And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
and all but again.
So in this video we are going to cover the part of shell shock attack.
Okay so we can try to use MSF consortia so that we can try to make it we first DCP attack so we can
try to find someone to decode information about what is it exactly.
So it can go on your Google all on a list stop Virginia and then you try to type CV in which is a common
one abbreviation for.
Come on.
Well no airborne exposure.
And then you can try to degrade he'll look for this scanning as always so we are going to use and map
Tor and Mottola can be used on television picture vulnerabilities.
What number of some mashing.
We are going also to try not only to map the IP address but we will try to inject a shared shell shock
script and side of the comment so that we can get much more information and then and then it will show
us some pause in some vulnerabilities of that mushy
okay.
So now it can go to stop Virgin's thought
and then you put another
cone can go to go to this first
it's gonna take your idea and destroy our society to the year 2014 year again.
Okay.
It's here.
So.
Yeah.
So what are gonna do.
You're going to go and try to download it after being downloaded and then you have to start it on your
virtual box machine
we have to go here and then we dive.
Yes of course.
OK.
And then here.
So you just click on downloads that you can download it.
Okay.
So we have it already downloadable on all computer.
So now it's just a matter of started it and you're in a virtual box.
So we we go there you know which our box machine then he uses.
He of course we get on with some food changes as usual.
Your first and first since the Kelly is or attack with machine is or we are going to check on which
network adapter it is connected so that we can set up or CVA in 2014 in the same on the same network.
Okay.
So here we are in the network our network forward with carry machine is on glitched adapter so we gonna
do the same thing as well.
And then for us it's the here net new it's me.
It should be here.
OK good.
So now we can check.
Okay so there you go.
Okay now it's getting replace it.
So now we can start it like that in so where would demand you really shouldn't take so long.
Okay.
Here we are.
Stood Up here we can type some comment.
But as usual so we can try to type we thing because it's the terminal appearance so that we don't need
to blow again.
It's not a matter of that.
In the meantime you OK your IP address is 1 7 4.
Okay now we can try to start okay.
As the attack machine and internet can use the midterms board to make the Weavers share to
so we start cutting machine e we can minimize it.
So it's going to take a while.
So yeah
you can read much more information about this what it is but was the New Ability Found in 2014 and how
now it is much more secure and the stuff right that Okay so.
Okay lean machine is really tight before you show name of UPS.
We had a mistake come so again for us.
Okay now what we going to do.
We are going to try if in cutting machine we can which the IP address of the shell shock machine and
then we are going to put it through another it.
We know we can change all the colors.
Would it mean the difference is oh I don't need clothes.
Green I'm black.
Not.
All right.
Quotas okay.
No.
First thing first thing when I try to define or interface.
Okay then now I can try to be the IP address of the shell shock machine.
So what was it.
Yeah.
Okay.
This is okay.
If you see something like that that means it is warning and all kind of machine can reach it.
So now we're going up with control controversy in stop is common.
What can now.
We are going to use a tool which name is and map from previous videos.
We use it a lot for coming any IP so that we can find those port on which these servers are wanting
us to find that much more information which port opened or which one we all which ones are closed and
map will help us.
So in all concerned.
So we're going to try to map this IP address so start it.
If you want as well you can use it z map.
It's a graphical interface forthcoming.
OK.
So and map planes this the B and B minus in a year we are going to see if that is knowable much.
I mean if our target matching is a renewable two shell shock attack.
So by the sound of it we are going to inject a squib in Cali build machine.
So Kylie comes with this quick like that.
If we take D squared she will be.
So for each GDP then it is to be shell shock like it described is a build script.
So if Why are you trying it and it does it work for you it's just a matter of updating your Kali machine
because it should be there.
Okay.
And then now we take the IP address and send it to us.
This one and then I'm going to present or present them and then I'm going to put it injury ticks on
about one minute two minutes.
Okay.
He doesn't even that long.
So we have some board which are open to get open it assesses is open and a patch server is open there.
All right.
So now the next to what are we going to do.
No we want to get to the command of this machine formerly of whom disk Kali machine.
This copy machine represents what was the attacker machine.
So how can we do that.
Okay.
So we're good at showing you we have a famous myth that's brought me that spot as a common console.
We should have to tape estimate MSF console in New casino.
If your meter spot is old we will require you to update the version because as you update your version
and the new you have much more qualities you have much more possibilities so that you can cook or you
so that you can get access to to any new reliability system.
OK so.
OK so before getting here to auction.
OK.
And if I am forgetting there as in we are life in we already you would have access of the victim machine
but since who since we are here on virtual books.
So that means physically we have access to do it.
OK.
So we can just show a really quick comment that we have type it to here on the victim machine.
Uri you can take it in me and give it to machine.
OK.
Assuming that for me for me here for meters but you already have the full control of this machine you
already have the to give full control of this machine and then you can inject some script there from
here.
All right.
So let's go.
So look it up Ian me and then X equal stuff and then the bone disease and could work its curing proteins
and then we can type space does not work and then we take a clone or an equal and put up a block so
anything we type after what it could do is usually when you type in court and then Bruce is tween.
So it is it prints this tweet that you take after equal care to brother John and then it grows it it
grows it will stop and take mine will see it go oh I am doing in time here.
Anything.
I mean that's the items that these nice gain is intended to close it again.
Okay.
If Y depressing Inder it gives you two string blah blah blah and all right men.
That means this machine is already who knowable were discrete Shell
can only imagine it was into the we were s o k we could it was it's.
Okay people were really having Mr. Gale like that.
Okay.
So you see guys it it brings the truth trees the two streams that we have that we have area the Brad
Rajan and blah.
White men and that is nice.
So that means this machine is really vulnerable little shell shock attack.
So in what if they had go said to himself.
Okay.
So if I can inject some squib like that so I'm going to try to find something more.
Which one.
Everything in D in his computer you know.
And then we try this one again and say Now I don't need to see blah blah blah blah.
So I need to see some face inside is instead of a system and then he can just type it for example not
equal but this this technique used car come in and then try to go to the C BTC and password password
and this fire on Carly mentioned mostly on a Linux machine contains a lot of information about the username
and password of the log in mashing.
So I you know we're going to poison her.
Here we are.
Here she was me.
So we see you.
It has a user name as wood and then the password is as wood as well.
And then you know how to use it and nobody.
And we as we have said earlier everything that is before the ex everything that is before the eggs for
example here here we have wood with a moment I have the joke of my mind here.
OK here here we have wood EEGs everything that is before the Eagles is considered as being a user here.
This is one music I don't use it or lose it.
I don't use it and I'll use it.
Okay it.
So this is fun.
Does think so.
But is someone I.
It is.
It is vulnerable to suit too shell shock attack.
Okay.
No let's go back to all emotion and then we can type.
We can try to find out how to interpret his B.S. from our own side.
All right.
Okay so now for grant type use use expert muti Hendra.
It's empty and replacing No no old dog between enlightenment
okay.
So now what we have to do we can after every comment if we want to take.
Sure auction show auction auctions case and nothing is set up now.
So what are we going to do.
We are going to said Oh we tried to host our look port so that we can send them up.
Okay so we're going to go step by step.
Again day two said Sid it's a demo.
It was the IP address of what cutting machine it is what we don't know yet.
Do we open a new deal we know.
And then we type 1 3 1 5 9.
Okay.
You can just copy us you know positive okay.
So now what are we gonna do with.
Into.
Okay.
So we do the same thing for report for.
You can use any put number it's a ball.
This one.
Okay.
Again children's
shoe.
Okay.
So we have the same payload.
Well said we load and then which evolution.
This is the old UNIX invasion.
Okay so now you can try.
Let's say that this in his vision you mean Chinese one Linux
Unix display or you know Linux new media if we do it again lose natural.
This one these X 64 64.
Do you know what you do in the modern world.
Bruce DCP and any presenter became another control option options.
OK.
Yo yo yo yo.
Good so far.
Okay.
Now why do we have to do.
Soon to be there.
We're going to try to set up a file.
That file.
It's a kind of virus so that when the user clicked on that virus on that file automatically we get to
East system so we can use it really when an uncommon for me to explode payload it is named as MSF known.
So for days you will not type MSF in on.
MSF MSF they're known to been on.
And then what you're going to type after you're going to type minus B its.
That you.
Well what do
you do with your
reverse B DCP.
Applause was equal voice control shifting V.
If I stayed there name calling for it.
Easy.
Quite a lot.
Nobody is equal 45 to 54.
All right.
Minus an F Jon minus a B.
Both characters in quotes slash mark leagues.
There was a.
So this is it was you.
This one is representing what was the back characters.
Okay so now I'm gonna take these e and i they put it in all this though would stop
then yeah.
So they failed the animal if I will be blah blah blah.
No.
Gail it's just it's just pure was it again.
It is
gay.
And then we're gonna put a note
Gail it's
me.
It's only grade no platform to succeed in doing channel.
You couldn't do it each year.
No chance.
Okay.
Now we have to type in midterms both exploit so right away.
How now we can try to figure out a way so that so that the victim may get disciplined.
And then you can try to send him this link to a web browser and then inside him to click on it.
Oh right.
So after that you gonna explode.
But before you can open up a new terminal.
And then you know it's a new start your upper shift server so reset that barge to start start and then
mysteriously it's it's winning.
You can try to put this fine in a little closed server machines and see this grow again.
Then you move to a new demand within there.
So as you can see it's not there anymore.
So if you want to check in goes the middle of the abilities and then it was intended less so that you
can see looking it is there.
So our flash service is already starting.
So now we can try to type you explored explored and then I'm calling machine now is ready for the attack
by any what we want now we want the victim to go in clique of it so that we can get access to his system.
Okay now we have an attack machine.
It's winning the one thing that we have to do is wait to do 15 clicks on a link.
So very way in the next video we are going to show you how criminals exploitation B and B functional
B and B win because for now it's just a matter of how to set up your attacker machine so that you setting
for the particular victim whenever your victim clicks on your own or your fights and get it on Duke's
system automatically you have full control of his computer.
And then while he's doing his stuff while watching YouTube or play games so you can shut him down or
you can even changes password.
OK.
So in this video we are going to show you all these things we are looking forward to seeing you in the
next video.
Thank you.