OK so now let's see if we can gather even more information about our target.
So I've actually deleted all the useless files because they weren't in use and I kept the things that
I'd like to focus on.
So in a real life situation you want to go over each one of these entities and try and gather information
about as much information as you can about each of them.
For now I'm actually going to focus on the security not only and I'm going to try to find all the websites
that exist on the same server.
So like we said before if we couldn't hack into security itself then maybe we can exploit one of the
Web sites on the same server and then gain access to security.
So I'm just going to change this apology from here and use something like this one.
And then I'm just going to drag this one on the side to put it down here because I'm going to be using
that.
This one.
So I'm going to click it and I'm going to get its IP address I'm going to resolve it to IP address.
And right now as you can see we have the IP address of the server where I see here at the dot org is
stored on I'm going to click it and I'm going to try to get the DNS information from this IP address.
So this will give me all the Web sites that exist on the same server and as you can see now it automatically
changes the apology for me and we can see that this IP address to this.
Now we can see that this IP address contains all of the servers.
Now the server is actually owned by security.
And as you can see that it doesn't have too many web sites so if this was just a normal web site you'd
actually see a lot of Web sites with it on the same server.
Well because this is on a VPN is owned by security by security only.
So it's only we only have the Web sites that we want to have there so it's on our Web site.
But again we still managed to get one two three three more Web sites instead of our Web site.
So in case we can get access to this Web site then we can go and try to walk into any of these Web sites.
And they're on the same server so we'll manage to hack into our target from the Web site on the same
server.
All of that didn't work.
We can see that we have this arrow going into the IP.
So usually the IP the Web sites are hosted by this IP so you can see the areas going from the IP to
the Web site here to this website and this website.
But right here we can see that the hosted by often dot net is going to the IP.
So this is actually a hosting company and this is the company that we're renting the repeats from.
So if we go to this Web site
you can see that this is a hosting company.
And that is where security is renting their servers from.
So in worst case scenarios if you try to hack into security you can do it and then you try to hack into
all of these Web sites and you can do it.
And you looked for exploits in the server itself and you couldn't do it then you can try to hack into
the data center on the website or on the company that's hosting security.
And from there you can gain access to any web site hosted hosted by that company including your target
which is security dot org.
Now again you can go over any of these entities and try to gather information about it as well and maybe
get information that will help you to gain access to your target.
For example we can convert Bob Banty's to a domain like we did with security.
And then from this domain I'm going to look for e-mail addresses associated with that domain.
And as you can see now we have the abuse named Columb which is no use.
But we also managed to get an e-mail of a person working in security which is a security guard or that's
my actual my actual personal e-mail.
So again if everything failed and you couldn't gain access to it then maybe you can try to target that
person that works at security which is myself and maybe try to social engineer that person and hack
into their computer and from there again gain access to the Web site.
Now this is going to get into social engineering.
So I'm not going to get into too much detail of that because now we're talking about web penetration
testing so we're only concerned about the Web applications and the technologies used in that.