Hey, Lou, everybody, welcome to my advanced ethical hacking, networking, penetration testing calls.
Are you in this video, we're going to continue with the application.
Quacking files.
So we are nowhere in this step for so you can just go and log into your account.
And then, Craig, this one coworking for and then you click on.
When is it downloaded?
So, as usual.
So the first thing first I'm gonna do and before going to windows if we need to.
So we got to open all aid up or just drag the application into a sixty 64 vision.
And they're now going to wait.
They need lots of chaos.
OK.
We'll will.
We think as default.
Oh, Gail, we are waiting to Neches.
Good.
All right, so now, as usual, we don't need this.
We don't need you at all disturbed.
So ladies, as default, so we click on View.
We click here for settings or for string's.
Oh, it okay.
So we can see that we have some strings and the application into the password to access password and
password as word.
And and so on and so on and so on.
So what we can do, we should try first to test what the application is containing to do so we can use
wine or we can go back to all Windows Machine and we can go to this one for hours and let's go to all
the password and then we'll double click on one.
So it says that intuitive password access password, a safe one.
So let's try it just was.
No, it's like the first password that we have tried and it's a blah, blah.
Nothing.
So we get to figure it out and then, OK, we attempt and it's left.
So we have some restrictions.
OK, so we know what we can do.
We can try to find some strings and then try to analyze the code to see what's going on there.
So we double click on this.
It Jones was here and the exact you saw we go back here and I had a view.
We see something like enter your password to access.
OK.
So now what we can do is we can try to.
Two, two was the code, two was the quote to see what's going on.
Okay, okay.
Good, good, good.
No case.
We can try to go down.
Two fights to find Extreme's.
OK, so first thing first, let's try to one it and we'll go to select debugger and then we choose the
local win.
Thirty two debugger.
OK.
And now if we want, we can click on OK?
But as as we have seen already, we have something here is a new password or king form and so on.
Okay, so we can just try not to click here to study or just go here on a debugger and step process.
So click even to start the process.
Oh, right.
So now it's the task.
What we can do?
We can check if we might introduce by doing so, we can try to.
To see what kind of unique quote or what kind of stuff, what kind of strings it is containing.
You have interviewed.
You have enjoyed doing passwd or.
Or.
And yeah.
So to do so we can just double click this.
And then.
So you will see.
You will see the stream.
And then you can scroll scores, score scores.
Go to see more stuff.
Okay.
So we double click it.
Now we owe them what you can do.
Let's analyze it what it says first, you have enjoyed doing password.
It is the push.
Bush dcx.
Okay, so the password to attempt live.
So let's go a little bit up to see.
As usual, if you want to see it as as as a graph, if you w space, you will get dequeue.
So we have shown you already how to bypass this law.
It's just by you, your mouse somewhere here.
If, for example, let's say and then you're going to try to to create a function.
So by equating a function and then you will be able to see the graph view model.
So but first thing first, let's try to put it here as.
Okay.
Now we're going to try to create a function.
So good function.
OK.
So therefore, we have we are here.
So we can just no space.
We get it.
Now what we can do.
You will.
Analyze the court and then to be sure that you know exactly where you are.
You can just try to put the good message in green and the one message in red, all the color you want
to push her.
So.
Let's try to go over to meet.
Let's go here.
Okay.
Let's analyze the code.
OK, this is the top.
It goes down and goes down and then so be it.
John, jump from greater quote to this in Jones where it jumps and dislocation and they'll therefore
we will not try would dislocation in Greenwall and Goulden takes green color.
All right.
So let's vote on.
It's a good one to see what it says.
Okay.
Job not equal to zero.
Where it goes, it goes to dislocation.
So we're gonna to try to put this down.
Green.
And then the red line, I tried to put it red or something like, OK, this is OK.
So let's go down again, again, again.
So it goes here.
The Greenport stay here because this function and then it jumps into this Vehbi AFB exemption.
If you just stay there and then you will see some some wooden cooking.
So now that we are here in Dysport, we are going to just to see what they function cause it's really
a H result checkbook's.
So it goes here.
We're going to try to put it in green again.
Green.
Okay.
So let's go.
Let's go.
Let's go down.
Own John Green or the core.
It does it.
Push it, push it this if it's one it push to offset forty seven five eight eight.
But we don't need this so far.
So what kind of message to get here if we have it.
It says that one patch when you have into the one password.
OK.
So let's ball.
It's all for attempt live.
We want we can colloid as well.
Let me go here for Foster.
Okay.
Oh, right.
Now, what we're going to do, we're going to try to put this in green.
Green color, color.
Okay.
And this one in green.
So.
Call.
Or go your mind.
And then after it jumps to this, what we can do?
We can just wait.
First Lady.
Green.
Okay, so Green will go to shoegaze for the art.
So now we can just bust space to go back to our topic.
So what we can try to do, we see that it has something that is when it's worn, you push something.
You have into it a one password one.
It's good.
We don't know.
But what we can do, we can just try to find out.
So let's go back to all screen search.
So we analyze the court again, as you can see that we have used Checkbook's.
So the work we did just do this for a check and then to see if something is there.
We analyze it.
Okay.
So the.
Enter a password.
What's this possibility?
Trust, proccess, password or give?
This is the message that we have got so far.
Let's go down.
Let's go down to see.
We feel okay.
So let's be was the quote again.
We have to find the place where jobs.
These twins are very important.
What was in this matter?
We have to find a way so that we understand what kind of steam sticks which are pushed to be displayed.
Stop creating the damn work.
Let's move it.
What's that smell?
Is it a collar function?
No, it's just malfunction.
Not just not just what?
It's a more function.
So nothing special yet.
It's a good bug.
It's go back before.
Again, nothing new.
O kay.
We are here.
So what does this code do?
Let's try to foresee it.
Jobs to location 40 C Zwar Tweedy's here.
You see.
Let's.
Oh.
That's before.
We call it dysfunction.
So let's also roll mouse and let it go down on the arms qualities correlate with return without any
kind of tax pushed or killed.
So let's.
Both.
Let's go over.
It's the.
So.
I went on a nice idea.
And I think.
My password.
So this is bad for all this.
We don't know it.
What always we have to put that jump into a knot function and be.
Oh, we can use the ways that any.
But let's try to find oil Destrehan strange sticks, which are involved in this application.
There was the first day.
Let's try to see what kind of things is that pushed of set light box.
We call this function after this we zoid.
Let's go.
Or.
All.
OK, so we are mean dislocation.
Here are some functions that push something and move and substract something from someone you start.
And count them on easy.
That's.
And then again, what we can see.
Let's good on what we can see that after every push and call.
So we call and that's function.
If you beat it.
As a result.
Check books.
Check a check.
O'Bagy check.
Object.
So use the dead so we can just get.
You can just.
Over.
I was there and then go down on the ground to see overseas, call this one dysfunction.
So what we can see this job greater or equal goes the dispatchers.
You see it because the dispatchers.
And then this address is the location.
So what it does is push BP on the idea X and then it moves in DBP on idiots and then you push that in
stages.
So and then eat at it.
Push enough, said that box.
It contains the strings inside.
And then nothing.
Call and B B is to compare.
So job grieder or equal.
This is very important too because it jumps to dispatchers and then these jurors get pushed with this
layered box.
So let's go there and try something like that, because since it is a string.
So we don't know what is it.
Their job is to go out and left.
We are going to wait.
Lay low.
What is this life box?
Let me see.
Like a box.
Let's check.
Huh?
When it came to pass or save for severe vision, one you stole password are below atmosphere Capell
eight.
So let's go back to AutoWeek just to to see if it would work.
We don't know if we are here or useful.
Well, we we are.
We are logging in.
Let's try to shoot to see.
Do wish.
If you ask me there.
No you're not.
So we've got our logging in one password
king.
So we are in.
Let me because this is good.
But you hear a politician cracking.
And yet you're here.
So the person was atmosphere feel right in it.
Again, this could be that way at most.
And then conjointly on the X men.
Normally, you can tell me it's joy.
You see, you work.
Congress 50 grand has been added, so it was very easy given it was stated like Mauduit at that no.
Let me try to see what kind of getting it was.
It was a moderate, but it was Soyuzes already.
Did we even need to make any change of strings?
We just tried to understand the court behind dissent because after doing so much on this address is
it says that jump, if greater or equal to blah, blah, blah.
To this one and then push the extra push it cones first and then after we push the next address, therefore
it causes this function h result check object and this function.
It jumps to this location.
This location is on location of 40 B, C, the D2.
And then what.
What the codes do it push.
It pushes this to text in to it but after push the idiots and then push this, force it into the slave
box.
So we just try it and then yeah.
It works.
So so far so good.
Now let's go to the next challenge.
We don't need this anymore.
We don't need the moms.
Cause it.
Yeah.
Oh.
Uh.
He divorced me.
So we can then come to.
She was in the.
It's something in, I would say, and in on those.
Okay, so Dutch authorities or whether you've been lost so good.
My open mind.
Open debate.
Okay, guys.
So we've, uh, sound on his computer, so we've got to see you at the next challenge.