And look everybody when it comes to my advanced ethical hacking networking penetration testing cause
this or we going to be focused on the immigration and exploitation of this stuff pro food and a web
of motion.
It's going to be very interesting because it has so many ways so that we can get to we've just shared
access so that we can hack this system.
OK so let's go and try to go on audit and then configure it according to color and expression.
I mean the machine so that we can work with this sub.
Okay let's go first of all to the link that I have provided you.
It's this one.
So you go and search for stuff right.
It is.
OK.
And then you could be displaying copy and copy and you can minimize it again.
And then you go here and pass it the
control the entire
okay.
So you click here to download it after being downloaded.
So you have to go to the derrick toy fire and then you double click on it to import it to your virtual
box as we can see it is as a zip file.
So first thing first you want to have to extract it obviously.
OK.
So no one is or path.
Can you.
And then we have it already here or we can try to go to Google which books machine is standing right
where it is.
Come on.
OK.
So you double click it since I'm a Mac so I know how to right click and then find its target because
it's just a double click and then that's it
OK.
Go with him.
And it will be so quick Oh good.
So here we are.
Now we go here to this tablet.
And then we have to click on the oh the F Fi and we double click it OK so here we're going to make some
few changes.
You can be made according to what you want.
So let's say John Stouffer stop it and then click on import import
again it's going to be imported going to Ed
as we try to defrost them after importing it is to start your operating system.
So you'll go down in there you click Start.
But before we have to be aware of the current Unix network adapter on which network it is wanted.
So let's go to you click on color machine in details to see if it is unweighted adapter Wi-Fi OK is
or or stumble one must be the same.
So let's go to your first display.
Can you go on to see some discussion.
You know we have enjoy have fun filling in multiple methods to do this at least to this both.
OK.
It's just the discussion doesn't matter.
Okay.
OK.
To this system.
OK.
Everything is OK on green.
Okay.
Network was on.
So we have to change it according to carry machine.
So the old Carly was on Wichita return and we have to put it exactly on Bridget.
Here we are on Wi-Fi.
We are on cable but we don't need cable now.
We change it to Wi-Fi.
This is why I always advise you guys to check your network adapter because on a kind of.
Well when Wi-Fi.
And then now it is automatically set setup as a n.
So we have to change it.
Otherwise it will not work when we are trying to discover the IP address of this stuff.
OK and in no case with cocaine OK.
Here we go.
Now we can start it.
We started.
And then after we have to start all candy machine that's where I go to.
And then we start.
Both of them.
And then we can minimize this window.
All right.
Oh again just crazy to put whatever it might.
So we've got a place in there.
Oh it's so weak.
It's OK.
It's working.
So we're going to wait till all operating systems are loading.
OK.
So our carry machine is okay so that we can enter our credentials so that we can log in.
Of course.
Yes check.
OK.
So stop the machine is there to straighten something.
The password being let's see you go with me would would response one.
OK.
So our task is to find a way to get into this system.
Let's go back to our carry machine old password.
Oh I have to put my Wi-Fi on because we are on we should add up the Wi-Fi on in great okay.
So as usual your first task is going to be that search of the IP address of that StubHub result.
Now when I open up or turn on don't quote me on and then fine.
First things first on which wireless network.
We are an indoor first type.
I don't know why this extension is easy.
The issue is when we can type and discover minus I.
And then oh why is it do and request zeal so that we get the IP address.
OK so few changes over on the move move it up.
Whether
Okay now we're going to have to end speed.
Okay.
And map and then minus B.
And then you take the IP address of your stop machine and you enter and then I will go to we'd all kind
of information of that all we get.
Okay.
We have port Tony.
It is closed FTB that FCP that it's closed.
Okay.
The one which is open is 21 DCP FTB look if he s FTB D good luck Ray vision 8.
Okay.
And then let's go below what we know below what 20 to the stage is open.
So that's good that's very good.
Open domain to any fifty two.
Dennis minus again.
So let's go below below on my school offered up Bush is wanting on Twitter and tweet a tweet.
So we're gonna go to all web server to do all but Bowser so we can pass the number there.
Okay so now all I'm gonna do now we're going to try to install the F DP services because as we have
already tested it and we didn't have it yet or cutting machines we have to have it installed can proceed
with the expectation.
And in relation right.
So well ok.
So the process is running.
OK.
So on your wedding day wedding.
Yeah.
So when did it start.
So that type FTB the IP address of the pro and then was in a game.
So now let's try to go as anonymous and then on remorse.
Okay good.
So an industry that is anyone with a run for it.
So and get naughty because they're not
good.
Okay.
Now let's try to read the content of it.
Okay.
So there is a loose end in which name is John.
So good and free so far so good.
Then Emily is one.
John is the third one.
Okay.
So good.
Okay.
So now what are we going gonna do.
We are going to try to find if we can brute force the user name or John using Darby so that we grab
much more information about him.
Okay.
So do we encourage news as we have known already.
It's a very well known tools that can be used that would force some username and password using a dictionary.
Is that dark.
I do.
Let's just go back and then check.
I would put no it was OK to have to be a zero.
And then now go to your terminal.
So type Darby TTP and then the IP address of stable and deployed and present our kin.
So using it to find is some directories or some things like that.
Mm hmm.
Okay let's find if we can put issue to be is
this okay.
It's funny it's one needs money or kill we have even BHP my admin I can write
so I would be HP might.
Yeah.
All right well as you look at this.
So is an exception.
Yeah.
Oh and we have found two notaries just to duplicate it.
OK so we have a pretty good view up on them to see how it looks.
This couldn't be before
case.
We got to pay slowly as we direction market not as good critics in passing their in was an hour to find
what's there.
You look like a blogger.
As the globe one from Sharon.
But it was nice marker.
So let's see what we can try to use the word press can debit to be scandal one.
Kelly can you tell me no.
Okay so go to it because we know that an intelligent peace can and then you to the GDP of their estimate
put it in a million users and our blog ends are plug in a b d it word is what I see toward it because
we have to disallow it as we have seen earlier and define in a failed path of Firefox and then now we
have to try to see opera deltoid.
Okay.
Will be content.
Very nice.
Okay.
Do try to find more information about it.
Let's check it.
Let's go below below below plug ins wound care.
All right.
So let's try it a word or so to pass the link there.
OK.
Protein ding.
And Derek don't get to five something things out there and something is now wrong in terms of blood
care a machine show quote unquote.
And so many key do the this thing.
There is thing you can just.
Just try to google it or stop paging you know using your search engine and then explode you have to
type it as we have done earlier and the previous video I always try to find if there are some exportation
already done in the past.
OK.
Good.
Now I'm going to try to click here to view that world and copy eat and create a new file in this machine
and so that we can put it in our local web directory so we can start all up our server.
So OK so let's let's just quote divide again.
It is a fight on fire since we ended up would be way get we take this so that we can jump to the top.
We tried and put the SSL
on the changes provided the resources.
And then we're going to change the other one as well.
And so we copy and paste this then the code path API enjoys or the brother which used to be Ms.
Once he was a man
so I know put the board slash rug but not get so what it knows we need.
Nothing Mom can save it and quit okay.
So let me explain what is this exactly.
First thing first we really we will really enjoyed you two we did code of divide that we have modified
earlier because without reading it and to understand it you would not exactly know what was his goal.
It to one what difference does is that when we won despite on file in 0 7 it's going to be uploaded
but not as byte on but it's going to be uploading as an image file and JPEG file.
So that's why we use the IP address of this temporary machine along with the port number so that we
can put it inside and then when we want it it's got my degree upload to the directory path there.
OK.
So you can try it now.
Okay.
And then now we we need.
And then let's go to the Firefox or Bourse and then try to foist a page trying to refresh it.
Oh okay here we go.
So this is fine.
So now we're going to wait Craig to find why created and savvy does Japan and then go back to terminal
and then we're going to go through download folder.
And then we have the file there and then we try to eat it is it cut.
You see so now and this is how it looks
you see.
Excellent guy.
I'm telling you Xand you just you just modify your bite on end and wounded uploaded and downloaded from
the server and yeah we get it.
So now we get a boot and a lot of information about it some real coral holes and then my screw and credentials
stuff like that.
Okay.
So
now I'm gonna take the IP address of the of that stapler
along with the board and PSP might add me so that we can see if we will access.
Here we are.
So I can now use the credentials that we have found while downloading the image file from the server.
OK.
So you type would
the password again.
Go.
Very good very good very good.
Now we have access to the PSP my admin.
So now we can try to use my obscure common there in the execution phase.
OK.
So let's try to go there and pass the coding inside inside.
Okay.
Good.
So this could be HP.
It would be in this directory and shared that BHP so that it can execute the commands again.
Could go all right.
Good.
This exclusive comment that we have used that we have diabetes.
It will Quaid if my name is shared at the HP in all operated content path of all web directory link
address.
So now what are we going to do.
We're going to have to go to Firefox and then try to we the page.
OK here we go.
It is.
OK.
Now we can go and test it.
OK.
Just I see an equal on the hostname comment.
So we have you visited and the previous travel before to see if you've got some information.
Good.
So we find something.
OK.
So if if you are if we are able to do that that means we can use some kind of reverse share payload
so that we can be tested.
OK.
So let's see if we can get a connection using that.
So it's open to all.
And then we can try to set up on it kind of command as you draw and say minus Ed repeat and then any
port number that you want avoid.
So now go back to your Firefox and then sort so has me if by the operator before we get a pass it and
then we're going to modified the IP address of all attack code machine.
Dick Dick candy machine and then deport that we have put in our net cut again and then we're going to
place the highest number paid on payroll that we have showed you just went out and then we PRESENTER
Here we are.
So we get to have a shot.
Excellent.
So the next step now is that the privileges escalation because we are there as a doctor at word.
OK.
So again deputies might say fine with your version of a one to one to six things.
So we send OK.
Just go to Google and try to explode if there are some exploitation already there.
Type of 1 16 for all privileges coalition it was in our All right.
Great
care we can be worse it Newman in China for us one monkey.
We can try it out of camp some it is a well explained fine we just copied and pasted in a new tab again
and we have to
download these photos and send them on your computer in a computer.
Yeah so both of them and then go on to determine on and then we're going to go to that downloading path
again and then move them to our SDM directory move to
also w w w w e n and then we have phase them there and then we're going to try to extract them does
it get
all right now we are in this tub per share common.
So we have to find a way so that we can get defiance which we have downloaded from Cairo from all colored
news so that we know that we have to start to do a patch server or carry machine so that we can definitely
get them he.
OK so let's go do that.
All right.
So we're gonna go
study service again.
Kissinger OK.
So now we can change our territory to ten and then go in and study and download them here.
OK.
So and then we also have to do a really good issue to be in question for a dog.
All right good.
Now going to the dog command.
OK.
So that we extract them again and do the same thing for to unified question a dog.
It was a..
OK good.
So now we are going to change a directory.
You
get OK.
So now we're going to try to make a good table.
If I lose X compiler sage
Okay so we're would wouldn't compile it and then a second Bailey.
So we're going to win it.
We now want it.
And then the file will be double put in
okay.
Good good good good.
So now we own it would shed
so we're going to let
it is it takes the time.
Okay.
Good.
We have would be be is now.
A D.
So you got I.D..
Okay.
We are good.
So we can take this some common again to pay tremendously and put it away.
And it was an urn argue we are as wood fodder we can type say wood and then it s so good.
So now we can use a cut command to finish phase.
Okay.
So that's a big case for this video.
Wi fi which is that there are only fires which are there so you can use the card comment to try to open
them in the toner as well as we did for the flood the deactivated.
So again it said We encourage you to try try try try again and again so that you become a very good
paint Tester because as you might see we have used many commands but sometimes we use the same command
even if we are in some defined rule newer more application of renewable the operating system of renewable
virtual mashing.
So we use this in for example debate on so that we can get the way shell and then go Liberal piece gun
and map you know these comments now.
Very helpful Nick too.
So don't forget to comment if you know some more information.
Everything.
It will be very good for you because sometimes in my old might not had it but Nick go ahead and then
do a b.
May not have and then something that is happening for example if you already have information about
what's on the target list if it is a wordpress powered by one person you can use WP scan so don't you
don't even or want to go to use some of the tools for scanning because you already know that it is it
would post below it.
So you can use a WP scan automatically.
Okay.
So we really hope and we really think that this video was very informative for you all.
And then we are looking forward to see you in the next video.
Thank you.