And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
in this lab we are going to cover the process of innovation and exploitation of the.
I am f vulnerable machine.
I am f is that provision of the impossible mission forces.
First let's go and download it.
Okay so you're going to go and download divided it which I have provided you with in some previous videos
for the downloadable link.
And then you likely go what is in you and then you choose.
I am f this one and then you just copy it copy until I see occupancy and then you just go down and pass
it there.
It was under no ID.
And then you have to download it after they don't want to know it is complete so you're going to import
it into your virtual box machine and then there you're going to make some few changes social configuration
so that you configure it exactly according to your color and machine network js.
Until this lab is there to be much more heavy than the other ones because it went and how did gigabytes.
Okay.
So if you're going to click here to download it and this video I'm not going to click on download because
I have already downloaded on my computer.
So what I have to do is I have a choice to go to my virtual box machine and then I have to click to
open it and then.
So when you have your downloaded file and then you can go and double click on it.
Why would I want to click on it.
And then you imported into a virtual book machine.
Okay.
So I can just to define it.
Which you will have downloaded so that you can make sure exactly how would you look.
OK all right.
OK.
He is defined which I have downloaded I am evident.
Oh okay.
So.
So when I double click on it and then it will be automatically imported into each one box machine in
there.
I make so few configurations.
OK so let log do so.
So you have two being imported.
You just click here and right click and click setting.
All you can just go here on details and then you go here to make your configuration go to you.
There are so many things information.
OK.
Nothing.
It's OK with you on green okay.
Storage is empty and things are but never mind because you already have it imported as over a.
It's not in I will fire.
So it doesn't matter.
We can't go here and go to a network.
Now as you can see on it we've got up to it is sitting as Brigitte adapter and on a Wi-Fi airport so
that someone of ID or candy machine as being a machine must be in septic on this same network environment.
But you may ask me so but how will I know then if my victim will be on December just as I am.
But no he doesn't mean to be on on the same network as e must be on this network as you but Matt on
this.
I mean breached up to we use bridge adapter for a virtual machine.
So when you use virtual machines so that we have the same network which are on your machine in the automation
so that we can get a connection.
Also you can so that you can get the IP address because your host network will share the network with
audio for each Redbox.
So this is exactly what we did to the means to your host network.
I mean here you have a new nukes version as well as operating system or you have Mac or you of system
as your host machine and then it would share its network which would reach Redbox.
So that every quick view you can go and turning on and then you would die but you can it can be.
And when he was in there and then you try to try to go in and to find something for you.
And then finally it's 19 O K not e in and it will go down.
It's the early lead you find it on O K in it.
So this is it this one this one.
So as it counts it is 1 9 2 1 6 2 1 as the seed in 1 or 8 so it will share the same seed though 1 May
2 1 9 2 in 2 1 and then D only this board will be changed if we didn't put it on budget director or
return box machine you might have ten dot Zi war dot 1 or something blah blah blah and so on and so
on.
OK so that's just a quick show about it.
So here you see it.
And then you can click on the key concerns and it's an important now and then your ticket cutting machine
of course.
Then you go to network out there.
OK.
You get a free Wi-Fi network.
OK.
So now we can start cutting machine and then so we can start off to be launching again.
So what we don't know is it can
do you can start your I am f machine clicking
one provision here so yeah.
So after it as we were going our way deal it loads now or two machines they are warning.
Why do we why did you have to do as I always advise you guys in order if you are going into weekend
attack you have to try to grab the information which are for you the basic information so you intend
to hack a machine the first thing first you have to hack the IP address of that matching of the MAC
address of the machine or things like that.
So in such a way you have to scan the network and then try to get the IP after you get the IP then you
have to try to scan the IP address and how to do that.
It's always the same process because we are still under some network.
So what you going to do when I go to attack a machine to call news and then type net discover.
But first of all you have to determine my origin of which you are like you type either you contain any
wasn't there.
OK.
We are on the 18th each.
Oh so now we're going to take net discover and discover which tab.
So that it.
Right.
It's for you and then minus E or in their places this and putting it in and now it's cunning it's capturing
packet and then scanning or network seed.
Oh yeah our so now it was cancelled.
See to cancel it's coming because we get IP entries.
It's this one.
Okay.
So now what we're gonna do is so.
So we we see that it is on 12 16 Easy will for one entry is so we can try to NYPD by doing so you can
type in Mother minus B minus minus on and then you copy and paste the IP address there.
So the IP is this one you just copy or a click copy and paste it there.
And then present it.
So now this kind is started.
Okay.
So it might take sometimes and sometimes two it can take just a few seconds.
Yeah.
So we've just got to wait a little bit to see how long it will take.
So no
you know mean really being
usually it shouldn't take so long.
It depends.
All right.
Now what is coming is complete.
So what we have to do we have to have we have to check what kind of information that we get our kids
or no go oh of and then try to read it on each word or communities.
You in a posh server is only one point eighty.
Let's go below the mike address is this one key it's too weird.
It's Janet so.
Okay.
So much much more than that much of information.
So that's enough for us now.
Okay.
Now what can I do.
Gonna have to open firefox right now seems or Firefox is open.
So what can I do.
Well can I just go to or terminal and it could be the IP address and then we will pass it there.
But in our case or we don't even need to copy the port address and pleasant day because as deferred
so a report is a deal.
So we just copy you just copy and then you pass it.
The first thing first.
Let's change the color.
Got you will five preferences and then we can change the color is black or white and black.
All right in closing Okay so you copied and then you question there.
So as always.
Different thing that you have to have in your mind is you have to say for Firefox.
Exactly according to the suite as default it your purpose it is sitting on as on 8 1880.
So you can set up your Firefox on roll call proxy.
Yeah.
OK.
So let's let's.
Let's type here.
Proxy server or something like that so that we can get into it.
OK.
We'll see.
And then we go here we set a manual port C
likewise and it's on AT&T.
Good good.
No proxy for so we don't need this stuff.
You just click on OK OK now you can launch your proxy community or or anything as if you have your C
professional.
It might be a better choice for us now.
So we were downgraded it so we are working on it in committee.
Okay so now always remember.
So on every page that we get after typing the IP address along with the port or E since we avoid it
we have already seen that the port is on 80 so we don't need it either anymore.
So you just type it there always trying to find some types and then click on view page source.
Yeah.
Okay in being there scroll down and try to find if you get some information I mean some encrypted file
or some encoded fight so we don't.
So let's go and let's click on another tab let's go on contact and in view page source so you can just
type review a reference source and then dot to point and then you type this IP address.
Oh OK.
Interesting.
We find a flag.
So it is on comment on Comment tag.
That means it would appear on the screen as displayed.
So we've gone obsolete.
And then we just copy and paste it there and decode as base 64.
OK.
This is the text that we have.
That's great.
So now what we have to do is scroll down again to find we if we have some more until this thing.
Let's see let's see.
Let's go.
Let's try this call.
It looks like again base64 but they just put it as a fire.
You see it start from here to these things.
Okay.
So it's copied and we're going to open up it takes it takes finding in passage there so that we have
a note on it so that we don't forget it in the next future of this video and Okay I tried to remember
it in the.
You see how they make it and how you have a full base 64 encoded text.
Now just copied and again go back to your worksheet you'll see.
Interesting.
Now you get a blue flag with an order BS encrypted text.
That's so crazy.
And then you just copy that dates again.
I see the DS boom.
I am.
I am administer it.
Oh okay.
Let's do a thing that's so great.
Yeah.
They decoded text that we have obtained.
I am a I destroyed or can be represented as a password as a user name or as any path I am in any directory
path.
So you're going to try your maximum ways to get it is this if it is that.
OK.
So first thing first we're going to try to go to two or Firefox so that we can try.
If E.D. is a directory path if not so we would keep not on it and then we will after we will have a
way to to know if it is a user name or if it is a password.
All right.
So so let's go.
Yeah.
You open up your Firefox.
I mean it's not.
Yep.
OK.
So this is the content that we get.
Absolutely.
Nice.
And then try to find always the view source code.
It couldn't begin to look into what it is you know villages.
What we would see is a user name like hard I would put in the password is the military key since we
get to the wrong page.
So we're going to trade things out.
Okay so let's try.
Let's try to intercept or grab suite so that you mean to say we do own.
All right.
And the mic is on Jesse and then tried to log in and get the intercept in the screen.
Okay.
So we have to username and password.
So we're going to try it.
And I clicked to send it to Twitter and then now you're going to try to bypass it and then try to set
it injection point footpath added as the injection point.
So now we have some least.
And then you're going to go and pass it there.
Of course everything is provided in their language.
So before that we wrote a video and then you could start after posting it there and then just wait take
a look on those ones.
What we get we get in valued use.
Care.
You can just stand still wait till the attack is ended.
Kim.
Yes.
You can just wait there.
Oh and just to just try one by one.
How do we get Yeah.
So good
that's China would it.
If only Georgia know what we have to do.
So we're going to try to go to a contact page then try to see if a place we can go up some information
there if there exists some information.
All right.
So now we can try to go there.
So.
Okay.
So at the bottom the list.
So we see some things until this thing like voyagers as the micros Becky and Elizabeth Stone.
So let's try all of them if we can get into it on purpose.
So we can try.
My columns to find okay we grab some confirmations or we bypass deep authentication again seeing that
BHP is your name on.
So let's go and copy the flag and and then.
So go up to worksheet and pass it there.
Continue to see ominous.
So grab the information.
So now widening the hearing so you can win cases in water station and you just copy.
Okay
in close those tabs it's needed anymore.
So I do create a new.
So now in three days here we are.
So as we see now we're going to try to intercept the kids here.
We are going to make this obscure map so that we can try to find if we can get in to this escort injection.
So now we can put it on.
Okay looking now we're going click when we switch icons so that we we first appeared and then so that
we can have the intersection between these web blank and birth suite.
All right.
So you have a gate.
Here we go again.
Now let's see the name is equal home.
So let's put it as the injection point.
OK.
And then you can mix feel changes is change changes that Jim
with now kind of as there was no I clicked then anywhere and then copy to find me to try it try to put
it in a square in something like to zero again and now go back to a terminal
so you would take the asteroid minus for the mob minus r s to lie to minus minus or risk equal to equality
live all equal five and then minus minus that amaze and then minus might have done in batch and tweet
is called ten and then two within a Let's go.
We are waiting.
Good.
Very good.
So.
OK.
Let's check.
What.
Get
as we can observe here.
So we get some information.
OK.
So.
So the information that we get we get it back.
Images in good GP so we copy it and then we will try to do it to Firefox and I need you behind the IP
address of the vulnerable machine and wouldn't be cited behind it.
I m f a re strudel so we get an image there.
Pumpkin.
That's nice.
All right
okay.
So do we.
We get it cute.
I'll quit.
So now you're going to go there to go on and then try to find how to decode it on Google.
Well okay.
So now.
Good.
So again to click on your first link this is the scene so it's gonna kill y.
Okay so now a we're going to upload it fine and then it will scan it and then gave us the words.
So go to your browser and watch it.
I mean literally directory and then you trade whiteboard in blood submitted Oh great.
So now we have something.
All right.
Word tags and possibly for last resort.
It's a look.
It looks like it base64 again because of the quote at the end you passed it down.
Or perhaps Brexit would be seven sixty four.
We have three and a retaliatory path so let's good.
But to a function then pass it behind the IMF administrator and then present would get in good form.
Okay.
That's great.
So we have to find a way to upload it peaceably with first share.
So let's go back to autonomy not and use it tool on it.
It's built on Kylie lending so much.
Which name is Waverly.
So we can find to find a back door and then try to explode grab information.
Okay.
So we're going to use it.
It's a steal.
BHP won't shut that similar Internet like connection.
It is an essential tool for replication past exploitation and others where it is.
It can be used as a backdoor as we said earlier.
All right.
So now we have a site
well after your version is winning so when I click on Boylston to begin the fight.
OK.
So now we can just click on wells online and then go go to a directory and then check it back.
So the one that you have created using the Waverly and uploaded there.
Okay.
Good good good.
So we have a post we get because here we have the content and he is the payload.
So let's click on forward to see what happens again.
You are invalid file type.
That means we have a kind of restriction filter there.
So we're gonna have a way to bypass this.
Let's check in again in Kenya.
Now type application XP should be fine.
Okay.
We have to change that in such a way and find the best way pass it.
Just try to create a security system.
China quoted in it.
Okay.
So go back to terminal and
say.
You changed it on me changed today the name as against by OK so now so what are we going to do.
So we're going to hide a key.
Eighty nine doubt.
So it will work.
It will work there because so we are going to tweak this system security.
Okay.
So again we can save it now and go back now to do a code page and then try it out in total bloated files
successfully.
So it's very good.
So now we bypass the system security a filter.
OK.
And I try to do this to the source page and then is do you have to get node 0 0 0 0 over the stream
which is in the contained
some food or OK.
So before going food.
Let's try to explain the reason behind sin why it's in the previous step.
So we had two converted to a gift by the reason behind this end is to be able to we did it the piece
should be fine.
I mean the extension.
Don't be happy.
So it is a peach we find.
So we had to eat it because we we were not able to eat it.
So that's why we converted it into a GIF file.
All right.
So this one this is what so we don't know.
But as a tactic.
So you will convert it a peach be fired into a GIF file so that you can with the data inside.
I mean the information.
So now you have if you have something you have extreme inside a command so you can try to put dot gift
behind it and then try to put it behind the I.P. address of the IMF and the slash I am if administrator
slash uploads and then the tags here that you get and then put DOD gif behind it and then you press
into.
So it will be a very good tactic a very good way so that we can go up much more information then after
we're going to go to all tell me now.
And then using Waverly again of course not only the password that we have created earlier in the previous
steps so that we can get much more information.
OK.
So let's get into it.
All right.
And so now you're going to use your terminal and then type Waverly tested to be and in the IP address
of course of the venerable machine and an IMF administrator.
So much applause up there.
Yes.
And then you copy and paste the tags the green tags there and along with the gift extension and then
you present it See okay you funds information.
Okay great.
Great though.
All right.
So now what are gonna do we are going to do it.
So we have it to try to find a password.
So the password which is chancy so that we have created it earlier and then we get into this shell game.
Is that what one did.
Good.
So now I can try to see you would find under the friends you can.
That's great.
You can use the card command so that we will ban it.
It's an order of business 64 and then just copy it and then go back to your Pepsi guys and then you
click on decode tabs and then pass it down to the insurers decoded as base 64 so that you can get the
brain takes different X's agent services.
Good.
Okay.
So now what I'm going I try to do
so supernatural is fine come in so that we fine so that we can switch for the screen age and OK.
So let's go and take filing time name agent and then they're renewal and imprisonment right.
And the new plan would just move a little meet.
Q Is the word realistic Were you waiting.
All right.
So yeah good.
All right.
So now we on our way out of the question into.
Okay.
So that's what we have that we could not try to find much more information about which services are
wanting there.
So.
Okay.
So what we are going to type now we are going to type net net start minus and and then you will question
in order so that you got the information game and then CHEERING Oh yeah my a it's this image well can
so we don't know this service.
So let's look at it as an ad type and seeing and ended it was all one and that forward you type it 7
7 8 8 and then you connect into that boat to try to access the binary system with porting agent okay.
So we did see that.
When we won in math.
OK.
So let's say something more.
It's gotten used to be called being so that's where each and I know is OK here we see it.
OK.
We have a file which go.
Which name used access code.
Let's use it.
And check it O K. we find something.
Look like put some poll numbers but we don't know.
We will see.
It's a kind of the road that you promised us to access that connection so that we get the access again.
But we need to do it.
And then suddenly you don't get it.
So you Max and so we will try to paint Max so on.
So we pull it back to no proxy or your system proxy does it matter.
So if it's not on local or boxes or do find that knack tool grab it or don't just download it and then
you put it in the direct path which we could actually do so after.
And then I get and then get on typing.
Plus they had their and then go to the downtown but
in religions.
So we really wanted along with those numbers that we have had earlier in the term we know what we thought
this without the comma.
Now this because when we use that point seven seven eight eight so we get those information.
Now let's try to verify if it's OK then it's in map I have in B and then see if it's an eight and the
AP of course up on the map.
See if it's a bang.
Okay great open.
So we saw it not me you would not care.
What do we find the state is open on gay
we will try to download it.
It's a very very good tool.
So go back to Firefox and then we will provide of course by the length of days.
And in the lead again and good luck to me out of off terms though again still of age and go get it.
Go on.
We're learning because I know
right.
So I'll go we have to try to answer the dependencies that if yours were not here already OK.
So if you go to the find which we have provided and then copy and paste this quote there and was in
order to discard it just totally start dependencies.
This one.
All right.
So.
Well okay so now you get a changed Directory OK.
Oh I get it.
So you're going to change in C make
C make.
And then to where they are and then present.
Disclosing it will take away okay.
So now we have to just try and try to make and we can store another in just it to delete
o get up to Dad we have it in into data.
I am I have and announced it has a lot to do with every show.
And then you will specify the location this location and then also within a specified D location so
that we can put it in case.
All right.
So the plays that we have put it in coordinates.
Okay.
So again I wouldn't give binary against the agent binary.
So I go back through to Ron it's the place that we have put in it.
Okay.
Tiberius Okay so now we have a lot of light on fires.
So now we're gonna use or deg and then you copy and paste this this name here when I wanted an engine.
It was in our game again.
Good.
Done again it has some information bytes onto in July.
Okay.
So now gradually we take this and have a bunch of new files that we have created as we learned okay
from the compiler which was running against the agent.
So now we're gonna take a log of these files.
All right so that's great.
So we're going to use cut just to read some of them to cut all to it or only less.
And and this can OK so now let's go that one.
Let's go to the functions so that we can check all the information let's go here and then let's analyze
it let's call it first
look for stroke.
Put with a sprained.
This one is a.
Gonna be depending on the fire that eggs that eggs a cocktail King.
So I think we have to compete we have to compete.
Let's think Daisy
and try to decode it into decimal because now it's an inside this model.
We can use.
Oh tell me not using equal so we can take a call to narrow assign volunteers as an input that exact
string there was an error so we have the decimal presentation of that string.
Like in so so far so good.
No no we are going to try to use it so that we'll find it in each and tidy game.
J try to make the agent executor will not think it is possible that I copy and paste that string phone
area and then pass the data.
Oh okay.
We have a new extraction plan to create a situation and so many 2 1 0 King.
We have to submit to implode.
So let's try the third option.
We read new king.
So he's going to try.
Slow now.
Let's try to send him a bunch of characters so that we see how it would away.
So we're going to try to send to 100 characters so that we might see how it would be we had.
Oh right.
So I was always like why don't you just copy it from the file.
Okay so we did good of a.
So now we're going to try to win it.
And then we went to board to see how do we and then yeah.
So you know so why did we have you assume influence in addition forward again.
So we're going to try to create a buffer overflow attack.
Oh all right.
No.
Yeah.
So we can try to warn it will be fought so that we fine the extension point of E A B so we will have
a box
type located then and type locate to create what's the number.
And then you just copy a fire and then put it right after you get it.
Hundred percent sure I'm going to meet
it.
Okay.
I know when I use it in your debugger Dee Dee Dee good care agent.
Now we have a tune up so I'm gonna want the binary there and then so we know that that idea or we need
to copy to just bury them and then we just copy this string of 200 it's called.
You can read and see that it wasn't a k.
Now we know devalue it.
It's easy will X O K.
Right.
So now when I try to find to use the pattern offset so that we can grab more information you can just
type it.
You say no.
Okay.
So not a is it.
Okay.
So look at our own.
You're going to try to offset it was an error.
And then we use the same thing and so I'll be my issue.
And then it would pass now.
So the 80 said I think I could calculate it but an offset.
Right.
So no.
All right.
He did so far so good.
Oh now just go to the file and then copy this comment and then I see that in your term you know what
this woman does.
So if it's going to create a horse they it MSA venom fight only for remakes of course and then he.
It is the IP address of your machine.
I mean what kind of news machine.
And then here you can type a name port number that you want but we have to know that when we are going
to use so net kind of comments or we have to as they say no and then minus F and write on and minus
B it's the bad character.
So X is he was he will usually continue it as the bad character and then he will a is it like for line
feed and then he will DFAT which is stir.
Okay.
Okay well.
And then so far so good.
So now what are we going to do.
So we are going to try to w Inder or it was never O K so good.
Okay.
Now what are we gonna do with the match way over the top.
To try and find if you know nobody who know a reality joint or card so that we can get into it by any
executive chef God so type of we don't mind as they age gender binary and then grab such search for
John Jay MP and grab it and then.
Okay listen you need to go solo.
All right okay.
So you're going to big this address and then we vs. Dallas is 80.
Forty eight.
Six six to eight.
So we have to a we have to reverse it.
Okay so let's let's show you how can you do it.
So now we have to go to Firefox.
Okay so then passed it down you will find this thing in 0 5 guys and then you just copy that.
So after you learn you you just create a new file.
It's up to you and you can use it.
You can create the file which we get it all or we leave bad key.
Now we need it one sixty eight.
So you have to place order by characters.
You have to leave them where you're when we get in.
I'm so vain on
we have some arguments we have some
Wendy
we have some s gone at least live in San kid.
This obviously isn't it.
Then it in politics again.
Send a motel room.
All right.
So we have to look.
Let's go.
Now in one night God because we have there we have put in or MSA van on.
So we have to win.
As I said earlier.
So you copy and evade just copy this book out
and just replace it.
I'll save it
okay.
So now we can try to open up a new terminal
case and now we're going to try and see at minus an MPP and an equal vote for eight.
Exactly.
The port number that we have.
Type in MSO failed on guys.
We have to be out of it then.
So we won the pilot on along with the IP address of that vulnerable Michigan run we didn't port that
we have found 7 7 8 8 8 Yeah.
So let's wasn't there to see
again.
So look it's working in Haiti.
OK.
So now we have a woodshed so we can just try entity wise share.
MICHAEL I got caught and sent there.
So you see we can go to the comment on it.
Oh we can try to go to Bourbon Street so it can be 60 from
gas so we can get privileges.
Oh yes good.
So that's it.
Guys what is video.
I really hope that this video was informed waiting for your call and then see you in the next video.
Thank you.
Bye.