All language subtitles for 5. Shodan

Hello everybody.

Welcome back.

And in this editorial as I said we will cover the shutdown but before we go on to the shutdown I just

want to show you the harvester from the previous lecture which we couldn't get to work.

Maybe if we tried.

Right now we just located once again.

So all local users share goes Merrow tools and then the harvester.

Now one cover right now how to use harvesters since we did that in the previous story.

But I will just try to run it once again so we can see if it will work.

Now now let me just type here.

The harvester and as the domain with the leaves the same website would trade on in the previous video

which is which is this one

for the mines El command level with 500 results obs and the minus B command.

We want to search over the Google engine.

So if we just enter right here we will just wait a few seconds until it searches Google and we'll see

if right now we get some of the results that we couldn't get in the previous video.

And as we can see it will finish soon.

It processed 400 results.

And here we go.

As you can see the same website that in the previous lecture didn't work right now gave us some of the

information.

For example we found a bunch of e-mail addresses that belong to that domain.

As you can see right here we also found some of the hosts with their IP addresses that also belong to

that domain.

You can see auto all inclusive.

And we found some of the e-mail addresses that if this was a company that we were testing we could use

in order to process with our attacks for example with some malware to all of these email addresses and

hope that some of them will open it.

I just want to show you that it works sometimes.

So let's just proceed on to the shutdown which is a Web site.

So just open up your Firefox

to just open up a new tab and type here and show the will will click on the first link and it will lead

us to the Web site where we can discover some of the Moorabool devices on the Internet as we can see

this Web site right here explore the Internet of Things.

My Internet security and bunch of other things.

So we are on this Web site right now.

And basically let us just search for some of the wearable devices.

So in the search bar I would just like your password and as you can see we got two million results right

here.

We got 70 IP addresses.

Let me just type here.

Default password.

So maybe it will show us the results of the IP addresses that have the rotors configured with the default

password as we can see this one right here.

Default.

Name admin password.

One two three four.

But it is unauthorized.

So that is this go down here.

This IP address right here.

An Internet search user name is admin and password is password.

So if you click on this IP address

and it will open some of its information let us just copy the IP address right here and paste it in

Google.

Now there is a good chance that we that this won't work.

Just before I type here the user name and password let me just check here.

What was it.

I believe admin and password as a user name.

Let's try which admin and password.

Let me just refresh this and type here.

Admin and as a password password

now it will let you type it once again.

As for yeah sometimes it's just fun perks inside.

These could be updated.

So they are not really vulnerable anymore.

So someone could have changed the username and password.

And right now we can't log in anymore to it.

So let me just find another one

as we can see this one username Cisco with the password Cisco.

The default user name.

Let's just click on this fund for now.

The default username and password have a privileged level of 15.

Please change the police in own initial credential using here the Cisco Isles.

I commend so basically if this one didn't changed we should be able to log in with the default username

and password.

So let me just paste it right here and we are unable to connect right here.

Well it doesn't really matter even if you could possibly connect to someone and he they didn't update

it and they still have the default username and password.

You shouldn't really do anything with it since it is illegal to change other people's settings on their

alter.

That's why people get notified here about their more abilities and they can just type.

Here let me just show you how you can check.

Check yourself out.

So just type here.

What is my IP address.

Basically just copy your public library address right here as it says your public IP address and paste

it in the search bar.

And if it finds something.

Basically it means that your device or your router is more about or something.

In my case I didn't find anything since it is not really vulnerable but in your case it might find something

before we finish this tutorial.

I just want to show you for example if you found out that your own IP address is stored and shut down

that means that it has some kind of vulnerability.

So in order for you to change that.

For example if it has a default password and user name portability you will need to update your username

and password in the water.

So in order to find out what your proper IP addresses you can just type here.

Let's say that minus an hour and the IP address that is a it PPA below the gateway is the routers IP

address so you can just copy it and go onto the Firefox let's open a new tab.

And right here you paste the IP address and it will ask you for your username and password.

So you just type here your username and password whatever it is.

If you do not know.

Basically just search the name of your router on the Internet and it will show you the default username

and password that you get in the configuration of the router so if you didn't change it the user name

and password will be the same.

So you can find the default username and password for any router on the Internet.

We do not want to say the name password.

So now we wait for it to log in.

Let me just show you for example you can just type here on Google.

Default router passwords and you can just go to any website basically and just search your model of

your outer and the find out what their default IP addresses and also what their default password is.

Now most likely it will be something like admin admin or admin password.

But it could also be something else.

Now this is the site I didn't use in before.

So let me just check out is there anything available here.

So here you can basically just type paste the name of your router and it will let just try this one.

So for example let's say this was a router and you find out what the name of your arteries.

You just pasted right here and it will find the router you're searching for.

It will also give you its IP address by default and the default username and password for the traveler.

So once you find that out you can just face the IP address right here and it will log in.

Now for me it is for some reason logging for too long.

Let me just type here once again and here we are.

We are logged in.

No I didn't ask me for a user name and password because it started two minutes ago.

So now we are in my router here you can have a bunch of the informations.

Now depending on your router different settings could be in different places.

It can be the same as mine router.

My my rather is an old one.

So it will probably not look even nearly the same as mine does.

So you just want to play with the settings a little bit and click on a bunch of things until you find

the username and password change section where basically you can change your default password into any

parts you want.

So once you do that nobody will be able to logging into your router anymore with the default username

and password it is really important for you to do that because if someone logs in it can change any

of the settings for the router it can change the way.

For example port forwarding it can change your wireless pass password.

Basically it can change anything so it is a pretty honorable device and you want to change that.

Now that would be about it for this shutdown website.

And with that we finished the most part default printing.

Yeah.

We just leave the two tools in for the next lecture which would be the Digg and the DNS and tools which

I will cover briefly.

And after that we can continue on to the scanning session.

So I hope I see you in the next lecture and take a.