And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
this lab is going to convert emulation and the exploitation of the word pass up.
So to stop it you will not go there and click search and I would press and go
but we're going to try the first one we create
and kick start
you're going to have to wait.
OK.
Now you get this in bugs
OK.
So now this is the target that we get.
You can go to your terminal
as Edgewater for firewood place.
We all use always W B scan because we don't need to go to look for other tools because we really detect
that we are working in your post lab.
So you just put your and then you just enter
okay
one day scan is done.
So you have a lot of information in and then try to see what kind of info that you get.
And then we have the location as well.
And we have some differences in just a look.
We can go down below in suit and try to press local was with information that we got so that we can
get the sites.
Good thing.
So let's have a look.
Let's have a look.
So you've been on this time and you type
k.
We place these content by the new world of the happy that you get
here.
So the javascript payload is loading into the page.
That means it is vulnerable to excesses attack
got
okay we're going to have to is to use against
go up to logging and try.
I mean the password is password as we have seen Rowena
Okay so now again we only had a dashboard.
It's so easy.
It's just for the sake of the demonstration guys.
Okay.
Now we're going to read it.
And if the road is always to upload some files.
Okay now we're going to try to create a page so that we can use the file that we are willing to upload.
With information on the installation
we go to pages and add a few pages
then type anything what you want.
And now and I might get fired or what gives and then try to publish Greek Ken now and get that page
so you can view it
okay.
Now it is obscene see 99 I share it is this show which I wrote about was the execution of payloads.
When I go to this link and clone it all you just can copy and go back to a terminal and there you can
create a new file.
You can use a text editor like you did it or despite it.
It doesn't matter and you create a piece in the new creative BHP fine and then you pass that code by
that here and then save it and create during after that's gone out to read.
Oh I can save it good good and go back to their website and then we can go for the PSP find that we
have just created and then go to heal.
Okay.
And then open upload to
care so we get a message.
You cannot send you.
Now we go about three programs and then we can see that process will be e active.
Okay.
So what I try to put it if we can find it somewhere
we will naturally force large developing content slash applaud slash scene 89 churns.
The HP Well as we can see we successfully applaud that cheer.
So it's it's not big stuff.
Okay.
Ok that's all for this video guys it was just a very short demonstration about how you can use the word
person marriage and you know the first thing is that if you already have a target that you know that
the website is hogged by wordpress so you can just use WP scan so that you can scan that Web site and
so you don't need to wait for something else but if you know something more opportunity.
Because sometimes even if we have some comments for a particular Web site so we can use many comments
in it.
It depends on the goal that we have.
What we are going to do so that we can grab those information that we need.
OK.
So that's it for this video guys.
We hope that this video was informative for you.
And then see it in the next video.
Thank you.