Ethical Hacking in 15 Hours - 2023 Edition - Learn to Hack! (Part 2)

TL;DR

This video discusses the importance of gathering information about subdomains and demonstrates how to use tools like Sublister and crt.sh to discover subdomains of a website.

Transcript

welcome back this is part two of the Practical ethical hacking 15 hours if you've made it through part one congratulations no introduction no nothing needed here we're going to just jump right in from where we left off in part one the next several videos are going to talk about web information gathering so this is going to be important because a lo... Read More

Key Insights

• 🥺 Identifying subdomains is important for web penetration testing as it expands the scope of the assessment and may lead to potential vulnerabilities.
• 💁 Tools like Sublister and crt.sh can be used to discover subdomains and gather information about them.
• 😚 nmap is a powerful scanning tool that provides features like stealth scanning, OS detection, version detection, and script scanning to identify open ports and services on a target machine.

Questions & Answers

Q: Why is it important to identify subdomains during web penetration testing?

Subdomains can lead to potential vulnerabilities and may contain valuable information for assessment. They can also expand the scope of the assessment beyond just the main website.

Q: What tools can be used to discover subdomains?

Sublister and crt.sh are two tools mentioned in the video. Sublister is a tool that searches different search engines for subdomains, while crt.sh uses certificate fingerprinting to find registered subdomains.

Q: What functionalities does nmap provide for scanning a target machine?

nmap provides features such as stealth scanning, OS detection, version detection, service scanning, script scanning, and trace route. These features help identify open ports, services, and the operating system of the target machine.

Q: What is the purpose of stealth scanning?

Stealth scanning, also known as SYN scanning, is a technique used by nmap to check if a port is open without establishing a full connection. It sends a SYN packet and analyzes the response to determine if the port is open.

Key Insights:

• Identifying subdomains is important for web penetration testing as it expands the scope of the assessment and may lead to potential vulnerabilities.
• Tools like Sublister and crt.sh can be used to discover subdomains and gather information about them.
• nmap is a powerful scanning tool that provides features like stealth scanning, OS detection, version detection, and script scanning to identify open ports and services on a target machine.
• Understanding the purpose and functionality of nmap's features can help in conducting effective scans and gathering valuable information during the assessment process.

Summary & Key Takeaways

• Part 2 of the Practical Ethical Hacking course focuses on web information gathering, which is crucial for web penetration testing and bug bounty hunting.

• Subdomains are important to identify as they can lead to potential vulnerabilities and missed opportunities for assessment.

• Tools like Sublister and crt.sh can be used to discover subdomains and gather information about them.