And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
in this lab this is going to be focused on the Sky Tower information and expectation Sky Tower is a
venue new will reach our machine so that we can try to extract explode and then to enumerate some vulnerabilities
inside so that we can get access into the system.
So what you gonna do.
You're going to first go to the link provided in the resource and then you click on the usage folks.
Okay.
What is it.
Sky Tower here.
And then you copy this thing and it was controlled see all you guys come in.
See if you own my book and then you go here it was given me courtesy.
It was in there so that you can download it actually being downloaded so you will have to double click
on the V box file so that you imported into your virtual box.
So after that you will make some few configurations and then yeah.
So you have to double click it and studied okay.
It's with a little bit
OK.
So now you have to click on Download me I would not click because I have already downloaded on my folder.
I can call it where it is.
OK.
So now you have to double click it.
So let's double click it
OK.
It's there.
So now we're going to make some new configurations we'll go to jail.
Good heavens.
If you want you can try to modify these things and depended on us to get those guest photos.
Oh.
So it's not important plenty slow nothing exciting.
OK.
Display nine empty.
So it doesn't matter to us no to input anything because it's a v box right.
My well now we could have said the net up there.
Exactly the same way as all kind of UNIX machine is sitting on.
So before clicking on any thing let's whisk console and then go back to a cutting machine so that we
can see configuration.
I would instead still go to a network okay.
It is a network adapter on which it adapter on Wi-Fi.
Ok now go back to all our and then we can do for you modified which adapter I bought.
OK.
Now you can started my study.
You restored it and then we can start at the same time kind of machine.
Machine as you can see this kind of work is a Linux based machine.
I'm going to read
it.
I think the guy's got a door.
He's already.
OK.
So again can put it in beside it here.
Now we can enter credentials but I can't minimize these okay.
So it's good.
So it is my password of course.
So now it includes
so he would go able with what we have two guys is now we have to go to terminal and then try to find
a way to get the IP address of this gateway machine.
So what are we going to do.
We have to type net discover e d h zero.
It's mine.
So it is zero.
It's mine.
Oh OK.
Here you have a really config so that you can notice that the orange wireless extension you will meet
I'm on it is yours so I can change the color.
Indeed.
Luck with light on light yellow light.
Okay.
Cause I know we can type over and in my nose I of course.
And then you type your indifference your interface is my interface is deeply zero and then you present.
So this is how I make it.
OK.
So yeah we find the IP address.
So you have to copy and then tried to scan it.
Do we use it.
It's as usual guys and mother minus a.
And then you pass their
O K now what we have to look for is on which.
So for that different application is one.
So as we see a posh server is on port 80 that's interesting in the S S H is one twenty two.
So it puts these creative is on 3 1 2 8.
So can can go now to Firefox or Google Chrome.
It depends on but it was a site that you have and then you pass it there along with the depart.
So as a D as a default so it can just please enter kind of dialog.
So now we get the so we can try to put anything like test or I mean just to test it to see if it is
in turmoil.
All right.
So we have a new will pop up that means it is full knowable to obscure injection.
So again
no try to inject some sort of code.
There's loads of common injection just try to figure out the best thing.
There is an annual
the E will impact so it makes it so it is filtered.
So we have to find a way so that we can bypass the filter because it has some restriction.
And now we're going to try another one.
This is all in logic mathematics sense in my school query which is true.
That means a is bigger than sin and then we cooperate and pass it in the password field.
Boom you see some Arabism fantastic okay.
Now we can try to read what's there.
The remainder of your contract and retirement fund has been paid and for security ways and you must
log into sky township which is a cinch.
OK good.
So you can open up a new terminal and I'll go to the symptom No.
No.
Does it matter because there is nothing is winning and then child to go to the
proxy list.
You of doing this
and there now the IP address of Sky Tower of the victim machine following a foot maybe put on wish disorder
was winning in the 80s not that much silver and then save it a bit
then you can try to possibly change this message John that we have had it and then the IP address protected.
I mean this tower.
Yes.
So that you can get endurance and then copy that password finding there and then pass it to him.
Now we have something we can try to a petition go to.
All right.
You can try to use the proxy chain.
And but now you're going to make few changes.
The IP address or type it and you trade the 80 and again it buys the password there.
Okay.
Oh well we we are able to execute some commands Okay so let's call it a war.
And then instead of a little you know we try so that we can get to Shane C.
Now we can try to type being this is
we don't have access to that we told you that means we still lack some privileges this command is very
helpful.
It helps us to find dippy deputy should be fired.
I mean all the peach bee fairies so that we can analyze them
let's try to chip them.
This is very important case to discuss and it's helpful.
Access to Dubai.
Who would like something interesting minus Q.
So let's check it
what it's done to try to escape.
This might screw up when it would surely database wrong with the user.
So that we can trade out
skating is the database that we choose that we pick from them it has.
Table which name is Logan.
Okay.
Now can try this in a while selecting everything from the logging towards in.
Oh look the buzzword down there even in encrypted or a hatchet there.
You know everything is there as plain text.
Okay.
So did you want to add Skype dates so we know it.
So we already.
So we can try to go to William Skype tech and then try to put the credentials outside to see if we can
assess each it
get and then you can type it couldn't show according to the user that you can speak in some late
OK.
Box would be kind of homes.
We can't.
So do we.
19 different interests.
So on.
This was okay let's try to see the budget from
let's try to view this file using quite common don't we know what the
110 billion into
what are we gonna try to do it is let's we move the Bush file so that we can get the access.
Let's try to avoid
now we can open and then what advice would we give them.
OK.
What we are there are so.
So we have to keep this in mind literally do it to sort of read
so we are able to do it
now what we going to do.
We're going to try to release the account so that we can see oil which are there.
So as we have experienced before everything that you can try to figure out just to be able to escalate
the privileges you chose do it because sometimes it might get a little bit much more complicated than
when you when you try when you try to get the access and then you you your method does it quick and
then you have to know many ways to try to get into it.
So let's try to let's try to get out if if it means me work it'll be no kill say okay to into the press
would call you sorry.
Okay.
So now let's try to go home territory.
Because we don't have the access now
boom.
So we get it.
It's fantastic.
OK.
So now we can try to sue Reed OK so we have it.
So now you can use that card or get it oh the V.A. just to purify it so two guys you know so and then
we going to try to make it to see if it will.
Of course it work.
Let's see.
Come on guys.
Yeah.
So this isn't so.
So we get it.
This is the person they would do.
Is this our right
now what are we going to do.
We're going to try to again look silly is it.
But now that we discover a command I mean that we decide our user of what we do would use it because
now here we have the password of the would.
Okay so let's so I'm going to try it now.
OK let's see let's see.
So the proxy change again this message and then would the IP address and the prisoner in trying to put
the password despite our way.
Voila.
So we get into it.
So this is so nice.
OK.
Nice so we thank you.
We thank you so much for watching this video.
And then we hopefully think that it was really helpful you and then very understand neighbor how to
make it work.
How do we wait.
So we will know it will assist them in some kind of exploitation so that you get the word access.
I mean the admin did full access of this system.
OK.
OK being there.
We can try to do something too.
We can try to use these credentials for someone in the hacking process.
The penetration in hacking phase so that you trade on that virtual machine.
OK.
Let's let's go there and try to make it.
All right.
So now we assume that you remember the password phone if not you can just go up to a terminal and then
try to try to get it back.
It depends what it was.
This guy out on small.
It is.
OK.
So yeah.
OK.
Let's go back to all skydiving machine.
So let's begin here.
OK.
So they're looking for state was world wide and it was in there and then it was this guy down on small
letters Big Sky Tower were in there.
Here we are guys.
You see.
Fantastic.
OK.
So we hopefully think that you really enjoy watching this video with us.
And then that said just keep trying.
Trying.
So a lab might not be the same way to get access to but it's just keep trying.
And then so that you get your go.
OK.
Thank you.
So see you in the next video.
Absolutely.
Nancy.