And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
being here in this lab that means you are already having windfalls of good knowledge about the relation
and exploitation of renewable labs.
This lab will call for the innovation and exploitation of good and I.
So before starting as always we get to go and downloaded and then imported into ovary trouble too much.
OK.
So let's start.
Let's go to or link
two.
And then we look for God and I.
And then we compete with copy contracts single commanded.
It is on your computer if you want in my book.
And then representative
there you're going to find it fine.
Oh the eight.
And then you have to download it after being downloaded.
You double click on it to import it into your free travel books much and then there you're going to
have a few changes.
So we will walk through
ok here.
So you just click you on download and I'm going to click because we have had it already on our computer.
So let's go to all go to a directory yes.
We go
OK.
Yeah.
And you double click it.
It will automatically imported into all of your troubles watching.
And then there you can change the name according to yours.
Let's say I would call it John and I won.
OK.
Import
OK it is there.
So what are we gonna do.
We're going click here and right click choose settings on just go here details and then you click on
you know then you're going to make some changes.
OK.
So if you want you can drag us to Guest Guest Host Oh my jokes or not depends on you 140 slobs or we
could just leave it like that.
OK.
So now what we see is them.
Nothing good here.
Nothing storage or nothing.
Go to network I mean to startle good network and then here make sure that we have set the network adapter
according to.
Of each box machine currently news.
So in in our books we had it set on what.
So it can be for cooking.
Okay let's go back.
This is all kind of machine.
And then we own network it is on widget adapter Wi-Fi.
All right.
So go back here and do will not change it.
We did it up through here it is already on my phone.
Good.
So just make a chip.
OK point and then click.
OK so now you can press start to stand in featured much in
so we're going to wait a little bit.
Don't
at it a bit.
OK.
Good.
So not think so we don't know the password.
We don't know the user.
We don't know anything.
So our task is so that we can detect and then we can find a username and password that we get into that
system.
All right.
So now let's go back into that kind of machine that's bad and we just thought it
minimize those inner
so we have to beat
Democrates loving
issued ethics.
OK.
Good.
Here we are.
So we type him as well as user ID and password.
So you have to remember which of course yes guys
as usual guys.
My advice to you is that you can still impose your pointy slapper but whenever you change your location.
Always remember that your IP address might get changed because sometimes if you were somewhere and then
after you go from some kilometers some kilometers which your computer and then you are logging on in
your network Wi-Fi or hearing all your IP address gets automatically changed by the sound of it if you
want to go to the address posing with this address like we can use this one for example this one and
then if it were on 1 7 see Well of course when you use that your operating system it might get change
and then you might get into any more.
So you have to be aware of it.
So too old to always try to remember that you change your location or your IP address might get be new.
So it's just a matter of not only to save your extend of your virtual machine but to start it as new.
So you started again here.
Reasonable.
I dead and then you started.
So that's that's the best option.
So obviously that you would just remember about it.
OK.
So now we're going to have to have wi on which interface we are.
So we take IP but people think it was in there OK we are on itI h as you walk.
So now we can type network discover so that we discover all the IP address which are on on it.
So we have to find the IP address of the god in this computer.
So we have to have his IP address.
OK.
So now go back to academies or we can change the
light on block by block.
OK.
UPS goes OK.
No.
Come on again
OK.
So now we can maybe discover net to discover and establish and then my new by my news I bring your friends.
Is it easy.
And then presenter so not gay No it can wait for it.
Yeah.
So that's it.
And then you press control see to
as we're already seen before.
So with Emma.
And a B it's a 22 day news that that can be used for giving the IP address of someone's computer.
All you can scan a whole network.
It will give you a lot of information.
Guys
and then after we got type minus eight for all.
And then.
And then after we're going to put the IP address.
OK
all right.
And then again presenter up for 25 is open S.M. TB.
Okay but a D up patch yes 5 5 0 0 6 DCP SSL.
Oh nice.
And then pop to me.
Okay.
If you're all familiar with Gemma you can know what does that mean.
Pop Jimmy again.
Great.
So now let's go to your two older boys and then try to stay their career.
So so you apparently Firefox here.
It's a good
acknowledged now.
That was the IPR just that we don't need to pass the port because the port is on 80 as default it would
be on 80 but if you want it doesn't matter you can type it up very like
good.
So now it gives us save a home as a path so that we can go and run again.
So okay desu.
Oh these guys.
So we can see on
so now are we going to do is go back to the main page in
then we like we just the sources and just to find if any information is here then OK.
So we have a javascript file.
It's all let's click on it and then open a
it this carefully because it is or for various information it is HDMI and could eat eggs.
So we can try to find on your Google how to decode a you.
You are aware of each GMO code and then try to record it to see what is today's
oh so invincible hug.
OK so good.
Employees.
Make sure you know what all this looks like a user name.
So let's make a note of it so that we not forget it.
Then we can try the home page try to serve our home beach boys
and then the person that we have just Rickover.
So the password was invisible hacker.
So you remember me.
So we find it.
Why do we decrypt the itchy amateur text.
OK so OK let's see what it says.
Oh he's tried to eat guys and then tried to shoot his source caught us right.
OK.
Is
tried.
OK.
So what kind of information.
So we get there.
But that is it.
So it's nothing.
So we open up a new terminal and then we try to turn and maybe.
OK so now we can take their meds.
And then DARPA Juris
the IP address of all called denied input to okay.
Now first thing first we going a real or fly fast track.
Good.
Now let's use this common high job minus Boris minus bullies and then minus B and then you bust the
path there and then you put the IPO just to feel good and I I feel is fine from 0 0 7 to the point that
we have used we have seen and met it in a month.
And then you put it up to servers oh perfect so we get it passwords secret one we successfully discovered
the password of boys.
So that's good.
So now let's make it a step more OK you I turn it in the IP address of your good and I.
So so that we see if we can find more credentials or okay.
So when I put user base last Sydney bus wouldn't impress them.
Okay good.
So far so good.
We are getting let's see if we can find some kind of e mail so that we can read them.
So let's try this call in to a 1 percent erm I
nothing so.
Again try the tool if nothing you have to try to tweet but let's see first if we have some information
I can work your call.
Phone Natalia 0 1 2.
Okay so it might be a user name.
So let's try more okay.
This is him email me surgeon the White
gain.
Natalia he's he's a user name or care has the same username as Bruce.
Now you can.
Great.
So now we're going to go back to hijack commend and we're gonna try to modify it and use it into Natalia
and then now we're going to poison all the.
We would see one formation
good very good we have 20 plus for Natalia.
Great okay.
Now I'm going to read and then try to turn it
to you again so that we can find these giant looking to see if we can read manageress.
Look we are.
OK.
Idea 1.
This is a WHO WOULD YOU WOULD is using him.
OK.
We have some Quinn shows he's using senior and password.
Our Slepian and so on and so on.
OK good.
So far so good.
So we've been trying to put it in some ticks or just screenshot it so that we can know step back and
remember it and the next step we're going to use it to draw.
So that's what makes a few changes
and now we're going to try to enjoy the IP address of goodnight and then Cincinnati station dot com
and then we'll see Queen.
Now what we have to do we're going to go to Firefox or to Google Chrome to open warfare and then we're
going to pass the server name.
I mean the Web site that we have phone into E matter when we're reading them.
So we're gonna pass it there and it's in that we can see how it looks.
Okay.
So we can go in and try to go to Firefox now and then we passed their
and then we'll pass it there and then we put it no yeah.
Oh.
So and then we get into a module.
Page
No we can try to looking with credentials that we have found senior.
Yeah.
And the password we put the password let's see if we will be logging getting that seat.
All right.
So we are there.
So OK now what do we have to do it is just to click and click.
So just find someone for me Shannon.
I would set my tabs on my profile and so on.
So after looking and.
So we see an image from Doug
my main use it is Doug.
Thank you.
Cheers.
OK.
So now we're going to try to use hi Joy again
to try to get aid and change the user name.
Okey doke.
And then the presenter to boot from sea at sea profit.
Good.
Exactly.
So now we're going to try to try to turn it again to see if we can find more information about it.
OK.
So then I'm going to put a point out of course in the new prisoner and then using a dog and then you
put the password there has got to see if you'll be logging.
OK.
So now we have to e t 0 1 and again I'm under the username and passwords.
That's great.
So let's see if you have more information.
There is no message.
OK.
That's good.
So now we can go back to all Firefox and then try to log in as the news and in that we have forgot just
why no to see if we can be logging in excellent.
OK.
Well now I'm going to try it.
Too good to miss ages messages to see what mean.
OK.
Good.
Fine.
To see some information on you try to download it to see what we need.
OK OK.
Audiences this week will use.
No we have a location.
Totally.
Okay.
Just go beat
up a new term and then try to put a supernova link and then try to go to work.
Nervous thing.
This is the image.
What probably the image might be containing some information some ticks.
So we're going to try to save it because we never know what it takes inside.
OK.
Now go back to your talk to me now so that we can go to a download for Derek Hermes.
Now we're going to use a tool in order to win in a way to files or images or in order and in order to
manipulate the myth and attack that might it be contending in a fight.
So we can use this to interact.
We can use this tool encoding links matching if we don't have it yet installed.
So we and started by typing up to date and stuff.
OK let's get into it so we're going to type it up to do to get install if 2 percent or.
And then Epsilon
which just with a little read and then after done so we're going to use that tool and we could define
that we want to pierce that we want to read that we want to get access to it and then the page defined.
So you're going to be careful the information so you find a lot of information.
Image description it is Seif byte order.
Hope this is encoded stream since it ends with two equal signs.
It is a base64 so we could all use birth street or we can use Terminator to try to decode it so you
could beat and then take a call.
You can go to your purposes.
It's not a problem.
And then base64
it takes and then you type which kind of encoding texts and then minus decoding the new poison.
These is the decoded text that we get.
All right.
So far so good.
OK now we're going to just copy it all so carefully.
OK.
Now we've got about to do when I come back here to Sophos and then let's see if it if it is a admin
password and then type I mean and then you posit that password to see if we might enter.
So we are in.
Okay good.
Now we're going to try to go to site and be situation go too soon.
So servers
and justifying your version OK.
This is the version 2.0 point to me.
So now I'm going to try to google it.
I mean oh stop page it to find if we can get some exploitation of it.
So that's what we always just tried to get information and then go got it.
OK.
So we're going to try to exploit it.
Yeah.
So you can get
many fine spellcheck sitting on Google gold they're them using stem OK.
So let's see how we can use this exploitation
OK.
So my test can be used for getting this shape or you can just try to do it manually.
We're going to try it in reverse shall fail.
Let's go the system.
When I'm good there and then we have to overhaul why did we or we first should feel that we have downloaded
earlier
good to far folks and in Guinea you're going to try these each year which cheat
we're going to use the pirate on code.
So just make a copy of it and then just to try to modify the IP address of Throsby and then you can
put us default.
Now and then try to modify the IP address
and then put your IP address your IP address.
I mean you're kind of much in I'm Joyce and then put you can leave it as default.
Anything you have to remember always when you cut it any time you know so that you can put this same
port number.
All right.
So no
this is good.
Good luck.
Okay.
Never forget to collect the same changes
so you can go to program to find out if we have to change something.
Say it was
fine Ms.
Each you went into okay or click on it made sure you put it on B as a share.
As different as you can see it is a Google spurred and then which would affect our expectation.
It might be fed if we use Google Atlas but we have to choose.
Yes but share now it's the time to set the net cut.
Listen I'm forgetting the communication of both of them all of them did.
So now I think that what went up was under way.
Then if were fired you would do a Firefox and then try to go side page bongs try to open on one of them.
And you can type anything there and then use it toggle to spell checker.
So that's why we didn't choose the Google one dispatch checker.
Okay so it act it activates the we versus ship battle of the fight on that we have used.
And then.
Which will empower or exploitation from the kind of smashing of their we first.
Sure you have to activate the total expenditure.
So that's why we use it.
We don't.
We did it use cookies and check.
You see now on next is we seeing the connection.
So no we cannot take this comment.
So we already use it and some previous videos already.
Now we have to escape the privileges All right.
So we can try to you name a and then tweet to show us the version of the you want do.
I've got an I can we can again go back to Firefox and try to find if there exists the exploitation of
the Ubuntu return thing.
Always try to do that always remember to try to get
a better one.
First on to see if we can exploit it.
Too early to copy
what we're going to try to be this content and then create a new fire in all rule called Web directory
kind of matching which is var slash every time a news flash it's damn it and then we're going to create
a new file and then pass the content of this file inside of.
So let's go and make it okay so when I'll in neutral or and then we can change or down with joy to all
look on a web directory it's slash it's to a man.
I know and then you go and I create a new fire there.
We did VII comment in if you want you can use get it.
It's not a problem.
Oh you can leave it use lift but it's not a program.
So the most important thing is that you quit your job in the new plastic within them so that you can
extract it or you can download it from your local work machine while you are and go to night.
Okay so does your office eyepatch some
so that you can get access to it.
And then now what do you tell me now.
I mean it could and I sure OK says DMV and then now you're gonna try to get it the IP just a full copy
machine of course and then defy is in.
Kit so now what we're going to do now you can try to compete using JCC before taking the following command.
We're going to have to modify or fires which will have been downloaded.
The one that we have put in date will file a WW is T M directory path because in this code and I have
variable matching the GC C is not installed so if would be worse.
The code we will see Dad will first try to control f or common f if I want in my book you will type
GC C and then using the code that leave ecosystem and disease cause GC C a fan FBA C that means it we
choirs so that we use Jesus for the compiling but as in all code in the way it does it have the GC C
tool installed so we can modify the code by the way we are going to just try to delete the G and then
we let only b c c and then we save and we quit and now we can proceed with concomitant let me to first.
I mean
key here as we can attack we see the G C C is here.
So in a good and I it's not installed so we have to find a way probably C C is as it started moving
and then we going to try to delete or erase GCSE so that we can make it simpler.
All right so we're gonna go out and let's see first
and then we're going to try to A.
I mean just to see we just only C so you can find it you'd like control s guys.
So you just do control errors and the new type GCSE so that you can find D this line of code lead ecosystem.
I want to see is that GCSE space fan.
FBI seems or I'm saying so.
OK.
All right.
So well when I say we
get good
and then wasn't there.
So now trying to see and then you put define minus all output and then it was then it should work then
OK so now we can try to win it.
Okay.
Good.
So nothing inside.
I do.
We can use card to open these files is this flag that takes.
Okay good.
So now we get it.
So we get a file here and then this is the content of the.
Good.
So that's how we get into it.
Guys we all fully think that this video was helpful so that it makes you understand how any relation
of exploitation of the good and eye operating system is working.
We thank you and then we hope all this information was informative for you.
Our and then we are looking forward to see you in the next video.
Thank you.