Instructor: So, we can see here from the result, 2 2
it was able to find a number of files. 3 3
Some of them we already know of. 4 4
Now the favicon is just an icon. 5 5
Footer and header, these are probably only style files. 6 6
Index is the index that we see usually, 7 7
so it's all right. 8 8
Login, we can see that we discovered a page 9 9
that allows people to login. 10 10
Now, in many scenarios I was able to find username 11 11
and password of our target, 12 12
exploiting a really complex exploit. 13 13
And then ending up not being able to login 14 14
'cause I couldn't find where to login. 15 15
So tools like this could be very useful. 16 16
And here we can see that we have a login page 17 17
that we can use to login. 18 18
Page not found, not very useful. 19 19
You can see the PHP info file. 20 20
Now this file is usually very, very useful, 21 21
because it displays a lot of information about 22 22
the PHP interpreter running on the web server. 23 23
And as you can see, this file contains 24 24
a lot of information. 25 25
A lot of them are useful now. 26 26
You get to know some of the directories. 27 27
You know that it's running PHP 5. 28 28
The configuration is stored in this file. 29 29
INI files is usually the config files for PHPs. 30 30
So you can see all the places where they're stored. 31 31
And going down you'll see all 32 32
the permissions, the installed. 33 33
We can see here it has MySQL. 34 34
So it's using MySQL. 35 35
And you can see the directories where different types 36 36
of configurations are stored. 37 37
You can also see all the modules 38 38
and extensions that are being used with PHP. 39 39
So this file is usually very, very useful. 40 40
You can see we managed to find 41 41
where the phpMyAdmin login is, 42 42
and that's basically the login that's used 43 43
to login to the database. 44 44
Another very useful file is the robots.txt. 45 45
And that is the file that tells search engines, 46 46
such as Google, how to deal with the website. 47 47
So it usually contains files that 48 48
we don't want the website or Google 49 49
to see or to read. 50 50
So if we can read that file, 51 51
then we'll be able to see what 52 52
the web admin is trying to hide. 53 53
So go in in here, we can see that 54 54
the web admin doesn't want Google 55 55
to see a directory called passwords. 56 56
Okay, and it also doesn't want it to see 57 57
a file called config.inc. 58 58
And it also doesn't want it see these other files. 59 59
So let's have a look on the passwords 60 60
and the config.inc as examples. 61 61
So I'm just going to open a new tab, 62 62
and we're going to put our address like so. 63 63
So it's the current directory and 64 64
then we just put passwords after. 65 65
In that we can see that there's a file called accounts.txt. 66 66
And going here, we can see that 67 67
we got some usernames and passwords. 68 68
So we can see there is admin, adminPass. 69 69
We can see that we have a password 70 70
as Adrian and some password. 71 71
So we managed to find usernames and passwords. 72 72
Now we're still not sure what 73 73
these usernames and passwords for, 74 74
but we're sure that we were able 75 75
to find very useful stuff. 76 76
Another useful file is the config.inc. 77 77
So let's see what's in that. 78 78
And from here we can see that we have information 79 79
that allows to connect 80 80
to the database, because these are saying 81 81
dbhouse, dbuser, dbpass, and name. 82 82
So we can see that the username is root 83 83
and the password is blank. 84 84
So we can go ahead and try to connect 85 85
to the database, based on these commands, 86 86
and then we should be able to get access to that database. 87 87
Also, using these passwords, we're still 88 88
not sure what we can use them for, 89 89
but we can add them to a list, 90 90
try to login to the admin. 91 91
Or just store them in a list so 92 92
that we can use it if we're going 93 93
to do any brute force attack. 94 94
So then again, this is another video 95 95
that just shows how important 96 96
and powerful information gathering can be.