This lecture we're going to have a look on a tool called multi-gigabyte multimode is a program that
allows us to gather information about pretty much everything you can gather information about people
using their names their phone their email you can gather information about Web sites servers anything
really we're going to focus on gathering information about Web sites.
But as I said you can use it to gather information about anything.
So we're going to go to Candy and we're going to go to all programs here and I'm going to type in multi
you go
and that's right here.
Now the first time you're on the program it's actually going to ask you to create a new username and
password for the program.
I've already done that so you can just do it click NEXT NEXT NEXT create a new username and password
and then just log in.
So once you do that you'll see this and this is the main screen of the program.
Now right here on the right you'll see some plug ins or additions that you can add to the these additions
allow you to gather different types of information.
So if you want to install any of these additions for example let's say you wanted to install the passive
total to then all you have to do is just click on the install click yes and that'll install it for you.
Now I'm just doing this just to show you.
But let's go ahead and create a new blank page and we'll see how we can use it.
Use this to gather information.
So this is the main view of Malte you go in here in the middle you have your graph where you can put
your entities and track how you gather the information on the left.
We have the pilot where you can add entities and gather information about them and you can see that
we can add any type of entity for example we can other person using their name their email address or
their phone number.
You can also add people based on social networks for example you can either Facebook account or Twitter
account and start gathering information from there.
But what we are interested into is our Web site.
So we're going to start by adding a domain name from here.
So I'm going to click and drag that to my main view right here.
And when you have that in here you can see that on the rise right here you can modify the attributes
of this entity.
And on the left you can run transformer's.
So I'll get back to transfer transformers in a second.
For now let's first modify the domain name and I'm going to use a domain that I actually have permission
to test it's security and it's security dot org.
So now I can run transformers that allow me to gather information about this domain from the left from
here by clicking on the play button or I can right click it and run a transformer.
So I'm just going to go to the home screen right here.
And what I'm going to do is right here you can see that we have the Transformers categorized into different
categories and you can click the play button right here.
You can see that there is actually a double play button here and that will run all the transformers
inside this specific category.
If you click on the category itself you'll see the specific transformers that you can run.
So for example I have a DNS or a domain right here and I want to see the websites associated with that
domain.
So I'm going to run the transformer to a website based on search engine and that'll show me the website
associated with this domain name and rice you can see that we have three websites we have the WW dot
wife either Security dot org.
And we have high security dot org.
Now these two websites are the same.
So I'm going to delete one of them.
I'm just going to click it and delete it so that our graph looks better.
Now let's see what other information we can get from this song and right Right-Click it again.
And let's see and try to get all the subdomains that exist within this domain.
So we're going to try to get to name schema.
And again I'm going to click on the play button right here and now we have more Web sites we have news
that security dot org.
We have security alerts which is essentially the same as this.
So I'm going to delete this one and we have the FGP that security dot org and mail that security dot
org.
So now if we have FTB information we know we can connect with based or through this web subdomain.
Now again all of these Web sites are associated or stored on the same server.
So you can go ahead and try to hack into one of these and get access to our main web site or you can
use them to gain access to your main server.
Basically all of these transformers you can run them the same way so I'm not going to go over all of
them.
Let's just have a look on one more which is the MX record and what this will do it will see the mail
servers that the target website uses.
And we can see that they're using Google to handle their mail.
So again this is very important because for example if there was a certain vulnerability in Google or
the mail server that they're using then we can exploit that to gain access to their e-mails and maybe
use that to gain access to the website.
So I'm going to delete the Google servers that we got because they're no use because I just want to
keep the useful stuff in here.
We can use each of these entities now together even more information about it.
Again you have to do is click it right click and then run transformer's what.
We're still not finished with the domain so I'm going to go back to the domain and I'm going to go back
to the main menu and right here we can see that we can get the domain all in our details so we can get
stuff like the e-mail addresses.
We can check for anti-theists from the WHO is information and we can also check for phone numbers.
So I'm going to go back and run on the double play.
Right.
And click on the double play to run all the transformations within this category.
Now security is using privacy so we won't really get much but if the target website wasn't using privacy
then you'll be able to get their phone numbers their address and very important information.
So again I'm going to need to use the stuff right here.
And we're going to have a look on one more transformation.
So again we're going to go back to the main menu and we're going to look for files and documents from
this domain.
And again I'm going to run all transformations within that category.
And this will show me any files or maybe any interesting files stored on that domain.
OK.
So this finished running.
And as you can see we got a lot of files.
Now a lot of these are just PTF speedier books.
But again and in a lot of upside sometimes you get files like the password file or files with sensitive
information.
So again this could be really really useful and your information gathering that.