And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
in this video we are going to talk about a D A B enumeration before saying what it is we are going to
give the attacker or the hacker is some some kind of light so that we see what he can do whether he
gets only he could have information.
Okay.
So let's go to
people who normally use it for an app so it's for encrypted I mean for plaintext it is tweet eight nine
as a port number and then four encrypted.
I mean it could text or say couriered it is six to eight six.
So let's let's have a look.
Let's go or we can type stoppage and died down and it was in so we can get a lot of information about
it.
So.
OK.
And happy news we can just read a Lightweight Directory Access Protocol.
It's a software protocol for enabling anyone to locate data about organizations individuals and other
resources such as fire in these files and devices in a network where on the public Internet or break
a portion of the Internet.
So what.
OK.
What an attacker can do.
So this is a question.
So this is what task guys don't.
In this video.
Be good at showing you how how the attacker can proceed even if we give to him.
Even so we would give to him some white in some some some access so that he can perform his task.
So uses of does the common use of an attempt is to provide a central place for authentication meaning
it's tor usernames and passwords.
And it can then be used in a different application or service to validate users with a proxy.
Okay.
So let's go through.
So here guys you can read about what is or what is what is it.
Some examples of it.
Yeah some stuff like that.
OK.
So we can move it into a little bit
here for funny scenario.
We are going to use to your grading system.
Kennedy Alex machine all windows tens and then Windows server trainee thousand twelve
so indecisive between twenty thousand twelve.
We hope we are going to make sure that there is warning there.
And then we will after then use Windows 10 just to make a communication between it so that we can see
how an attacker can grab the information that it gets and we will see how add it up can be used to find
attackers so that he got the information that he needs
sort of first thing David the first thing we are going to do here guys is by checking the I.P. address.
So OK
OK now we are trying to fine tune
can we we set it again try trying to this enemy and then after.
So we are going to my energy and my it from let's make this machine as it domain services have to as
this feature of course and then lightweight told Tony in DNS server
we we we are adding some simple protest days and the next next that is now we can install it now.
So now we are installing them on the windows server machine
so we start in India next.
So this machine of course we will wait.
So let's let's let's let's wait for it a little bit.
Okay.
Meanwhile we can move to Windows 10 machine because way why we installed the software on the windows
server machine.
Now we are going to this machine just to see to some cocktails think OK
here we will use two software.
So the first one is where shock.
It is scanning.
And then when we use Git exploit you can go on keyboard if you want to google it or on that page if
you correct me.
So just go and start page and type while shot to download it and type genomics Explorer was all week
here.
We heard him here.
So he just went and passed it.
OK.
So let's go.
OK.
And then we heard is from
so we copied and pasted here posted here
Why.
Really cool.
Very good.
Oh kids too working these unions turning software.
It might take a little bit long guys but we were just gonna wait.
So we would take my name Okay so we add in New Forest game.
So if this is the domain name I mean.
So you're gonna take some time to finish.
Yeah.
Well I mean.
We'll have to wait till we start but okay let's see.
So
now let's switch to going to a separate machine.
Okay.
I mean let's make a lady let's make some configurations in Windows server machine.
So yeah
so okay.
So you do know the password.
Like someone we have to attempt to confirm the password and so on.
So we go into just we can innovate.
K
so child my soul.
Okay.
Kids use the word.
Okay.
I'm gonna meet snags next.
Checking Newport gives its
economic data weekdays for verifying it gives it forty two main control population
let's install
we didn't do an abortion OK.
So do it
meanwhile we can go to to understand Mushin and then try one of shock.
Skip next.
That's the way to shock.
If you had it already in your system so you just have to go into your search and away with in windows
and then type wider shot so that you get it from your system.
If you did inherited started on your system you'd.
The general vision might have been its one does
came after being installed.
Let's switch off to kind of Linux machine.
What it does is make sure that they have Java installed on your system.
If you're placed on programming so you have to install Java first or your system does it contain Java
and that's why probably you could find some or some mistakes in you know installation process including.
Now we can type into terminal and Bob.
So a mark is thing.
And of course my nose all for the operating system and your target IP address.
I mean your victim IP address.
And then search for it.
Yeah.
So it's past.
Let's begin with Inter
yes make it first amendment.
Okay now if we was please or we will see the penalty AP is now on board tween 8 9 DCP.
So that was the task.
So we have done here on Kelly Linux
OK now let's go back to Windows 7.
So here we can go to Windows server manager.
And then we go to Tools and then we find so use and computer.
I
here as we have attempted so before.
So we will create some user account from the domain that we have created three minutes ago.
So we will make it simple SDK and to set up a password for it.
And then we can check.
This is got to think user so that user will not be able to change the password.
So yeah so we can try to create an one.
Just make it simple guns OK it can password.
We are being
too if we want we can do and use it some more some white access.
I mean some privileges like being and have it be stored or something like
can now.
It is like an administrator now.
OK so now let's close it please notice that when a computer is warning if you have a windows server
computer or any swinging D A B ended up.
So guys it's not so secure.
It's not so secure because anyway a shock user can explode or can trace all the information or the communication
on your network it can traced all the time freak all the communication which is going on your network
so as an attacker by using wires sharp we can cross someone's computer when when that computer is used
up on it.
So we can easily read all the information traffic messages.
It's unbelievable.
So we would check it
ugly.
So now let's open workshop.
So by opening where shall we go to interface these we can really go to interface studies and then so
that we can capture some interfaces.
So I mean if you want to capture some interfaces guys it's it's really it's really possible.
Here you can just click here and then find some cocktail stick which one do you want.
So and then started
home your shot is money.
I mean background in
all I know I'm going gonna start in genomics explore on the windows server matching.
So now what we have to follow so we'll keep on this more icon so we clique so and then a window in bubble.
So as we see the Pentagon is editing AP In version tweet and then deport as we said earlier it is 3
8 9.
So in the last case you're going to put the server ip address of course this this machine.
And then so you're going to feel it according to your needs.
So OK let's call so put it beside not related.
OK.
And here we put it has the IP address of this machine on which we are warning.
And she expert.
So we leave default as a default and then put it as default.
So no problem.
And so as we would to automate away configuring this so we it's ABC dot com.
And then here we were.
Here we type a DP equal ABC comma D.C. equal com so we can we think that OK
and
you know we want to put in a password.
So and then the user I.D..
So we put it exactly the same so so that we put it in a bit much more security and then the security
system lever is user release password.
So and.
Yeah.
So that's why we put K and then the password we can type let's say anything.
Anything
and then you could.
Okay.
It is a lonely clinic now.
Now you will see so again now a lot of information on that computer.
See they use it to record everything everything I'm telling you that if anything but a lot of what I
wrote a lot.
A lot of thing.
So yeah
okay now let's switch off let's switch to all to all wire shock okay here in D.C. now know what a shock
was to working and then we can try to see we can try to see a lot of information what it grabs it so
we can stop it
to a load of buckets really to TCB to end up so let's this trade let's go let's so we can try to do
it a little bit tween age nine is the number four so we will see and the new there yeah we see now so
we can do something more and then go on if you in package right it would show you all the buckets which
has meant chance for
which has used in him like you see simple
now let's go right click on it go to week and then go to photo decent music ok here click on it and
then now it has a lot of grabbing these information that's a lot to check the person it was a beast.
Why don't tweet.
That's crazy.
Very easy.
You know what.
As I said before it was it is on the same windows server mashing guides.
Yeah.
OK.
So we can just people's information and so that we get what we want.
And we quickly which was what happened between the server and client.
So they grab it here you know.
Have we ever ever.
We think so it is the way of the cup to me.
So you know this is how what a shock can choose the communication between a server and declined.
So you know if you if a computer or several not secure enough hackers can use it and exploded and try
to get the communication between your client machine and then the server as well.
And then attacker will know your domain name your possibly quit insurers all these sensible information.
So yeah
ok in this video we try to show you how ADAP is working and how easily hackers can use that vulnerability
just to exploit you.
Okay guys.
So that said for this video we hope we showed you how exactly and that is working and then how reconfiguration
process was set up how hackers can use it can explode is full no in such a way that they get to call
location between the client and the server.
So we we we so happy to have you in deselect you.
And then we hope that this video was so informative for you.
Thank you so much.
And me best thank you.