Hello, everybody, welcome to my advanced ethical hacking, networking, penetration testing, costing.
OK, so now let's try to see how it will be playing.
One of which is try to open, it cannot be opened so we can close this area.
For example, let's say that we're going to try this one.
OK, so.
When I do a little bit and see how it would be.
Let's wait till the roads we're going to try to close this.
OK, we said, I don't hear, so that means he gets loads.
OK, so now what we can do, as usual, is try to close the Stobbs.
We don't need them at all until we go to the debugger and start debugging and local 32.
Right.
So now we can go Hillview as go on.
Go, go, go, go, go, go.
We don't negotiate.
We need strings.
Perfect.
As you can see, if we double check this, it will drive to see exactly in the path where the function
is called.
OK, so if we use the cards so we may see many things, we knew that you see the screen exactly the
way it is when we increase it for you.
OK, so here so let's try to see what kind of stuff it has there.
As you can see, we see some decks, but before that, we can try to go up a little bit and OK, nothing.
So it's not here.
So this is where the cord starts, guys.
So now what we can do, we can try to to use the cord, how it works and then try to see if we can do
or if we can make some modifications.
So this is C, C, K decks and so on and so on and so on.
But I will I will encourage you guys to always try to go to the graphical view, because graphical view
is the key of understanding where exactly you will message go and where exactly the congratulations
may go.
So what we can do, we can try to go first into the graphical view model.
To do so.
You wind up with space.
So let's just waste space in your words occurred, OK?
We see anywhere.
We see that Ayda fails to display the program and Grafman.
So we know we already know that in the previous in the previous course how we can solve this problem.
So we click a space again and then now here we put or cursor and then we click and then we quispe to
enter a function to create a function.
I mean or we can just double click and choose this one.
So as you can see, if you Quispe it will work.
So let me just do it for you.
Let me go here again.
So with B B and then we here get we create a function and therefore we can just press again boom.
So we get there.
OK, now we can analyze the code and then check how things are.
Exactly.
So let's come here and let's check.
Let's check out.
Okay.
Excellent.
So far we are going to check the strings called the strings because I mean, okay, so after so much
of functions, it say that if you jump in greater or equal and then jump to this location, therefore
it avoids this plot.
This node, I mean, and then it's due to a hill because the jump is greater or equal, then then then
it jumps into this.
What we see here, we see another tax.
That tax is gas, which is which was pushed.
OK, so let's go down.
But down below.
Down below.
Again, again, again.
So we can hear what we can see if Jom is equal to zero it jumps here.
The green text for us and the text guys means a lot bigger index jump into what they could say to him.
For example here when when you won this application, the application will not go to do it to Dysport.
It will go directly to Despard.
And then and then therefore you will not be able to quirked because you will always see something like
keep going.
Well done for getting this far, you know, and stuff like that.
And so on and so on and so on.
Now we all we already have a clue on how we can make it before we should find a way to to encode this
jump, to discard this function, to come here and then it should come here.
So let's check Downbelow again.
So we're going to come, come, come, come, come, come, come.
And then this is a blue text.
So the blue text means that.
So it is like no more.
And the node that it will jump the the word node, which has the word text, it will jump into that
same node as well.
All right, so as we see so this is a blues, this is a job, they both jump over here, as you can
see, jump here.
If everything if it's not zero, let's see if we will change it.
If it's not zero, it will go to to this note and go down.
Go down, down, down, down, down, down, go down and jump here.
So this is the place where both will jump.
What if it is war?
Therefore, it will not go to this node.
It will go to that node, to this node, the outside, and then therefore you will not be able to find
the password inside.
So let's check again.
So there are no lines, no red lines, no green light anymore.
So we already see what we can do.
Therefore, we can just try to change it, to change it, to change detection, guys, to do so.
What we can do, we let's go here.
We can try to modify it.
So we go here, over here, we click on edit and which was bad batch program.
And then we choose, we choose to assemble the assembled program in that we will make our own modifications
into the code.
Therefore we click here and instead of typing jump zero, we type if not Zuhal and we click over here.
So in the console now we're going to try to to apply this change.
To do so, we can do the same thing and apply patches to file.
OK, now we can say, OK, it's OK.
Yes.
Or if we want we can just modify it, but we will just leave it as it is.
So let's see.
We can go on.
OK.
OK, now we try to find a way to send this application, this application aid to all windows.
So let's let's open this and try to go here to this file or let's go let me go to this way to this application
first and file that a all and present it.
So going to upload it there and go to your Windows machine and download it?
Well, we can upload.
So where was it or where was it it was.
Wait a minute, wait a minute, wait a minute.
We get to find a path.
Come on, man.
It was on downward there.
OK, so I applaud
eight eight eight eight.
This one.
We'll put it here.
OK, now we're going to go to your Windows machine and go to this or weblink.
So we come here to open a Windows machine, come here so we can we can just put it a little bit better
like this now.
Okay.
So come here and then we start.
OK, so let's try pressing Linda.
You see, OK, that means we see something, you guys, not only we see that password bugs or into blah,
blah, blah, and you did not enter the password in time.
Let's just click it again and try again.
OK, it is something that means probably the one again, they are once again or once again and a half
or two is again, so that we have to manipulate, we have to bypass.
Let's try to quickly into a choice after the into.
Is.
OK, with the choice and now we see that well done for getting this far, but you still have more to
do.
OK, so now let's go to open it already.
OK, so let's let's minimize it.
Is everything OK, so now we're going to try to open this application with the first thing for first
going to open like this.
One as administrator privilege.
OK, so now we're going to click here.
And we go we have to go to application or OK, download, so we need to download file.
So let's go, let's go.
Let's go to this one.
So.
Well, now let's try to win it so that we can endure the injury, so that we can endure the application
injury.
We click on it now.
We are here as application eight, so what we can do now, we can try to find some ticks by doing so.
We just click here.
Let me do it like that for you.
OK, so far, so good.
We are big and strong and then we choose olefin text, olefin sticks.
So let me do it.
It's too big.
You got to see everything.
Yep.
So you are big in the search for olefins.
It takes again, you don't need to go to.
OK, so.
The trick here.
And cared for, which was unusual, and Sirtex strings.
OK, now we are here what we want to try to do, therefore, we're going to try to bypass it.
And the way we should bypass it is by changing the password code.
So the password, because it was.
Probably one or two seconds.
So what we can do, we will find something like time or time so that we can find it OK.
We see a timer here.
Wait a minute.
Were you here?
And then we find another timer again here.
But we should find time with Unicode because Unicode is the text strings that identify do the functions
what to do.
Therefore, we can try again to come to go down.
Let me do that for you to watch.
OK, so we will go down there on the unknown.
We got to find some Tex.
Well done.
OK, your message.
OK, let's come.
This is a unique optics and be look at your message.
So we're going to try to click on it.
We can bypass it by by doing by by following many ways.
I'm going to tell you tweet first thing first.
What you can do.
You can just try to modify the text.
I would just do one one for you.
But you can try to do all of those three that I'm going to expel you.
You're going to bypass this because one thousand means that one second, if you increase it, those
in it will it will mean it will mean to Siggins and so on and so on and so on the full so that you can
have time to see your application in front of you.
When was in order, you got to change that one thousand to something more light.
OK, so to do so the first thing first you're going to do, you click and then you click on binary and
edit and then here instead of putting one, you just press nine.
Let's say, for example, you see.
So that's the way it is.
The name means that it will be on nine seconds.
So we are not going to change it like this.
We want we just want to show you.
So we put it on again.
So we create cancel.
The second step is that you can say to yourself, OK, why only ninth again?
Or why only 20 seconds or only eight seconds or away so that I destroyed completely.
If you want to destroy this tape completely delay for what you can do.
You can know it by by opening it, I mean, and hoping that that means not the code will not go through
this number is it.
But it will take the number of ninety.
So again you wait, click and then you click on biennially.
Therefore you see filled with notes and then it will change automatically to niti these numbers to ninety
because you fill it with n, therefore you bypass it.
And then the last step is that you can just this function if two if you have a MacBook or if you want
you can just press F two if you have another system.
So the thing is that it was F to, to set a blueprint or you just or I click.
You just click and print with print and voila and we click here.
Yes.
Therefore, we said equipment, so we're going to use the second.
But if you use these and then you it out, you just click one, it will work.
But here we're going to choose the second step so that we show you everything is how it works.
OK, so we.
We wait.
We delayed the point by pressing again F2 and then we're going to try to put it as No.
Again, therefore we just do it like binary and fill with.
You see now all these numbers there, they get changed dramatically to 90 fall.
You can own your application easily and then you will have you will bypass the steps.
So that's one of the ways that you can make it.
Now it's time to launch or application, right?
OK, so let's do it.
Let's let me close this because I don't want it anymore, so.
OK, so that you can see better and a better way.
OK, now what we can do, we can go here and take that weblink, find out I all.
And what was it.
Let's come here.
It was if e to y if e to say if e to y let's come back here again.
DP Way, way big X and Y here, t9 the nine and yep.
So now we get it.
So let's come back here and let's just double click and go and try to open the window and saw it.
See you see you did not enter the password in time.
That means we still have something to do because the time now matters and how we can make it.
We should again try to modify the application the time or try to break the time.
So the time might be once again or five seconds, and then we get to either bypass it or increase the
amount of Siggins that was in the code.
So because as you can see, we cannot get it.
Did you see?
So we cannot get it.
So we have to bypass it.
OK, so now we're going to come back to you to carry a machine or you can just upload it into all or
software error here so we don't need to go back to orcharding machine.
So let me let me minimize this for you and then we will have to modify the code.
Okay, so let let me put it let's put it here.
Already bigger, already bigger, and let's open it using administrative privileges.
So.
Yep.
All right.
So now we can come here and come, come come back here, download this one.
And so we come back here, an application seven, application eight.
Well, and we should have it.
So now we start the program.
Let me increase it for you.
So now we start the program.
Now we are into that application eight to one, OK?
And that one again, underscore and therefore we can double click and choose, search, search for students.
We need search for strings before.
Let me again put it back so that you can see all the tricks.
OK, now it's OK and then come here.
All of takes streams.
So now let's be realistic on what do we see that time.
It has sometimes OK, you see, so we get to bypass it and then a very good way you can bypass stuff
is by not it.
Not it.
It's mean that.
So instead of pulling its cord in the ASCII, could you just put 1980 will work as the not NIST.
Alright.
So what we can do and nothing that nothing was done.
Okay.
Okay, okay.
Okay.
So we're going to find a way to find it takes the time because we need time.
We can just try to like click and search for ticks and time so we don't, we don't want you as sensitive.
Get into time or one.
Let's try if we have some more next day again it's here.
Okay.
So we get to bypass them.
Guys, let's check again.
Let's go get another one or kill them.
Let's check again time.
Okay.
This is not, this is this is just the strings is a string and the OK and just the string next time.
So ok.
Just this time and again next.
OK.
OK, so we already have a clue guys about it.
So let me inquisitorial.
OK.
So you get so we get here.
Well, what we can do now, let's come back over here and try to click the timer because we get to bypass
the timer.
So that timer, was he over here?
Let me go inside.
Timer one, timer one, and then we w we can click and each was binary and fill with.
Nope.
So everything now is 90.
You see what I mean before.
OK, and let's come back here again and check for the next timer who next time is here with the work
we did a second time.
OK, we can just do the same thing and fill it up.
OK, no timer in this way.
Now let's check for the next one.
Can you read that and we know the password is they don't know.
Well, don't let me check before we go below welldone for the faluting.
This person can go in you.
OK?
So let me get this right time again, following up.
So we'll wait.
Nope.
All right, now, all done.
All right, let me check last time.
Let's check now.
Fornix, Anex.
Nothing like again, soon get nothing so we can close this, we don't need it anymore, and then why
click here and then we're going to choose copy to executable and select all the modifications that we
have made.
Now, we're going to try to copy over
there for a new page will appear.
And what we can do now, we we have to save this file.
OK, let's see.
And we take save file.
We will put it on the desktop now.
We will put it in the desktop and then we will call it like application eight, blah, blah, blah,
blah.
Okay.
And put it here.
So now we can close or already go.
We don't need it in mobile.
So come here and then we double click.
So as we can see that when we are trying to to open this application, we get to press good into so
that we don't get it.
OK, let me show you again if.
If we just click here and that you did nothing to report it in time because it modified, so we just
would not.
But we get to modify it.
So I'm going to show you how.
But first and first, if you quickly press enter and then you will get the password because you are
void of of going to the green light and you went to the red light and that area code.
So let me just double taken place and do you see.
And so the password is this.
Now let me erase everything that everything.
Let me stop the time so that it doesn't give us this page so that we can have all time to see to check
what it is and what's about everything.
Right.
So let me close it.
Close it to.
OK, so now we're going to win this application over here, but after we can go there, we're going
to folder and wanted there what first thing first.
Let me make it like this before you can or you can see everything.
So we go here and we just click one and now we can come here, you see.
Now we can go to coffee or application will not be closed automatically because we have bypassed that
once again, which which was we in awkward like one thousand, we put it as no, you can use either
one of or twe three options to change that binary, or you can just put that ballpoint.
But if you try to over two to hover over your mouse on the Internet, you will not be able to to do
so.
So you have to avoid that.
You have to avoid over over your mouse on the end if you want to, if you want to know how to bypass
these in so you can just check out your course.
And then we showed you how you can bypass it.
Let me show you.
You see now everything is done so you can click anywhere you see.
Now it's become grey.
Let me put that for you.
You see, now it's become grey in one click keyboard, you know?
So let's try to was even introducing Workday's.
So you have to be aware of that.
All right.
So we close it again and then we're going to try to run it again so we can hear one and then come here.
Now you have any sound and so on.
But therefore we are not going to hover over almost there.
We just going to press into and look, here it is.
The password is blah, blah, blah, blah, blah, blah, blah, something like that.
Now what we can do, we can we have to save it to do so.
We're going to try to do like this.
We could we could be.
On modifications.
And then copy all and then we're going to save this file, as Eddie, let me say.
He the only put it in the desktop.
It will be better so that we can get it.
OK, let me put.
OK.
OK, so now we can close everything.
We don't need to worry anymore.
OK.
All right.
So now we don't know if the password is is the real password, but we, we, we believe that it is.
So we are going to open a lottery machine and try to go to all account here on account and proceed.
So let me go here.
OK, this is us.
So now we're going to come back here or just.
Camille.
Now it is to be the aid application, so we come here.
Oh, okay, so the password was let me come back when those.
OK, we can try to make a little screen or worse, a bigger.
Well.
So that you can.
See everything.
I would just you know, we are not going to use it, but OK, so far, so good.
Well, so we're going to try to open this application and try to find it again or get to it in 37.
Let me come here to it in 37 years ago here.
I should not put it into this decision and crack with a capital C. Clarke 18 55 and let me cluck cluck
80.
Fifty five.
Let me just give you a ticking clock.
OK, so now you are copy control air control x and welcome.
Come back here.
And we just busted Congemi on Joyce, if you want to see, but of course you will, you will find it
in your eyes so you will detect it.
So you will see that they just try.
Gongadze 25. has been and so the reason that you see this red line, guys, guys, it's not about accounting
problems.
What it's just about Adblock, because approx is Hayase or it say something that look like you use that
because I'm using it in what?
So let me just do it for you boys and oocyte.
And just refresh control our.
So we send.
Yeah, of course.
So we have already got it, yeah, so that's why.
OK, guys, so that's how you make it.
And so you and the next board for the application nine.
OK, so let's go back here.
Over here.
So now, Ibraheem, so as always, try to download this application and unzip it so that you extracted
in your desired folder and then before.
Yeah.
So we will see you there.