Shown we can extract from this application so let's take some technical example and some non non-technical
example.
Now whatever you are guessing and right now you will get to know how useful it is in upcoming lectures.
So let's go to infrastructure and let's get IP address first so I can click here for IP address and
I can put any IP could be an ip for the server for a client.
Assume that this is a server IP I can right click on it and I can search for all the domain name on
the same IP.
So assume that I have an IP for the server.
I just need to know.
Also website hosting on the server because maybe if one of those website is weak it will allow me to
compromise the server and accordingly I can compromise the remaining of the machine so we can go here
and we can go to uh let's see this one not fair.
You can check also the the the DNS as well and this will be a very very useful information as you're
going to need no later on.
Uh
the main Web site that see this is the right one.
Yeah.
Here we go.
No actually this is not the ones that I was looking for.
Email.
No no no.
Web site
yeah.
As you can see those are all the websites that may be related to this IP.
Okay.
This is one way for using it.
Let's try something else related to for instance social media.
So let's go to here.
I can choose for instant Twitter and if I'm looking for a specific account and all people related to
this account let me try.
Bill Gates
but for the social account search some of the inquiry will request you to log in.
So sometimes you run some inquiry and it will ask you to log in using your account.
So what I suggest that to create an account just for testing.
Do not use your personal account for such tools because you never know.
So you know you can choose anything here as you can see we would request you to enter your credentials
your Twitter included credential.
So it's better to have an account.
Same issue I believe Wolf would be for Facebook.
I can try for instance by the way.
It's quite easy to delete something just click on it and you click on delete.
So it's it's very easy to delete any entity from your screen.
So let's take another example assume that I'm looking for an email address I need I know a piece of
information about someone which is his email and I need to know where his email has been mentioned.
Maybe I get to know a piece of information like you know in what area he's interested what is his or
b on hobbies in which website he's uh registered forums or blogs or things like that.
So let me put my email who seek for
this will get you good actually uh results because sometimes you find his CV you may find you know some
of his activity so we can search for uh you know he's got a big library so I can search a phone number
for instance I can search you know you can run everything and see what results you are getting.
So let's see this one domain or if I can see you are elsewhere I my email has been mentioned.
Okay.
As you can see this is my own domain.
Definitely I have my email on my own domain and uh we can get a new are and what my email has been mentioned.
I believe you are getting the point.
So it's a very very powerful tool and it will save you a lot of effort while you are doing some uh reconnaissance
and gathering some passive information.
Uh nothing is considered illegal here because you are using public record.
You are just saving yourself time and so good point about multiples that it can relate things together.
So I can get a Twitter account and I can get to know all people friend and then their friend and I can
get to is working where and you know so you can enhance your search.
We just need to get familiar with the tool.
It's not a complicated tool.
It's a graphical tool.
Very very easy to use but I cannot tell you what exactly you should search for because it depends about
the target and it depends about your object.
So I hope those lecture will be useful for you.
I may add another lecture giving a real scenario and I ask you to do it and show you.
If I just get a piece of information what they can.
What can I do more so I may give a lecture explaining uh a really realistic scenario.
But anyway I would suggest strongly to download the tool and get used to it because it will really really
help you while doing the penetration testing.