Use Photon Scanner to Scrape Web OSINT Data [Tutorial]
ฝัง
- เผยแพร่เมื่อ 6 ก.ย. 2024
- How to Run an OSINT Investigation with Photon Scanner
Full Tutorial: bit.ly/photonOSINT
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Planning is an essential phase to any hack. If you have a target website and you wanted to mine it for information, having the right tool capable of scraping for OSINT data is priceless. On this episode of Cyber Weapons Lab, we'll introduce you to such a tool called Photon Scanner.
Follow Null Byte on:
Twitter: / nullbytewht
Flipboard: flip.it/3.Gf_0
Weekly newsletter: eepurl.com/dE3Ovb
Please cover GoPhish
Great one! Please make a video about vulnerability scanners
Such a great channel, really helped me with my assignments. One of the few I'd genuinely recommend.
Please let’s see GoPhish
Iv learned so much watching my boy teaching us these skills and would like to thank you Null Byte and everyone that gets to learn these Ninja skills well bunas noches to everyone
Great video! If PhotonScanner were able to find API keys, what would they look like in the list to differentiate them from everything else?
Also, how exactly would one make use of such keys? What is the next step after finding them?
that would depend on the API they are for.
take your mouth, open it as wide as possible.. and take jakes sausage (from ltt)
This channel is a treasure trove of information. I cannot thank you enough for the help you have provided through detailed tutorials put out for free. AMAZING.
It is also amazing how you manage to make it look like you do the videos in just one take!
Check for occupy the web tutorials on null byte forum... He is the predecessor for awesome tuts
Are the libraries we need to install enumerated in requirements.txt? Thanks.
I'll help you with docker , you always windup behind nat and with networking and web it becomes a pain in the ass. So all you have to do is...
Here is the command they give you in the repo , 'docker run -ti --name photon -v "$PWD:/Photon/google.com" photon:latest -u google.com'
add '--net=host' here ↑ before the ' -v ' , and this will allow the container to share your hosts network adapters.
So if you did ' docker run -ti --net=host ubuntu /bin/bash ' , you would get an Ubuntu container with your hosts IP address and be able to access it remotely. Just have to change the SSH port. Or its pretty simple to migrate containers or duplicate them onto other servers. When you start getting into volumes and bind mounts it gets a little more difficult as far as syntax as you can see after the ' -v' which mounts that local directory as a volume inside of the Docker Container.
Adding this to my vulnerability assessment checklist. Good vid, keep them coming!
Was up my boy all good 👌 nice vids great day to everyone
thanks man have a great day too!
I know it's not related to the subject of the video, but, do you ever blink?
A bit off topic but what about openvas, can we use proxies? Any site could detect scans and block them
Great< Which command we have to use if we only want all emails from website???
Thanks in advance.
why do you have to use sudo with a 3d party python script from github?
What is the Code book on the shelf behind you? I dont have that one, I might add it to my collection.
yay 2 vids in 2 days. plz do burp suite and hydra
:) much love.
hi there , what is list of ports that we must to close them on our windows? for more security
can u make a video where u explain Moriarty-Project on Git
The guy never blinks.
Is this similar to httrack (basically a crawler)?
Any video about progrem userland "Kali "
Thank you for taking time to make this video. Question. Is this legal to do? I ask because I want to try this on a real estate site to scrape for specific properties in a market.
@cheap cigs thanks
What Laptop Are U Using?
Your videos are coming in handy during this invasion. Thank you
Love it
Can you please recommend any good book on cyber security
Dude pls recommend a laptop which you find good for running linux distros.Need to buy one
System76
What for laptop do you have???
Guyzz, Kody doesn't show any ads, isn't he awesome?
one question how much do you know of python like can you code a payload or just the basics ?
I know enough python to work on something someone else started that is complex or make something of medium complexity myself.
Can you do the snoopy drone
i get that trace back error everytime i try to load it again any ideas
Bro pls make a video about android payload injection. .....
And u r videos are great .......
Closed captions at 16:50 say "boner ability" in place of vulnerability. Have a good day all
greetings from Mexico, recently I see your videos and they are very good. new sub and I wanted to ask you if you could make the subtitles available in Spanish please.
Buscador OS?
MORE OSINT!
nice one cody 😍
Running this in 2021 will give you an error that Photon runs only on python 3.2 and above despite having the latest version of python.
Exelente aporte bro
What OS are you using
It looks like Ubuntu Linux. Any debian or Ubuntu based linux will work. It should also work in Windows or Mac OS as well...
Well done!
I get an error when trying to run it on windows:
Traceback (most recent call last):
File "photon.py", line 39, in
from core.utils import (luhn,
File "F:\GITHUB\Photon\core\utils.py", line 7, in
import tld
ModuleNotFoundError: No module named 'tld'
I have the same error. did u find a fix?
pip install tld requests
you need both those modules. That command will only work if you have pip installed. Google for how do that. FWIW, that command comes from the article posted with the video.
@@jacksonhenry7576 pip install tld requests
you need both those modules. That command will only work if you have pip installed. Google for how do that. FWIW, that command comes from the article posted with the video.
I found that using "pip3 install tld requests" got rid of that error
nice
I need to scrape a website. For example in scrapy framework if you want to scrape names of movies you were writing the tags inside, i don't know how to do the same in Photon. Let's say to scrape quotes.toscrape.com/ . Any example guys how to get texts out of links please? I want to figure out How it works.
Bro your video have more information but I am stuck in WPS 2.0 I can't hack the password
please give the command for the installation after download as well not just to show it work...thank u
Check the article we always cove every step there.
Love You Bro
Hello! I recently watched an older vid of yours on cyber attack’s and I just got attacked by someone using a program pronounced (Mur-i) and it apparently just took a crap on my router. If you can make a video or already have on defending against an attack such as that program I’d very much appreciate no longer getting kicked off Xbox
Hey just real quick does any one out there know how to bypass I-phone 7 password thing I got one I would like to use it please let me know if you can Kool
😯🙋♂️ my friend
nice.
do we need mobile rooted to use this i am u r subsriber ,even dherlock when itry intall reuests python is struck at set up py lxm This ,but says u r requirements are already satisfied ,but when i use command python3 sherlock.py, it says error or no command can u help me if u can i will send screen sht of it
Thanks
We did this on a Linux laptop so that may be part of the problem. You shouldn't need root.
Shall i put that error message !
Somdev's tool..
Urs video's r rock
please how can i get 20BTC Script for cryptotab browser free
Traceback (most recent call last):
File "photon.py", line 9, in
import requests
ImportError: No module named requests
help!
pip install requests
ECR lol, it’s in the error. Just install requests. Learn to do basic functions on your computer, before even attempting to install something.
Lmao Kody, this photon tool reminded me the russian text editor aka russian alternative version for Vim, named Photon as well, for MS-DOS , ru.wikipedia.org/wiki/%D0%A4%D0%BE%D1%82%D0%BE%D0%BD_(%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0) , it was so funny to learn this back in 1995 when I was 12-13 y.o. xD and nowadays all good stuff is being killed/stealed by instagram, let me know what you think about instagram and stopping it stealing traffic from website
🤔
Please make a video of how to hack a Android Device and take a photos and videos! From a mobile phone
Feeling sad for those illiterate dislikers :)
Yeah 6 min
:-)
i do not like how this guy praises tools like this, and metaspolit,,
first of all, it preaches that it is ok to trust any software like these tools.
second, it moves people away from the open source filosofy, i think.
at the very least, these tools takes away tons of usefull and fun information.
These tools are supposed to help ease in people into network security. If/when they feel the need for more advanced tools they are better suited/not as intimidated to make them themselves. And the whole trust thing.. it's an open source project, open for anyone to see what it does
this is i believe is open source on github
@@sebasfavaron, 2 years later ,, i think i was not paying too much attention in the video.i see there is a github repo here =) in my very weak defence, i saw this guy praise metasploit in ,, eh,, another, video. And yes metaspolit may be open source tool too, but, i guess my point be something like, using suits of tools like this takes away some of the learning of intricate workings of software.
More so metaspolit than this Photon scanner, Photon scanner gathers useful information and you need to know something about the software your gathering information from. Metaspolit you just enter ip , port, name of service and forget about the code, the workings of the program,, you may read about it in description of exploit in metaspolit but never see what the code is.
and yes, i understand that is a , kinda, different statement but,, that is what i gonna go with =)
its still is open source filosofy. =)
@@Gamer-nc8qp i think i was not paying too much attention in the video.i see there is a github repo here =) in my very weak defence, i saw this guy praise metasploit in ,, eh,, another, video. And yes metaspolit may be open source tool too, but, i guess my point be something like, using suits of tools like this takes away some of the learning of intricate workings of software.
More so metaspolit than this Photon scanner, Photon scanner gathers useful information and you need to know something about the software your gathering information from. Metaspolit you just enter ip , port, name of service and forget about the code, the workings of the program,, you may read about it in description of exploit in metaspolit but never see what the code is.
and yes, i understand that is a , kinda, different statement but,, that is what i gonna go with =)
its still is open source filosofy. =)
@@QuadDerrick thank you for the reply and kudos on the advice for the newbie's like me. :) Have an good day
Can you do the snoopy drone
What laptop do you have?
nice