Gathering some domains is a great way to find new targets, and we can use the search engine subdomains
collected, actually.
So in order to do that, we have to use, we have to get started with it, starting with Metasploit
Framework console and.
We will use the actually model together subdomains about the domain from Yahoo and being so together
subdomains for a MORTALIDAD domain.
We just need to set the target domain.
So let's quickly perform on a test, which means that I'm so versatile we will use we have to use oxygen
models or use of ciliary gather a search engine, search engine, subdomains collector.
And here let's see what options we have we have in Bing, Yahoo and IP search we have.
Uh, as you can see, the required no targets, so we have to give the targets.
So, uh, set targets, take bins that contact bins, dot com and uh, let's run axillary exploit here.
A year searching being for subdomains from técnicas domain that.
And now searching a Yahoo for subdomains from tech means that this is our web site.
Unless you can see here, actually the London execution completed.
So.
And, you know, it's got to be this.
You're one my exclusion completed.
And what we have here.
For example, so are these tech.
Website is our most popular in Bing or Yahoo, and as you can see, we have not any output here, so
we will use, for example, Microsoft, Microsoft, that Chrome here, for example.
And let's run.
Actually, indistinct pins that come to me, we have looked domains, actual subdomains as well.
We have just an email subdomain indicating that.
And it is not popular is being or Yahoo.
And because of that, we can not couldn't seen any outputs here.
So as you can see here we can we can see Microsoft's sub domain search, searching for being subdomains
for this IP.
This is, I think he found a Metasploit plant, this IP address from these match of the com.
And here we can see.
Um.
The results here.
And as you can see in my soul and like that, so.
OK.
So, uh, we interrupted because of that, we don't fund, as you can see, by using this, uh, actually
model, you can, uh, fund.
You can find the supplements of your Typekit domain.
So the minimum, actually, it's not a target, of course.
Uh, this is just impressive of, uh, technically and it's not illegal, as you know.
So the search engine sub domains collector actually model helped us, uh, to find the new subdomains.
And uh, so now that we have a good idea about the capabilities of some of the basic models, so let's
try the big guns here in the next next year.