And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
this lab we cooperate in immigration and exploitation of the notable Durbin sustained operating system
retrying the machine.
OK so let's get him to it.
First of all you have to download it and install it to your reach Redbox machine.
So go to your files in resources and then you can.
So you're going to copy this thing like keep copy or controversy or come and see if I want a Mac and
then go down you bastard you in 80 percent or
all right.
And then now you have to click on Download since you've downloaded it would be oh no mashing.
So now the next step is to import into your feature box.
We are not going to download it because we have it already downloaded on a machine.
So let's a good deal.
Okay.
You use the file you gave him you have to double click.
So now you can change the name.
So let's say for example I call it John do your thing.
And then let's see if we can change it again.
Okay.
It's okay.
And then you just click on import of
it might take a few seconds just with a bit
a little bit it's more than helpful.
So we can wait in late
as we said earlier.
So we have to always try to get the IP of your victim.
It is the first target that we have because if we can get the IP address of evicting so we can have
a lot of information that only the IP address of we Kane the IP address we can use it in map z map.
Nick Taub derp you know a lot of stuff though there.
So so you can use it.
OK.
So now it's okay we can try to get there and then try to make future changes again go to your general
order and then nothing is the description nothing.
Okay sys.
Okay.
Now the new word.
Okay.
I didn't do it but storage.
Okay.
We'll do that good network.
No.
The first thing you have to do because you as an attacker you will going to use the attacker machine
kind of Linux.
So you're currently nukes must be set up exactly on the same thing as breaching adapter network.
Guys let us someone we probably will ask me So then how do we know that I'm on which network adapter.
No we said that because we are going to work as an attacker as well as as a victim because we use the
same machine so that's why we use Veatch box machine.
So it does it matter if your victim really does it use this same network.
Does it matter.
We use it because we use the same machine code both of them by the sound of it.
If we check something as as a widget adapter and then all kind of Unix vision machine must be under
simply didn't it.
But let's say that I have a computer Lenovo or asset.
So if my operating system is on another machine I don't mind.
But one thing is that be aware that you are on the same network when I mean by this network.
I mean if you are on line and look at all your network and then your victim machine make sure that they
have a keyboard as lan connected or if you are on Wi-Fi just make sure that probably your victim use
Wi-Fi.
And that's said that's enough.
They don't need to be on bridge on Internet network.
Also you have to know you don't need it just for the sake of this practical lab.
We use Reacher books machines or we use this sim network adapter for them.
OK.
So that's it.
So it's good.
OK.
Oh OK.
We can go here.
Nothing.
Oh good.
I don't get it.
You'll be OK.
It's on so never mind.
OK.
OK now make sure that you're clearly news is on Wi-Fi which yes it is.
So we see what each one to ensure.
So we are there.
All right.
So now what you have to do is to start your calendar and matching and then start your group matching.
So we've got to wait a moment.
That includes
OK we're going to need some
Oh right.
So now we are there and then we don't know issues and then we have to put because we don't have anything.
So this is exactly the task that we are going to undertake so that we can hack it and then so that we
can have the full access to get the username and password of course.
OK.
No one else will start or mushy
on this so we can minimize it.
Ben.
All right.
Now we can endure awkward insurance would look like a password and then grow it.
It shouldn't take so long.
All right.
We are though.
So now what we have to do we have to find a way to get the IP address.
It's our first task and we have to do it.
So we continue to grow.
OK.
So any debate that OK we have to deter my first or indeed Carly mentioned interferes so that we know
OK so that we start to really compete with her.
OK.
So we have it on E D is as you know we can try and discover it and score and then and then so it doesn't
in there so that we get the IP address.
OK.
And then goes into it.
Now
we are going to kind with a map and then minus a minus a placebo.
We're going to wait
okay.
So now we can try to see how many services that are open.
So FTB is open as h is open.
Okay good.
N A D is open it is a possible server.
CONAN Let's go and try to close up the IP address.
Oh okay.
This is how it looks.
I always remember guys as I said earlier in the previous videos.
So you have to check this source called always as an excuse sometimes fires or this can be hidden there.
Okay.
Let's try to open in another tab.
This is some information you see you'll get it.
So you can leave it here.
We'll save it to refine it.
Year we have a friendly game.
So let's copy and paste it somewhere just to remember it after you
so would minimize it.
And then we are going over to a terminal you can make a bigger
know site Dobie JPL Gibbons themed and then we put it in there do it head so as to find more there were
stories into web link so that we find it no.
OK.
So remember what we have found earlier in the text file.
And then
this is how we kid can compete at
100 terminal.
Now you can open it in particular or it or get it doesn't matter.
Okay.
And passed down as they did do don't stand look on.
Well you have to pay for it in your Firefox.
Now let's see if we can get access to it.
It's about getting the web browser and then we passed it.
OK great.
So.
OK.
So now we can again try to see the viewers who scored
it's called Square most known try to find what kind of information you get there.
Do we have would press for 6 9.
That's a nice again.
Seems we get this information.
That means so we already know what kind of tool we have to use to scan the Web site.
Okay.
So open it.
Neutrino.
So now it's time to use the word press to it.
It kind of makes to scan their website and weblog or call you have to enumerate users you and plug in
as b the presenter and then I'm going to wait just a few minutes.
Good.
So now we can just read the information and then we have our own test.
He's always trying to find the way for us share so that we get to the system till we know or see him.
Something like that yeah we have to try to force it.
Bruce was everything we have.
I mean as a user interestingly as I'm not a one year
we can try to create an identifier which has incited
or can and we put it in there and then we we will still use the W-2 piece Cain just took Skynet again.
Now would be you are going to take me you were interested if you could be the one that you have found
earlier locale and then weblog and then slash password you use to try to go through your list kind of
living smashing as common weeds with many dictionary files so you can choose whatever what you want
what is to tell you.
So we will use fast track and then minus username I mean so using our names I mean minus thing five
I'm going gonna quiz under
Kim.
Now we can just read what kind of information go there.
So we go
we're going to downloaded everything we'd be provided guys in the resource to save it.
Now we're gonna go to the download directory to extract
UK.
Okay now we can go there.
We're gonna be doing on
OK let's go to think that there territory so now we're going to use the PSP we've shell that BHP file
and you're going to spend it in Vidor No look can analyze it
then you have to change the IP address the clearly next machine
and then you can leave it as default or you can change it.
It depends on your save it and cause.
Now we want to try to go to Firefox again to try to duplicate GitHub spokeswoman.
So now we're going to try to log in and then put a password and me oh noes
now we have to modify something
we have to do using encryption OK open up a new terminal
and
try to find
e.g.
so we've got to send a communication keys.
So that's why we use net cut.
OK
it's beautiful isn't it
conversation.
All right good.
Good.
Now I've done it.
So this could we use a lot and tried to elicit.
OK.
So now we can type password and then try to find each email Sydney via email get now let's try to wear
a word.
This is it is installing
okay.
So it's there.
Got it.
Now we have a lot of PSP files trying to open it so I couldn't show.
All right.
Good.
So we you see we have many many many many information.
It is this is very quiet for us.
Again it's good on an update.
So let's go back to see what was an alternative Darby o kay so this page seems interesting to watch
because it's in the database files.
So it's the database path.
OK.
So now what we can do we can try to insert I mean into or could it shows that we have found earlier
and it turned out you see.
Boom we are there.
Okay.
Now let's let's let's let's make some checks.
You know just try to creek and creek try to go to use those two databases in any kind of information
that you might find useful for you guys.
Get we see some user pass they look like a hashed or encrypted.
OK but it's probably hashed like MDG 5 sha sha 1 SHA 256.
So what we gonna do is try to copy it and then try to see if it is an empty five.
We can just try it by by trying to in your
gain.
Now we can choose again
to just copy that
copied and they'll exist evilly very well known Web site.
This one clock station net and then copy and passing that and pass it there and make sure that you are
not what what.
And yeah.
So next
click hash is.
So you get it.
Okay.
And I did oh the surrogate and then copied.
So we had many services which were opening so in map.
Let's try to go to afford two or FTB because it was open and then this tried to go huh and then I'm
going to try a password try your password.
Okay.
Permission denied.
Well.
So now let's see if we can find some user name here.
Could it be password to national the content of it.
Okay.
So let's see.
We did the same thing as it did with this video guys.
So David the thing that you find before the dot to dot X is considered as being a user name and then
now we go there and then try it again it's thinking in the password that we had only boom.
Now we are.
That's great.
So let's try to analyze it.
We have so many footnotes meaning what if you need real anything.
Hey I get log into a place anymore do it.
So you can you can read the messages between extinct in Mr. Derek.
So we can try and load and now we go back and then try to do it now on as it is an issue.
This is the private key that we get here.
So you can have none of it so that you don't forget in the fridge.
So now we went out open up a terminal one open up.
It turned on and then to make a new five and a named us us.
What did the what you want.
So I said and then Savita make k now you can try it
as a statute.
And then I'd be key but the one that you get in the prison or
all right.
So we are there as steam.
That's really good.
Okay.
So let's go to get
tried to go to the store to see if there are some fighters.
Oh yeah.
Well we sort of tried to open it using cattle using gave or all.
It depends on you.
Okay now we see who.
Permission denied.
That means we are not there as would we not do as stinky.
And then we have to find a way to escalate the privileges now trying to locate the pickup.
All good vilest extension try to kill them at this point you have some options that you can have DCP
which is there or you can try to ship device to colonies and all you can use what a shock can use to
simply dump it.
It's up to you.
But we I lay quite a shock a lot but since it's a user interface so and then now we are in a desktop
terminal so we can use disappear.
So it doesn't matter.
And then we just copy the path computer path and then pass it there.
So this could mean the discipline not to translate the command and then so that we can manage it smoothly.
We can try to make it
disjointed okay.
Okay.
Well it's not too so much information there.
So what we could do we could have placed our will orb and then we we will type minus s out so we place
it in then minus is all in to see the result.
So what we get keep pressing in order to find to get it.
So B is by.
If you look at it guys one by one.
It's not gonna be efficient on all you're going to try to close it but it's in Google there.
Now we are going to specify on which it is and then good the password as well.
Ken
so we can try it let's put Tony and then the call so that we can criticize specify exactly so that we
don't get a lot of information that is that would be so so horrible for us.
Now it's buried so we can only persuade guys.
Whatever this I do is it would pass.
So we will get it in red.
So that's as great a good tactic to be able to weed content in a terminal.
OK.
So this disposal is a homework.
Doo doo doo doo doo.
OK so Kay you need to channel copied and induce her the log in Mr. Derp Lucy.
Okay so now we're going to try to do something with the password
now before we continue into autumn.
We can check it.
No.
Yeah we can check it if it would if it would work.
OK.
Because we have seen that the password is drip drip drip drip drip.
It was seven times and then we can tell you is a name we have seen it in the log in part they're still
in the to me not.
At the tape.
Mr. Derp and then we present her and Derek.
1 2 2 4 5 6 7 and the epicenter.
Here we go guys.
You see.
So we find a way to enter the 1 2 14.
That's volume value.
Very very funny.
Okay.
So we don't need to know.
It was just for the sake of this video.
All right.
So now we're going to log the road and then we will continue to ask oh God okay.
So yeah physical book.
Now we tape.
So Mr. Rope as a user and then copy your password area and then pass it to you oh authentication you.
So this is a program.
Okay.
Oh.
I tried to find it.
Okay.
So now it's good
we don't have wood privileges.
So we have to escalate this privileging these materials you know.
So.
Okay.
So let's try to type sudo and I can enter and then the password.
So now we are there as Mr. Derp.
OK.
We are not there as stinky anymore.
OK.
So we can read it what it says museums that if only following comments on interpreting the harm you
said that I know Miss dopey all defies you to do the dirty Durbin name.
So no less necessary to go to the bar and
so can try to create
the
now we're going to try to create a shameless group and then put it in that followed it and the name
it something like Darryl B so that therapy so that it is exactly contending toward a dirty
look.
Now we can go to home to buy any reason that tree and then do with this and say a didn't use it correctly.
Okay.
Now we have between security Securitate different I mean we will make it executive you know so no time
pseudo don't European at this stage.
Okay.
All right.
Not now we are there as would.
So that's a good idea.
And then I'll go to whatever tool we need to find if you find some some information some files there
and then try to open it as usual using cut you'll see oh guys.
So this is it.
It's up to you guys.
You can try to find it.
You can try to find on the files which are then bye bye by moving a directory up or something like that
because now we are on the desktop folders.
And then there there is a file which name flagged in the text.
And then if you want to go to document or to download folders probably there are some files in there
so you can trade by yourselves so that you can perform this task.
So that said Guys I really hope that you enjoyed a video with us.
Thank you.
And see you in the next video by.