During the section we're going to see how easy it is to get information about people and how some free
tools that has been created for a good reason can be manipulated to get the resource information.
Let me give you a small example.
What is the most important piece of information you need to get.
If you plan to compromise someone let's talk on personal business.
I'm not talking about now company basis.
If I need to compromise some one sitting on his computer remotely how can I do that.
What what is the most important piece of information is IP.
If I was able to get his public IP you know this is a very important information and then I can use
this IP to compromise his system.
Now is it easy to get someone IP remotely.
I mean he's sitting somewhere in some country and I need to get his IP.
Is it easy if he sent me an e-mail.
It's easy.
I can open the e-mail and then check the header authority.
He didn't send me an e-mail.
Okay some free tools can be used to gather such information.
I'm going to start with this specific tool for mail tracing you know now our the e-mail is our main
communication right.
No one is using facts like before or letters you need to send someone important information you send
by e-mail business are running through e-mail.
I mean mail is very important right now.
Now the private e-mail like your company e-mail has they have their own tracking system.
I mean in Microsoft Outlook there is an options that allow you to trace email if you send someone an
e-mail you can trace and you can know if the receiver receives e-mail and open it.
You get the notification.
But what about the free e-mail.
If you have an Hotmail or G.M. or real can you trace the e-mail.
If I'm sending you an e-mail on your G.M. account can I know.
Once you open this e-mail in G.M. itself and hold millennials you don't have this feature for tracing
e-mail but you can use some third party Web site like a site I open right now confirmed or two or there
is another Web site which is read notify dot com or did they read it yet.
I mean just search for e-mail tracing Web site.
Some of them are free some of them are paid.
But the point is you go and you create an account here.
And after that any e-mail you sent from your free mail like G.M. or Hotmail assume that you will send
me an e-mail and assume my e-mail is out.
For instance at
mean dot com and you want to send me an e-mail with the tracing.
So what are you going to do.
You open your Zemin you write my email address and then you.
But you have to to register on this Web site first.
You should have an account here and then for anyone that you are sending an e-mail you can add at the
end of his e-mail address dot confirm
not to.
Okay.
So any mail address that you are sending you have to add at the end of this part to confirm the two.
So what happened is once I received this e-mail I will not see this part.
I mean I will not be aware that this man is traced and whoever sent it are tracking Zaman but once he
opened the e-mail I will receive an e-mail saying that e-mail has been opened has been received and
open and to give you a confirmation.
He will also give you the IP
of my computer.
Public IP.
So if I'm telling you that I did not receive that e-mail you can tell me no you received this e-mail
you open this date and this time.
And from this IP and from this country.
So whoever did this Web site and similar Web site it was not for exposing people IP.
But what happened is people are using that to get the IP of their victims.
I'm sitting there I'm sending the e-mail just by opening the e-mail no attachments no link just by opening
the e-mail I will receive your IP and this is a public IP which is a router IP.
It's quite easy to compromise the router as you're going to see during this training.
So what I'm saying is it just a small example showing you it it's not actually so technical.
Together information about people and very very deep information as you're going to see later on and
I just need to use some Web site and some tools and they'll be able to get a huge amount of critical
information that I can use to compromise the system.
So this is just a small proof of concept by the way any tools or anything that I'm explaining related
to e-mail to not use it on your own personal e-mail for any testing.
Create an e-mail for this course and test whatever you are doing sending an e-mail cracking an e-mail
should do not use your personal e-mail for any of source tools or any
hacking technique.
Use a test mail once you are comfortable with whatever you practice then feel free to use whatever your.