Enumerating Target

The things I took note:

– mailbox is based on pop protocol
– open ports means an open way to the system
– Linux Torvalds: creator of linux kernel(source)
– people are trying to migrate to v6, because v4 is running out
– every time packet is sent, it goes through the gateway(virtual machine) which is translated to public address
– every system have vulnerability
– DNS provides a local map, shows the record of server IP address and name
– SOA is DNS authority record
– google scholar to find articles(only the latest document), use sci-hub to open the pdf in google scholar
– google dorks find out some leaked information such as sensitive documents, sensitive information, web configuration, and backup files from domain
– backup files that forgot to be saved can be downloaded to find out all the information of the websites
– get hash value, open md5 cracker to get password
– do not store your password in clear text
– salt is used to randomize code even if they have the same password
– how linux stole password: create salt in value of 16bit(created from random number based on things such as date logged in), hash+salt value
– create longer password is harder to crack
– maltego tool is used to find relationships or connection

linux command:
– ifconfig (own information)
– host targetdomain(website information)

Theharvester -d targetdomain -l 100 -b google (backtrack: collect information from Google, Bing, PGP, Linkedin)

harvester is one of the tools used to collect information, it shows the emails and host of the target domain

Comments are closed.