Hello, everybody, welcome to my advanced ethical hacking, networking, penetration testing.
Calls.
This calaboose will cover the exploitation of this syllables.
We'll cover the D.
S exploitation attack.
How we can make the attacks or what it is the or is, as we have said in the previous video of the DHC
starvation attack.
The deal is that that is the denial of service attack.
So we will try to use two methods to techniques so that we can proceed to this attack.
But of course, there are tons of ways how you can make this attack.
For example, some people which are used when those they might use some sort of record like Loeak software
and some people who are using Linux or Mugga version so they can use a whole week softer it ad or E
L or I see an H or a C software.
But here in this tutorial.
So we are going to use tools in Caledonius Linux, which is really one of them is very well known,
which is meant to explode.
So we will use Mata's blood to make the process work.
But since it's a wheel attack that can heat your computer or that can make your computer be busy.
You have to be aware that you should trade on a computer that you are owning or on the computer that
you have access you have right to do so.
So that's why in all and this practical puzzle, we will try to attack, not to attack.
We would try to take all computer to be the victim computer market.
And then the second tool that we are going to use.
We are going to use H being a HP Htwe software to eat.
It's a built in software.
Eat in callaloo, next machine.
So by doing so, you can frood that computer or that Web site by floating it.
That means you send the weakest.
And you send packets to him or two to it over and over.
That means you eat it.
It will getting slower and slower.
And so it will heat it up because it will make it very busy, because since you make it as a silicone.
If you don't stop it from your attacker machine, the process will be still a warning on the victim
sites.
OK, so let's get into it.
So to begin, we click here to.
We start locally machine.
It will save to soul.
Yeah.
Now, so we have to start with Despereaux.
But before that, we can try to find a peek what or which IP addresses are in or environement.
You can try to meet that, as we have shown you many times.
And on previous course, part one, we can use network and network discourse so that we discover IP
addresses our analysts all we can try to use and map as well to detect them are we can use a map.
OK.
Let me open a terminal for you.
So on.
IT media, we've been doing it for you.
We can try to use it so you can just minimize this or make it clear.
And we don't need to open many dominoes.
All right.
So to do so, we try we take first and foremost a country.
So let's try to here so that we don't make it really.
With Heidi, with many comments.
OK.
So this is the IP address of Carrie mushiness, so that's good.
Know we can try to take Ned Discover.
And then what we need or interface based is E.T. or it is what I mean.
So we take Ned to score and pitstop minus I and a D.
Oh this is our antifreeze.
And then prisoner.
So it's working.
Okay.
OK, this is the Baz.
This machine warns this machine represents a loud welding machine so we can try to just press control,
see if we want or if if we do what, you can just let it win.
So the second step that you can use to get your your your devices, which are natural devices, devices
which are warning in your network so you can try and map and map and then by train a map you can type
minus Assen.
And then as mean as can network.
All right.
So.
And the IP address of the victim, the IP address of your WALDING machine.
So that all that welding machine for us is is the seed one one.
So this is it.
So we type it
one one and slash twenty four.
The reason that we put 24 is that as well, everything was very well explained in the previous course,
but we will try to explain it.
So if you have your net mask 255, 255, 255 and zero like that, that means it is whingeing.
That means it is when you add on on on 24.
So some some of them is on 16 and 32 or something like that.
But he will always is on 24.
So it was under.
So now we are trying to take all or all the pieces, which are all the devices we shot in our environment.
So let's try this.
So this is this micro address.
We have it.
So this is Android.
Okay, so you don't know it.
Probably one of my friends.
Okay.
This one is our MacBook.
If you want, you can verify it here by typing IEF config different Kreig.
So we verify it where you.
Let's check in on Lou.
Excellent.
So this is it, so you can see it here.
So one.
Two.
Twenty seven.
All right.
So let's check the grounds of disease.
One computer.
I know it.
And it's going to do it again, I know it.
And is computer a know it?
And this computer is all Caleigh machine.
Okay, so therefore we have some devices which are connected in our environment.
Now, what we can do, we will pick one as being a victim, mushing so that we can proceed.
So what we are going to do, we choose the one that belongs to us.
So at this one.
So I, I will I would choose it as the victim.
Okay.
So now what we can do.
I can open my my desperate and so to do so I await cake and open a new terminal.
It's Goodhue.
So I type MSF consult and I present in our.
So let's wait a little bit.
Let's win it.
Let's let's wait to meet up deal.
We're desperate.
Get road.
Perfect.
Excellent.
It's here now.
Okay, so now we will try to enter the payload, which are which is needed so that we can proceed to
the attack.
But first thing first, let me minimize these.
These.
Don't we know so that we don't have a bunch of green dicks in front of us?
All right.
So wait here.
What are you going to do?
There is a very well-known payload in me.
And make us but we have a boenish of export.
You see one thousand nine hundred fifty seven.
So and then we have many kind of auxiliaries and it's 560 tall payloads.
You can use it in midair, but you can guide do not everything.
Of course not.
But many, many, many things so that we can exploit some system or get access to to something, you
know, everything.
It's just a matter of trying.
And if you don't have something in mind, you can just try to use let's say I was a because I don't
know what to choose.
And then I paystub and then it gives me something if I don't know what to choose again, I think with
time and it will give me many possibilities or one in some stuff like that.
So if I want to see which options to use or if I will, if I want to do.
If I want to check which kind of options I want to use or I can twist it.
Yes.
And by pressing it, I will get access to it.
So I would find all the possibilities which I need.
OK.
But for the sake of the video, you are just to choose n.
And it was Endor.
OK.
So now what I can do.
So I will use a dose attack and D or s that I can do now of terrorist attack by by knowing it.
I can just try to.
I can just try typing D.
Or.
And placing a tab.
So it does me.
One hundred eight was media again.
W I Enquist know.
Okay.
What.
I know what I'm doing so I can just try to type s.
I just wanted to show you.
So what you can do if you don't know exactly what to type.
So and then with Slash and then DCP.
So we.
And then we want to use a flawed system so that we can make a descending packet, be it as a silko.
So by doing so, if you want, you can start again, tab.
And then you will have the possibilities.
We have seen flawed.
We have Juna's DCP up.
And in Claymore Dos.
So what we want.
It's the this one.
So we type scene.
And then B style.
And then was under.
Now we are into a terminal.
We can type options to see, to see the default option, to see the default options that we have in
to the.
Into this SIM fluid terminal illness or we type show options and inquisitor.
So we have an airport which which is on ADT.
And then we have the number of byte to capture.
Sixty five thousand.
And five to five hundred.
And we have a time mode which is said.
This is the number of Siggins.
To wait for a room for new data.
Okay.
So we don't have o o o l worst yet.
I mean the target mushing did target a host of the IP address or the Web site of the victim.
Therefore, since we said that we are going to try this Dorst on our own device, we will choose the
number seven one.
Oh.
Twenty seven.
So let's check it.
Oh, is it OK?
This one so we can copy.
And then when we said the Yoho's all right.
So let's not type sit.
And l was an estab.
Now.
And we just eat it here as being the victim was and was under.
But before Taiping explode a one.
In your terminal, you have to matu that India victim sides.
I mean, on the victim computer, deport 18 is append because as when you type it and when you type
actual options into a terminal.
So you see the port is on ADT as a default.
So you got to make sure that it's opened on the victim matching because sometimes if the port is not
open and then the attack might not work.
So as default, it takes that port.
So but if you want, you can send your packets to some other ports as well to check which ports are
opened.
You can type into your terminal or you just open a new terminal.
And in Taib and map as usual and map I fan be one I fin six five five three five.
And then you type a D as a report and you type, you type the victim mashi IP address.
But sometimes when you type the port, no, it might not get a result into a terminal.
So you got to we move that port 80 and just percent are like your type and map minus B one iPhone six
five five to five and you type the IP address of the target machine and then you present.
So that's how it will work.
Then choose a TCAP port which is open on which you can send those packets if all port.
Are closed, therefore, as I said earlier, the attack might not work, since it's a house as aim to
put the device down.
Let me just show you the comment gears, guess I can minimize this or just again, what I got.
Doo doo doo.
OK.
Enough.
All right.
So let me open a new terminal.
OK.
So the comment is that.
So before I can try to find one IP address or use it month by month, I was scanned at work.
So no.
One six eight one one one one case slash twenty.
And I was in her.
OK.
And I will take one of them, I did this one, I copy it.
So now what I can do.
Okay, now I got to find oil report with which are opened and the computer that I've been chosen so
that it is my target machine.
So let me minimize this suburb street.
All right.
So now I can just type two.
Try to type on.
And then it was under.
So we are going to just wait it in a tweet.
Here we algate, here, we also import 80 is open, deport one three, nine is open for four five.
Again open and five nine zero zero hours open.
So this is how we make it.
And then now we're going to switch to the previous version of Al-Qadi Machine.
OK, so now let's close it like that.
OK.
Now, we had it's as very well to settle.
We can type again, show options and then present.
OK.
It's hail.
Now it's time to launch the attack so that we make DVC team computer busy.
All right.
So since we are here, we can just try to tie monitors so that we monitor the system.
So let's make it here.
That so that you can see and I can check here.
We need this C.P.U, you see, or which books Veum is on Sibiu 20 against anyone.
So it's changed over again and again.
Now you see it's Joice on or on tree.
And then here on 50.
Because on 50.
Because it's not OK.
But the whole system is Seek's bread pudding.
Again, just a little bit down.
Just a little bit of it.
It's OK because the system is relaxed.
All right.
So now let's let's let's longe the exploitation so that we see how it will be a game.
A we type on one end up with Ascender or if we want we can type explode.
It doesn't matter.
So they explode in the present.
But before that, DPD, we have four computer guys.
And this demonstration is that not only deerhurst IP address of the Mac book gets heated up, but also
the virtual box consumes or C.P.U.
I mean, the curry machine, while we are using this comment to to make the deal or attack and then
or since we are on VHI box, then there are four or C.P.U is working.
And for this attack, Lagu and for the victim and and for the attacker.
So that's why that's the ways, reason this own way to get increased faster and faster.
Because not only we are acting, not only we are acting as the victim, but we are acting as well as
the attacker.
So but, um.
All right.
I don't know where you can perform a U.S. attack is underway or is is under wireless.
I mean, Wi-Fi, which that target device is thing.
So let's say that you want to attack the victim through these Wi-Fi.
But you will attack that a.
B.
S.
S a.
D.
So you are not going to attack.
Exactly, Dick.
The device, but you're going to attack the Wi-Fi and therefore that device will be affected by that
attack.
So using a play at that is a very well known tools so that we can attack in, sends a load of first
packet.
I mean, fik packets to to that particular wireless.
Yes, it is.
So your attacker machinea would therefore needs to have M one n g.
And we don't.
And start.
Therefore the attack is made to the wireless and not to that device.
As I as I've just said.
So since it won't be able to connect to the Internet.
And then the packets we are sending to that particular SSA.
So we just call it kind of the attack.
Yeah.
We can this now.
Endure and attack is one.
And then we get everything.
So let's check, you see.
You see.
And then you this is the attacker.
Let's wait, let's wait, let's wait.
You see the side of this system.
There you see one good 40, 45, 50.
Now you've seen this system.
It here.
Now, it's OK.
You can see our computer now.
Relax, relax.
You know, that's how we can make a deal.
I attached to a computer.
So it's, you know, it's a very, very, very dangerous and very easy because.
OK, now let's go to the phase two, phase two, that we will not you was desperate to do so.
OK, so we can leave the middle spot.
Let's kill him first.
And now we can try to exhibit Z, this terminal.
Okay.
We can still keep our arsenal.
We can just, again, just exhausted us.
So if his tool is the tool that is built in in Cali machine, it isn't.
Its name is HPN to what we can do with it.
So little bit before me.
Let me explain you how it works.
So let me check here.
OK.
Let's check here.
This anymore because we got the idea just that we want.
So let click here.
OK, so I can be for that.
I can show something.
I can just see it.
OK.
Oh ok.
OK, let's be here.
I will explain how this week different means that it keeps casting that victim machine messages and
never shows the responses.
Therefore it would make that machine be really very, very busy.
According to let's say that you open this terminal and you open civil dominoes with decimal comment
like that and then you press enter into India into that means you'll make a multiple request to that
evictee maybe.
This is what we call a distribution denial of service attack.
Yeah.
So it will make it very busy.
If you look at the process, all of the mushing here.
So you can see the difference.
Now, this system will LAX, as you can see.
You see, it's very Relix.
Let's see this chick V12 box.
It's on 18.
And the system is on nine six.
It's good.
Just slow down.
We're very, very, very good.
Now it's just 534.
All right.
So if you can see that deposits or might change from four person to you, then 85 percent.
So depending on how powerful is your Cali 80 nukes attack machine, I mean.
So how much possible the Obama.
Eight is?
It has it can lead the victims p.c to have a high percent of C.P.U tab and test manager or in Moniteau
in Mac book.
So imagine you want this SIM card above, as we have said earlier and to you for five Caleigh P.C. attackers
to do that same target machine IP.
So it could lead that C.P.U to even one hundred or one hundred five one.
We do one hundred twenty person hands.
It is what we call the deep or at attack.
So how we can known how we can fight against this attack or we'll be discoursed in the next video.
Well, before that, let's go to the second steps.
OK, this comment.
Let me try it again so we can type age being and you can just start to check it and then flowed if you
want, you can just press type minus eight.
So to see the options that you can use or for those also will choose the fluid options, options or
week type again, fluid F and estab and the IP address of the victim machine.
It was on twenty seven.
So David is six, eight and one twenty seven and presenter by praising endue you can.
You can follow how the process is going.
So okay now you see we are on four percent only.
And then of each of our blogs smushing is on 22, sometimes in decree's.
So let's just put in our present.
So we will see.
You see this is them already.
Forty seven.
In this one already.
100 in many things.
So let's just wait and see if we will see the sound of our computer, how it will hit.
Si, si.
So let's wait a little bit since then.
Fifty six.
So imagine again, guys, if you have a lot of terminologies like that against this same IP address.
Oh, it's a Beeley.
And, you know, that's catastrophic.
So let's wait and it'll be more.
You see the stone of a computer and then it will get increased.
More, more, more.
Wait.
Very violent or aggressive someone you know, which is not good for alarm memo.
You just.
What do you think of this video?
Oh, it doesn't matter.
So you're just one, did you.
To see how the process is doing.
You see, now it's horrible.
It's much more horrible.
Okay.
So I'm not going to get my computer.
I still need it.
So let's let's cancel the process by acquiescing comment.
See, so we could give you incumbency.
And check this.
You see you see the number in the misnomer.
OK.
No post fantasy request.
OK.
Now let's just wait a few seconds to see.
And let's wait to see you've just gone off of a computer.
We'll be decreased.
You see?
So funny you say, so fun getting.
You think that this video was fairly informative?
OK.
And then we are looking forward to seeing you in the next video.
Thank you.
Okay.
Okay, so now we can close everything, because all Mushie now is he's relaxed now, so we can just
try to close them.
Okay, so you're not in this anymore.