OK, so let's look at this page.
All right, in everything, we have to check what information that we have.
So like cocaine and then I click on this beach as well so that we can view this rescored.
So squalled on.
If we win this thing in good data or in common, all that you can control.
If.
This.
You don't need to.
So let's still let it here and then we can way.
Click here to see the source code.
OK.
We have some information that he said that the range is our one one two hundred to two hundred thirty
and twenty two ninety one.
This is is that we get this information here.
The following page can only be seen.
You show IP range is the one that is outlawed.
So this information is very useful.
We let it here.
We might close this one for now.
All right.
So as you can see, we are not eligible to see this page because that disparity can only be seen by
people with IP address ranging from 200 to 230 or 22 to 91.
So what we're going to do to be a bore.
So it's just a matter of changing our IP address.
And one of the easiest way to do so is by changing your IP address via a proxy server or any kind of
proxy proxy plugin.
So we are going to install a new program.
So let's go to EXT.
It's then shown here and we go here.
So if you have a quorum, so you can just type the same as me.
You can just follow me step by step.
But if you have Firefox, it doesn't matter.
So I can just try typing proxy server for Firefox.
All right.
Thinks he could be in big clusters if this week in.
OK, so we to condense this one and then we need to come.
Extension.
So before that, we can try to to put it off and check all I.P. address first.
So let's go back here.
Extension.
Luke and Luke put it off first, and then it's visit this website.
What is my or is like these my apologies that come.
And so and at the very beginning, we have to have 200, as it was said in August.
So and now we can go back here.
And don't disturb.
And come here and put it on.
Now we can try to find a VPN proxy, which is ranging from 200.
Let's try to click on it or.
Like clean air.
You can pick here and then change location and try to go in Kennedy and not eat five one four nine.
You don't need it.
Oh, we can go.
It's a joke.
United State.
You can go step by step, very slow.
It's not a problem.
What me as I know.
Argentina might be a good one.
So I can click on Argentina.
And if he's granted so we can choose to see it from here.
June 29.
Okay, now listen.
This bridge.
Let's get right into it.
Inflation is.
Can now, so let's go to the next step.
Next.
Next up, we are.
OK.
Access denied.
You are not allowed to view this page for the following reason, and which is the reason, is that this
page can only be viewed using the operating system.
Hellbound hackers.
Yes.
All right.
So that means we don't have a way to access this siblings since then so we can get rid of this because
it's a very low restriction.
That is not so powerful in the program.
We weren't deprogramming, Leveritt.
They are two steps you can now twist that you can follow.
Either you go and download this operating system, which I don't encourage you to do.
And the second one is to fool the system, how you can do it first thing first as as usual.
So you just check to see if there are anything hidden in a comment that.
Into this.
So seepage code and therefore what?
Let me check it.
Oh, OK.
So nothing.
So therefore, what we're gonna do, we are going to use the same tool as we did earlier for the previews
for a previous lecture.
I think it's the basic tree.
Something like that.
So we're going to use a very well known tool, which is user agent.
So let's go back to oral extension so that we.
So that we activate the extension.
So here it is.
So quickly, let's move it a little bit, Don.
OK, so now we're activated.
Therefore, we're going to equate the exemption we're going to try to make in somehow that we have this
alerting system so we could we right click and then we copy this string and then we go Akao.
And okay.
We see we have called Internet Explorer Iwerks and sentimental.
So this is what we have created.
So now what we can do, we can just click on it and click on auctions.
And I can see her bone, bone or else and here so you pass this train and you pass it to you as well.
And then you just put flag one to it matter.
And then you add.
OK.
So now it has been added here.
So now what we can do.
We can go back here and go here again.
Click on it and try to get it.
Well, we have it.
So here it is.
And then we just click on it.
Now it's up here.
So now we have to click on it so that this system so that the water may get know about it.
So we click on it.
Now, let's wait a little bit.
Congratulations, Jose.
So we do use it, agent switcher, so we can do quite a lot of thing, because when you use this kind
of user agent, you fool, this is then of knowing they will sue.
I mean, do operating wedding system that you will use.
So that's how you can bypass an operating system, some some walls.
If you are going to try something and you don't want to do site databases, then get to know you.
So you can use user agent to bypass this so that they don't know which operating system you use it.
Okay.
So we wish this.
So let's close this up.
Let's go for the next one.
So we are going to click on 12:00.
Oh, right.
Okay, so let's click here.
Find a password for the protected folder and then access it.
So they protected further is this one.
Or it's clickable so we can right.
Click on it and open in a new page.
Or just try to do so.
Like, dad, we just.
We.
OK.
So come back.
OK.
It was the same.
So as usual, we can click and try to really source code.
Now, an emboldened gay and lesbian comeback.
You enjoy to view this source code as usual.
You know what you are trying to say.
You were trying to see some comment or some encrypted digs in a comment on such stuff like that.
Some P.H. becoming even if we can see some peace before.
But sometimes we might we might see some some critical meinzer or some type of comment.
So let's try again.
Nothing.
So what we can do is find a password for the protected for there so we can use durable to generate all
the directories, which is inside dist this path, so we can just copy it and try to use burp to find
it.
So obviously we will have we will find this kind of folder inside.
But the thing is that we be able to click onto it so we will not be able because it's protected.
So but never mind.
Let's go here and then we can type durable and we plus posted here and then this started.
Okay.
So what we can see that this page is natural as well as all the pages, because it's not only the page
is ending, isn't it?
And that's the PDB.
But it has something here that is important.
Challenge and DOT challenges that BHB.
What if we say that we are going to take protected the passage.
Just to see that.
Let me do it like that.
Protected and then hypocenter.
Okay, so we've got a new truck.
You own do h work, but we have remitted defiles you can include.
So keep trying.
All right.
So keep them trying so we could hear again and we will analyze the code.
So you will check the code first.
Okay.
Oh.
It seems that we have ordered these get before the name.
You OK?
What I did.
Good.
So let's come back here.
Meanwhile.
OK, so let's say that we don't want to type this after the.
We are going to David.
See this kind of thing.
It would get us blah blah.
OK.
They same the same thing here appears.
So let's try to put one.
Something like that.
Okay.
So what we can do, therefore, since we got a folder here.
Let's say that we wouldn't put it as challenge, we would put a folder named Protected An.
What can we do, we can try to see something first.
So.
Our task was about let's keep trying.
Let's check order begin.
We'll have phone, so fire this there.
So instead of waiting this, let me check again this beach to access.
H.T. excess.
Insists.
Let me check this in things they have in Beijing.
Equal age range that exists.
No kid might then be this.
Import protected slash 88 axis.
OK, so auto type, basic auto restricted.
Oh yeah.
Or to use a inch deep buzzword.
Let's call this Kopi and instead of access it here.
First presenter.
Good train ups see way to do.
OK.
So we have found something, guys.
This is how the queen Seans will appear.
So user and password diskless, what we can try it out.
But it seems to be encrypted, but never mind.
So we are going to try it out first if it's not encrypted.
If it is the plain text.
So.
So we will get it.
But if it is encrypted, we have to find a way to decrypt it.
OK.
So now what we're gonna do, we gonna just try to copy D.
D code because we don't know how it is encrypted or hacked.
So we are going to try to see what type of what type of of a hash it has been hashed.
So let's try to open a new terminal, my wide clicking here.
And so you will just copy that and make sure we copy.
And heal on colorant.
So we have a tool.
It is.
It comes with kind of uniquely these harshly hash identifiers so we can type attach a hash identifier,
90 percent earth.
Okay, so now you're going to pass the dash text, which you have compiled earlier and invested here.
So it gives us some probabilities that it has been in court and we'd dish D.
E s this hash looking.
And so now what we can do, we can just try try to do quite defile and then blast decent code.
I mean, dissin hatched takes incited so that we can try a brute force that that quote you should know
yet that we will use additional we attack because we will use Yunta, Reaper, John Doe, Reaper.
He's a very well known tool in cutting next.
I can say even it's the most well-known tool for apprentice testers when you are going to attack.
So when you are going to quack or to do quack's on password's so that you get the plane takes off of
some password's, it's very well known.
So what we can do so can just cross it.
And then now what we can do, we can create enough new takes fire so it'll be equated in a home fortress.
It doesn't matter.
So first thing for us, this charge is if we have some fire, it is already there.
Okay.
Okay, nothing.
Okay, so we can create a fire and bust this code there.
Let's say, John.
So great.
We can do is equal to plus there, but it doesn't matter.
So we can just copy and paste it here.
Control beat.
Okay.
And save.
Now we will use John.
We prove to attack this fire, to crack it because we don't know what kind of encrypted text it has.
We don't know how to.
What is the plane takes?
It has.
We are going to try to find it out.
So to do so, we are going to do two to.
John the Ripper.
He was John just this time.
And then we used the word lease there, Woodley's.
We are going to use a who is walk you.
You have it on your calendar needs.
What if not, we can just go and downloaded.
I will try to show you where it is located, mainly on New Jersey and Sheryl.
So who would lease that choice to go?
Would lease.
OK.
This one lucky if you have escaped.
So you can just wait.
Click and extract it here so that you have this fight.
So we have it here.
So now we can just try to type with lease or at least dash dash quigley's equal and a path share and
or at least we'd least.
Or at least.
Yeah.
And or on that dxp.
It's not enough.
So now that, you know, we find we are going to attack this with this fire is the John that we have
just created earlier.
Now we can just die G and Deb, what can we have it?
And then it was under your seat.
And it's pretty tough, Siggins.
We have the password encrypted.
So now we are going to see how we can use this umbrella to test it out.
First and first, I'm going to show you a trick on when you are using John.
And we don't do we were never quite the same password at it tries.
So if you try to put too click on our up and then you will see, OK.
I would try it again.
And then you just type press enter like that, you see.
You will get anywhere.
That's because, John, do we already save this file in Joe on folders.
John Folders.
You might get it.
Here it is.
As you want to get it here to home.
It's Akin then your pest control h to see all the heat and fires and look for John, something like
that.
OK.
So we have it here.
Double click it d file.
It is hatched there.
So let me show you.
You will see the hash that you see on Twitter.
So now let's just try to clear everything and save it.
OK, we say it now because everything again to come back here, we just missed our up and present.
You see.
Excellent.
And then you see some pop up was you.
That means the umbrella is no Ethan in this fight.
So that's how you might use gender.
OK, so let's go to Ortez because we have a print X password, so we're going to pass it here so that
we can get some new points.
All right.
OK.
So now let's open or Firefox.
Who was these studies was on?
Because we have too many applications which out.
And so let's close.
Call in the news and then let's we OpenNet let's call this a team like that.
And we really don't want to save any state from now.
All right.
And they've actually gone out with Bennett.
So let's we open it here.
No, it doesn't.
No, it.
Should.
We are in.
So.
It's about Firefox.
First thing first you've got to open it terminal because you need.
You need to go, go, go.
The danger of a war.
Stable.
No sandbox, no books wasn't.
So that we launch, we will go on.
Well, we stole.
So I'm gonna get to open warfare folks as well, because we need.
So let's try and do two reloaded because we are here.
I think this decision is expiratory.
Let's try.
OK.
So we are staying here.
That's good.
All right.
Can we just move for a shade to see?
OK, so we still here.
And so we we didn't log automatically.
So let's open Firefox.
And it's open for folks.
So let's check here.
Bone and bone.
So let's get it first so that we can proceed to the report.
Twelve.
So anything it's going to.
Plus.
OK.
So we got him.
Let's go to the challenge.
Both twins.
We double click and I click on it,
open it up.
So.
So let's check out.
OK, so the user was user and the password was kind of on board.
I remember on well, let's put it here for us so that we can just copy and Puzey Willa and.
Just got caught in it here.
Let's eat.
You okay?
Ethics or not, inside the system?
Now looking just shouldn't despite all
the signs you can see.
Guys, let me go here and try to finish this.
I have two seven five blind and lets me flush it, you see.
OK.
So Congress 30 point has been added.
Now we have to get to five points.
OK.
So let's proceed to the next step.
Then next challenge.
OK, so that's close Firefox.
You don't need it anymore.
If bugs and we needed so little, we'll need to get.
We don't need this one.
Just just try to test again.
Oh, Google comes in books and books and an umbrella.
Just got it.
Got busted here in something.
To hear how it goes on, you would think he would see it kind of so because we are we are.
You already beat this.
OK, so that's good.
These two Dysport know basic Web hacking, everything so long as George.
Now, we already see that there is a user name, which name is George.
So let's try to click here.
We have Frank.
We have Johnny.
We have now.
We have Jessica.
And now we have the logging system as the first thing, as the basic things.
What we have to do, we have Dwight Creek and producer Scott.
Now we want to analyze this code to find if you have some encrypted text in in some comment or so future
P code, even if we could use it, and that's it.
So often and so often you would probably you might see some some obscure comment.
So let's just try to score it on.
Let's try to score alone.
Yeah.
Swore to nothing, at least nothing.
System.
Let's go.
So you probably see nothing here.
So let's just Crozet, know what we are going to do.
We are going to try to click on log in to see something so you can log in.
You did not logging as a judge.
Please try and see.
So let's try Johnny.
It can.
You did not begin as a judge.
Please try again, because this system knows that we have to be low getting as a judge.
So let's go to the steps required.
Let's go to the required step now.
OK.
So now what we can do, we can just try to go low again as they show you or your.
And then we did not recognize Judge.
So you little white cleek and not on your page source anymore because we didn't find any encrypted text
or any useful information in some commented.
Oh yes.
So we I went to change some data by clicking on a suspect case or it's Troy to see or get it.
Is this Monde's or destroy the good one?
Frank, I'm Frank.
Let's try to go down.
We have to modify that Frank to George Gates.
So get it.
So this is shoosh it.
OK, so no, let's see.
So we have a value option, value, Frank.
Frank, Johnny, Johnny and nine.
I'm just excited to go.
Jessica DiCicco.
So now let's try to change, defining or destroy to change or not.
So it doesn't matter.
Well, Craig and is so we can just edit as we roots.
Okay, so George G.
G.
E.
Or g.P we thought.
Okay, without s and then we can try to change this and not to judge again.
All right.
OK.
So who is Georgie?
George.
So let's try.
Let's try to Doug here, here, like that case and we on another.
Now, I know yours, George.
OK, so now let's try to on Log-in, because that is not there anymore.
So we can you.
Congratulations.
Anything 10 points has been added.
OK, so let's close this now again.
These things and we're wondering next step forward in the next challenge.
So Kim Beazley, challenge 14, I mean, logging password summit.
We can see that a little bit.
Probably that there was an admin.
So but we don't know yet.
It's just not going I think is is below.
And so it's as within as the basic things.
We are just going to page six or so before analysing this code.
Let's try to see if this page is we'll know it all the steroid injection.
So let's take a look here.
We are going to put it all in the middle of the courts so we type on space.
First east now or in the middle.
And is like that.
So it's Munish, one good one.
So destroyed.
So meant.
So we've got to be that doing logging, because if we are refresh.
Some some wine.
So we get Mawgoud.
So
Saloon's.
OK, so where have we been?
14.
So this book.
And MLK.
Well, listen, we still made it up.
To see inquired pass would try again.
So it's kind of, you know, what a disgruntled Egyptian soldier, what we can do, we can just drive
to go and analyze this code to see if we have so much encoded, encrypted or.
Ticks, which are in a comment.
So as a border wall, it's called out on it, which if it means.
Check.
New password.
I mean, the text for the new password.
So let's just copy this.
Plus, stayed behind.
Behind this, we were see your case.
This is the path.
So we need the need to text admin, the DST.
I mean, the extra let's check to see.
OK, this seems to be like a password.
Probably it's encrypted, but we don't know.
So let's try to copy it.
And we would just try it out here.
Let's go over here.
So.
And.
We are just testing you guys.
So, OK, folks are on 14 more now.
So we own 14.
Yeah, so let's try to bust the bus would do.
Guste.
And submit.
Congress, so that past quarter was not even encrypted.
Guys, no hashed.
So we get this point.
OK, so let's go to the next challenge.
We will close this.
We don't need this anymore this anymore.
So we are going to do fifteen by Drake can.
Okay, so let's go here again to analyze it before.
Since this is a one freedom, we will not try.
This is cruel and tried to submit to see if we will find something good puzzle.
Please try again.
OK, I know.
Well, so what we have as mission is that we have to find a secret file using a common technique to
find heat in territories as usual, as usual in the first part of this advance.
If you a hockey network and penetration testing, we will used so many tools so that we can get some
deltoids fired by.
And Muppet or by Durbin need it or by using WP scan.
So to do so, Aegeus gonna try to copy this path here.
Copy.
Control.
See.
And then here we are going to open the new terminal.
We want a durable display so that we find more directories and sayadi.
So we Dobek.
And then we just control shift and we pass the deal.
And then so we are waiting for this can be complete.
Meanwhile, we can go here and analyze this source code.
Let's find some.
Which is.
Commented.
Oh!
And did so, I don't know.
So let's try to check it out.
In that time.
None of this law would admit we have a green comment.
Try Googling, we find that is used to block Google.
But Paul Doyce thing, it's well, it's a school.
Districts will need to Google it as it sees the.
Let be complete controversy and let's go here.
That school is going to score and score.
Quite nothing as important.
OK.
So we don't need this anymore.
Can just cause it needs to move.
Right.
Let's try to see.
It's still scanning.
So let's just wait a little bit.
Mommy needs and we own em.
So until it is too Xena's or was it.
We got it right.
So I wouldn't do it.
Well, a scan is complete.
So let's go back and check.
There were toys that we have read.
So we have Dutch H.T. access to password care, ABC in.
Oh, right.
So we have this we can just White Creek and copy this thing.
Let's go.
Jamal.
OK, so let's come back.
And so we're gonna to just open a new tab in buses there or just control C Control Week.
We want to see this fight.
Hayden takes these to ABC Heat Index.
So what we can do?
First thing first, we're going to say what is user, what he's what ATX the.
OK.
So, yeah.
OK, so let's talk a little bit about the war, but that the exiting but is a war both the defendant
will put is a text file.
Webmaster is quick to instruct Web warbirds, typically search engine about how to point to pages on
the Web site.
So there will be a text file.
It is a part of the war.
But exclusion protocol are epee.
A group of web standards that we do late.
How war books, Choiseul, the web access and indexed content search of the content up to users.
The R.
The R e p.
I mean Dhoom.
The Walbert Exclusion Protocol also includes some directives like Mutawa boards as well as pages, subdirectories
and so forth.
So in practice, that fire indicate where to set any user agenda or chording software can or cannot
call part of a Web site.
These call instructions are specified by disallowing or allowing the behavior of certain user agent.
Okay, so how can we understand how it how how it works, guys?
So first thing first, they has to be that you've see the steak that you see after to use as agent means
that there will board.
That 60 file applies to all web warbirds that visit the site and the slash after dessert, all terrasse
the slash after Desilu.
ABC tells us they will, but to not visit any page on that site of that site.
So you might be wondering why anyone would want to stop Web wabbits from visiting with these sites.
After all, one of the major goals of C, E or is to get search engines to call your Web site easily
so that they can increase your thinking.
This is where the secret of the of this s or has come in.
You probably have a lot of pages on your site wide.
Even if you don't think you do.
But just go and check.
You might be surprised if a search engine calls your your site, it it will call every single page of
your Web site.
And if you have a lot of pages, it will take this search engine boat a way to quote them.
So which can have negative effects on your thinking.
So that's because Google bought Google search engine but has a, quote, budget.
So, yeah, this breaks down into two positive.
First is called a limit.
Limit user.
How is.
Okay, let's give some example of how it works.
Search engines have two main jobs.
The first one is to quote the Web site to discover content.
The second job is indexing the content so that it can be served up to searchers who are looking for
information to call site search engine.
Photo links to get from one side to another were to make a recording.
Of course, many billions of links and Web sites.
Scrolling behavior is sometimes known as Spide doing after waving at a Web site.
But be forced by doing it.
The search caller will look for a will, but the extra file, if it finds one, the caller will read
that file first before continuing to the page.
This is very important, guys, because there will.
But the 65 contains information about how the search engine should work, should work or should should
call the information file and there will instruct Frood or caller action on this particular Web site,
if they will.
But the 60 file, it does not contain any directives that DSL or a user agent's activities are.
If we decide does it have what it takes the 60 file, it will proceed to court order.
Information on this site.
Yeah, so that's how it looks.
So let's.
Let's come back to our topic.
OKing.
So what we have to do, we have to just copy this.
Path.
And we just copy control, see?
And then we go plasty the.
Behind this.
So this chick it.
Oh, kill, we're doing it.
You have phoned if the heat and fire will burst.
That takes the Yeah.
So we did it finally.
Just which you missed.
So we find it here first.
OK.
So.
Yeah.
And guess what?
What a challenge is heaven bound.
Okay.
So we are willing to compete again.
Control or just or we can copy and go back here.
And let's use these things and just.
Bus and submit.
Congrats.
Fifteen point quin's has been added.
All right, good.
So now let's go to the next challenge.
So, yeah.
16.
Basic Challenge 16.
So this log is vulnerable to Escuela injection.
So guess what if it if it if that is OK.
So we are just going to type this.
But in order for you guys to to to remember this, this injection always put the disposal between the
space and between a single court to do so.
We are going to use every thing and it's as always.
And we are going to do like that.
Two single quotes and then we put one and a single court space.
Now all in space.
Now another single court.
And now we put one joule equal to one, equal one.
And then that's it.
So the two outsiders single court.
So we don't need them anymore.
So we use.
And then all we delete.
So now we can just click on submit.
So let's see.
In a quick escrowed injection, please try again.
OK, so now we are going to try it is clear injection because this first was not working.
And then it seems to us that this this challenge is vulnerable to Escadrille injection.
So we are going to just try to enter some characters or some other commands so that we made it work.
But first thing first, so that we don't forget, we are going to view page source.
Well, kid.
Let's call it.
I want to find out if there are some informations, some information, some hidden data, which.
Which are in this page as we draw.
So let's just cordon down.
At the moment.
Okay, so you're.
All right.
So nothing is that.
So you just cross it.
Now, what we can do, sometimes spaces might be free trade.
So we have to find a way to buy plastic.
So instead of typing this comment.
This comment.
This one.
So we're going to try to avoid the space between.
So to avoid the space, we are all we.
We have to just type dash, star, star, dash.
And so now instead of this, we a dush and star star dush.
And again you can do the same.
Stop motion star.
And what we can do.
Okay.
So now it's okay.
And then we can try to.
We can just copy it so that we.
We just was.
Control a copy because it's a matter.
This disk.
This training, guys, is testing is been testing.
So that means you have to just test it.
So we could beat you by X then?
Wouldn't need.
And after a while.
So we tried to see if we can find it.
So nothing.
So now let's try to make it in a secure in a secure command dash dash.
And let's now click on Submit.
Congrats, you see the teen's dad.
It is not over.
It is valuable to ask for an injection, but the single is Cuil injection must be bypassed the the space,
because when you use this space inside, you are inside your comment.
It is it.
The space gets full to it.
So it prevents you from its form from getting into the system.
Therefore, you have to find a way to avoid the space.
The way to avoid this space is using Dush.
I mean slash star.
Star.
Slash, and then it's not enough, because when we try to test it, it was not working.
So we had to put a comment in our school comment.
So we used dash dash after that space, that dash, and then we present.
Now we get it into the system.
So that's how you make it go.
So you you have to know not all the steps, but you have it's it's just a matter of training, sort
of more you know, the more chance you have to get access into a vulnerable page, go out.
So let's just close it now and let's go to the next step.
We have been in 16.
I don't remember every.
We try to click on both.
I'm a member.
Well, I've been.
OK.
So we have been this hill.
OK.