Shodan || Ethical Hacking Course
Hello everybody.
Welcome back.
And in this editorial as I said we will cover the shutdown but before we go on to the shutdown I just
want to show you the harvester from the previous lecture which we couldn't get to work.
Maybe if we tried.
Right now we just located once again.
So all local users share goes Merrow tools and then the harvester.
Now one cover right now how to use harvesters since we did that in the previous story.
But I will just try to run it once again so we can see if it will work.
Now now let me just type here.
The harvester and as the domain with the leaves the same website would trade on in the previous video
which is which is this one
for the mines El command level with 500 results obs and the minus B command.
We want to search over the Google engine.
So if we just enter right here we will just wait a few seconds until it searches Google and we'll see
if right now we get some of the results that we couldn't get in the previous video.
And as we can see it will finish soon.
It processed 400 results.
And here we go.
As you can see the same website that in the previous lecture didn't work right now gave us some of the
information.
For example we found a bunch of e-mail addresses that belong to that domain.
As you can see right here we also found some of the hosts with their IP addresses that also belong to
that domain.
You can see auto all inclusive.
And we found some of the e-mail addresses that if this was a company that we were testing we could use
in order to process with our attacks for example with some malware to all of these email addresses and
hope that some of them will open it.
I just want to show you that it works sometimes.
So let's just proceed on to the shutdown which is a Web site.
So just open up your Firefox
to just open up a new tab and type here and show the will will click on the first link and it will lead
us to the Web site where we can discover some of the Moorabool devices on the Internet as we can see
this Web site right here explore the Internet of Things.
My Internet security and bunch of other things.
So we are on this Web site right now.
And basically let us just search for some of the wearable devices.
So in the search bar I would just like your password and as you can see we got two million results right
here.
We got 70 IP addresses.
Let me just type here.
Default password.
So maybe it will show us the results of the IP addresses that have the rotors configured with the default
password as we can see this one right here.
Default.
Name admin password.
One two three four.
But it is unauthorized.
So that is this go down here.
This IP address right here.
An Internet search user name is admin and password is password.
So if you click on this IP address
and it will open some of its information let us just copy the IP address right here and paste it in
Google.
Now there is a good chance that we that this won't work.
Just before I type here the user name and password let me just check here.
What was it.
I believe admin and password as a user name.
Let's try which admin and password.
Let me just refresh this and type here.
Admin and as a password password
now it will let you type it once again.
As for yeah sometimes it's just fun perks inside.
These could be updated.
So they are not really vulnerable anymore.
So someone could have changed the username and password.
And right now we can't log in anymore to it.
So let me just find another one
as we can see this one username Cisco with the password Cisco.
The default user name.
Let's just click on this fund for now.
The default username and password have a privileged level of 15.
Please change the police in own initial credential using here the Cisco Isles.
I commend so basically if this one didn't changed we should be able to log in with the default username
and password.
So let me just paste it right here and we are unable to connect right here.
Well it doesn't really matter even if you could possibly connect to someone and he they didn't update
it and they still have the default username and password.
You shouldn't really do anything with it since it is illegal to change other people's settings on their
alter.
That's why people get notified here about their more abilities and they can just type.
Here let me just show you how you can check.
Check yourself out.
So just type here.
What is my IP address.
Basically just copy your public library address right here as it says your public IP address and paste
it in the search bar.
And if it finds something.
Basically it means that your device or your router is more about or something.
#ethicalhackingcourse #ethicalHacking