes we should have a file with all of these things written to it.

As you can see we didn't get any output but if we click here unless we could type here unless we can

see the result that 60 let's get that file and we should have all of our information available in that

file now so you can send it to someone if you want to or you can just have it.

So you don't have to type the command every time in order to check something out.

Now since I don't need a file I will just delete it and that's basically it for this program.

You will find it useful sometimes and sometimes not.

But in the next lecture we will cover the email harvesting which will use a program called harvester.

I'm truly sure if it's installed.

Yeah I'm sure.

Yeah it is installed in the clinic so we will cover it in the next lecture.

And until then you can practice these two programs that we covered.

From now on including the Google hacking and NICTA and you can also practice with the WHO is program

to find as much information as you can.

Now the sit for this lecture and I hope I see you in next tutorial by.