Hello, everybody, welcome to my advanced ethical hacking, networking, penetration testing costs.
OK, so now let's continue let's go to the next application so we can come here and we can close everything
close.
OK, so will we have already downloaded the ten applications, so we're going to come here.
So let's.
Let's delete everything.
Control move to Josh.
OK, so when I come here, they can go to home for the.
All right, so now we're going to try to track it here.
OK, so what we can do now as the first thing you have to try to see how this application looks like,
so it is something interesting that we put anything here and.
Kikongo.
So you need one try again.
OK, let me put some digits, some numbers
and.
So elongated one, try again.
OK, so let us try to open this application using ADA, will you drag it here and put it in a pool?
Sixty four.
Now, just please.
OK.
OK, as the first thing first, this TARP program starts for us, so as soon as Ingworth if you more,
but if you want you can just buy space and to put it back on the eight of you, you just wear space
and do it if if you cannot put it.
So you got to create a function.
And by pressing people just by pricing or by double clicking interest, great function and therefore
you can buy space and boom you get there.
OK, but we don't need it from now.
We just need the government.
So because the government gives us a better understanding of how the courts work.
All right.
So let's come here.
We're going to double click it first thing you can try to see if there is there anything else, nothing.
Or drag it out of nothing.
So let's come here.
We double click and try to see if there are some string text.
Nothing is not as interesting, Joyce Mitchell by lucid dreaming and so on and so on.
So let's come here.
We're going to double click who eats a lot or can analyze it a lot, so let's come here to check in
and check the code.
You guys, if you have this application, if you need an application and you don't understand the assembly
code, so it would be better for you to analyze this code step by step and slowly.
As I said earlier, if you if you open your IRA and you want to find some strings, it would be good
also to just check it from here and open view, open some views and allow.
Come in here, come on.
Here and you get you click on strings and then you will get all the strings which are in that application,
but sometimes you might not get them.
Let me just put it that for you.
OK, but sometimes you may not find all the strings which are there.
Oh, look.
This software X sixty four DB G helps you find all these things which are in the applications.
So let's come back here and again, so we come back here again.
We can just go down to analyze it, to analyze it, to analyze it.
Let me put it back on.
Where was it?
OK.
All right, so.
Going down below, down below with our left.
Again, he didn't want to live, so you can just keep pressing our left, put it to the right, because
as you can see, this is not a white line.
And so we've got to find all the codes and all the functions are there.
But probably not the strings.
Let's see.
OK, so 47 19 system, Fred, OK, anyways, so let's go here in the representa or just double clicking.
OK, so this one might look interesting, we don't know let's try so we don't even have to go disposer
because there are not caught inside.
So let's come here to the outside.
So we don't even have to go down this path as well because they are not good, so only we stay in the
middle.
OK, there are some strings and everything.
And OK, what we can detect is that this twins was this twins in Minnesota that we have got earlier
when we tried to warn that this application, therefore we have to find a way to interrupt this conformal
going here.
So we got to make this call going from here because here it is within the password for H h is blah,
blah, blah.
We don't know.
So let's try to go down below.
And after all those operations, it jumps to dislocation and dislocation.
Dislocation is here and also this one, jobs here.
So what we can do, we can assemble this code just wide, wide up right above it, this one.
And instead of going here, we wanted to come here.
So we're going to say jump not not equal zero, but jump if it is equal to zero.
So therefore we can try to assemble it and.
What is this week, OK, and can so we can type it on, we can put it on green because we make some
changes, OK?
He'll just where will we see a kind of text?
We don't know what is it yet, but after that, it moves this upset to the aid register and then after
it moves that 10, then edge into the county register and then it is it a wee bit disturbed by comparing.
So therefore we can see that we have some comparison.
What we can do, we can try to put some kind of web point so that it doesn't compare or but first thing
first, let's try to go into that stream, into the applications and copy it first.
Could be eight to 10 to try to one and control C control.
Let me see if it is if it is the way.
Well, come on.
OK, so Condorcet and we will try to pass the code when we open the application and then we will just
check if by accident we don't get the passwords or we get to put on weight based on the comparison or
on some calls.
So let's go first to apply this budget to the five.
Is that if everything's all right, so now we can come back here and try it out again.
Now we can put.
We can w we can just put anything, but we got to put that the text that we have copyright earlier,
but we will just try to find what it is.
The password for each age is what we have put.
This is one step.
OK, so let me put it now be or let me put just me and go.
The buzzword for Asia is the first one, and the password for this is the second one.
OK, so that you see and I can just leave it here, it doesn't matter that now we see we get another
password.
But this password is probably the comparison when we put the first password here and then the second
password here and then it compares it and then give us some kind of syntax.
Let's see how many digit it has.
One, two, three, four, five, six, seven, eight, nine, 10, 11, 12, 13, 14, 15.
Wait a minute.
One, two, three, four, five, six, seven, eight, nine, 10, 11, 12, 13, 14, 15, 16 or K,
16 digit.
We don't want you, we don't want you.
Let me close this application and let's try to reopen it.
And now we're going to past the text that we have conveyed, look, OK, this is one step.
The password for this one is the thing that we put.
We see.
E one six four six zero twenty two.
Listen to me, one six zero three two and one is one.
This is one step.
Let us click again.
This is the second one, so it is the same, you see.
The same thing.
So let let us try again and then so that the court will compel them.
All right, now we get something new.
Let me put it like this for you.
We get something new.
What we have is that so the password for each page is the first thing that we have into it.
And then this again, password, of course, is this one.
What the comparison, as you might see, is this password.
So we don't know if it if it is the good password, but we will just try it because it is interesting.
It is just a testing.
So we are going to try everything that we found interesting.
All right.
So let me close this.
I want you let me close this.
I don't want you let me keep this one that I can put it here, right over here.
So let me come back here and and put it over here.
Oh, let me let me put it down on the on the on.
OK, so that you can see everything.
OK, so now I put it here, the fall, I can just come down a little bit.
OK, now we are in application 10, so we're going to try it out.
So the password is two five six two five six oh, let me put it here and instead let me use it.
Two, five, six.
The password is two, five, six, two, five, six and seven, eight, nine, eight, seven, eight,
nine, eight.
And then E, b.
B.
Eight E five F nine Didi one more time, the D nine F.
Phys ed, ed, ed will be.
E eight eight nine eight nineteen sixty seven, twenty five, six, seven twenty five, okay, so select
all control X.
So we're going to come here, ambassador, here, so let's see.
Invalid password, please enter the password.
So we got to find the best one.
OK, so what we can do now, we can just try to put a blueprint on on that and the computers and try
it out.
Okay.
OK, so, no, as you've seen that we have enjoyed any valid password, so we get to figure it out to
know how to check or to see how we can get the password.
OK, so I wouldn't want you to go here.
And after putting this file, of course, here, so you upload it somewhere and then you go to your
Windows machine if you're already there and try to download it and then we're going to put it in our
Windows machine.
So let's try first to just save this machine vision or we can just leave it here so it doesn't matter.
So let's go to our Windows machine.
OK, so you downloaded the illegal.
This is the application eight, OK, so we can turn everything off, OK?
Now what we can do, you have to try to open this application.
We are using only debugger, so.
All right.
Let me make this modification first, Delate.
Don't need them.
Even.
Well, so let me increase it.
Therefore, we're going to try to click and drag this application there.
This one we have, we decided to continue to.
With which one we are working, which one we are working with.
OK, so we are there.
Let's jog it here.
So let's check how obligation is in go.
So let's just go here and click one just one time.
OK, so now you're going to click right?
Click here and check for text.
As usual, and make it let's can be bigger.
We're going to just the one quick thing on here, for example.
OK, so we get there.
What we see that the application is built with a default, not a default.
But they do.
The builder of this application put strings here and there for what it says that we don't know.
But we see that here is it ASCII text.
So let's try to see if avision is.
All right.
So let's try to one day the application first.
Let's come back here and listen to it, try to see how it would have been black.
The password is blah, blah, so this is the line that that we have changed this one, I believe that
you see, OK, this is the line that we have changed in Al-Qadi machine using PAIDA.
All right there.
For now, let's try to understand what the code there is.
Let's go.
Up, up, up, up.
After we will that point, but we would just see what we what we should do, it is go up or we can go
faster.
By doing so.
OK.
No, Askey could've flown except on the one that we have found in the.
It's go down below.
Let's go, let's go, let's go, let's go down below when we start seeing some techs looking.
So let's stop here, let's see when we are here or let me go here to the first.
OK, so this is a corruption decision on the corruption, OK?
Now, the court push is a register.
It push into a register and then push the call and register.
Now, what we what it does is it moves this address to it, to that it is it this address on it.
If you want to see how how it works, you just press space to see.
Exactly.
So this address forty thirty seven e it pushes it, it moves it on air, say OK, let's get down below.
And then what it does is this takes us called this Askey and here it pulls something again on the LDA
let let's with space.
OK, this address forty thirty one a full forty two to one before it pushes on eBay.
Let's take what is that.
Our address.
So thirty one A4 for that one.
A feel good.
Good on that one.
Thirty one A4 or.
Get.
OK, what it does, it put this address on ideia, but we know decs, so let's see, it moves then to
the county register and then it be by comparing the bite that we have.
And to it that means obviously here will be some tax strains that when we endured it will compare this
to us because of the tax streams with this with with this ASCII code.
If they match the URL for the string text that we have enjoyed, is that password.
If they don't match, we get to figure out what is that quick text and it compares again and then it
jump into this address.
Forty, fourteen, B, fourteen for the B we have change it.
And in either it was not jumping here, it was jumping into the U code.
You will block what now we just jump or equal to this address.
Joeckel is similar like John Jay Z visa is if if is equal or equal to zero.
So.
All right, let me show you if if you want to see you can just remove E and put type Z, you will see
automatically if you get change.
So let's see.
You see.
It's always g e because they are the same.
All right, so let's try to find this address for these.
Let me wait.
Let me put in bigger for you.
This address is zero zero 40 14 E, let's try to find words that address, let's go down a little bit
b e we need the E for the 14.
We do it for these 49, B, E for def fourteen, the E, B, B, this one, that means let me put a
bullet went after it.
That means when when we are here, it jumps into this address.
OK, so we now after all these steps, let me put it like this for you again.
So now we can.
Decrease it.
Right.
So now what we can do, we see that it jumps into these countries.
OK, we see a strain to add.
So this is the fourth string that is in that application.
The password for HIV AIDS is nothing else.
It but again, this is for the 31 18.
So let's start with Endo.
So it's just push it, OK?
The problem with contagious Gene Kincade gene means that a strain, a Wandong strains that we as the
user we in put in that application software.
Therefore it will connected with this with this strain.
OK, and then so this is the population again.
So this is the strain to added that the strain that we had when we did it and then it conquered the
strains again and it made the decision.
I mean, the call.
So after this last check, OK, this is the first strain and the steps is that it can the strains and
call it again.
Now, this is the text that we have input and the ramifications of it by by putting it, it pushes it
again, it pushes the contract strains and it calls it the fall after that a push.
OK, so what it says that it goes on below.
So some it takes a push again, the text now not as architects and newly pushes and so on zone.
OK, now finally it it jumps into this into this address for 40 foot b e where was it here.
14 for D forty in.
OK, so let us on the application and try to enter in is trying to see how it will be.
So let me go here of this thing first.
Let me use those we print.
So we, we print, we delay it again.
We print again so we can come here.
Now we can try anything, let's say that we will type O, save me, save, save, save me.
The password is Save Me because it pushes what we into.
You see, it pushes the text.
What we have into it, OK, OK.
And then come back here to see automatically a new ASCII code is into it so that it compares with the
first ASCII code, as we can see.
Let me increase it just a little bit for you.
As you can see that the ASCII code is divided into two.
Let me copy all the stuff in and pass it into an open text so that we can see just copy likely and choose
copy and copy the clipboard, for example.
This is one.
And then come back here so we can put it here.
OK, OK, so this court is divided into two bit, this one, this one, this one, this one.
This one is one.
All right.
And then we're going to do the same thing for here, so.
All right, so the first caller there is much that's good.
That means we can pretty say that the car which have to be enjoyed and the application here when we
come here should start with S..
That's that's what we just think.
So we don't know.
Okay, so let's try something different.
Let's we want the application and come back here.
Let me put it back to the way it was.
All right.
So we come back here and then we back and then we come back here.
So again, if we can win it, but which we have to see the tax first.
OK, so Nadex is here so far, let me come back here again.
So let's take now test, for example, test, and we click on Go the password, is this OK?
So OK then let's come back here.
We click here and a new ASCII code is coming up.
And then now it get changed.
That means we see that it's seventy six.
Sixty seven.
So let's copy the both of them again and we could be gone.
OK, or we can just scandalising.
It's not a problem I can then come back here again so we could be in past here.
So let's check those first things.
OK, so everything will be still the same now, OK?
Something we can see do fall.
The first leader was for what we thought it was for.
Save me.
Let me put it here a little bit and I can acknowledge it.
All right.
This one was for tax, for save me, for save me.
And then this one full test, though, for what can we see?
What we can see is that obviously the first leader will will stand by is and then the second leader
will be, you see, therefore we can put S.
S C will be two leaders which will be started get.
OK, so let's come back here again and try to work on the application so that we can see what next.
Yes.
We won.
OK, and before we click again, so we're going to come back here.
Let me just come quickly.
And it takes.
OK, so we are here.
Excellent.
Now let's come back here again and vote on the application.
So we will see now we we have seen that two leaders already.
So now let's try to type this one.
And we can go back to D.C., so let's come back here.
So as you can see.
The password is the code is 60.
Thirty two, as you as usual, of course, FBI.
The difference is between FBI and if nine is so close, so we're going to copy it again and try to pass
it on.
But controversy and come back here.
And try to do the same process.
Control.
So we still get it here in space.
We do the same thing and now we need.
This one and this one now we're going to try to to see what what leader or what what is the thing which
is very close to F nine or FBI F F nine, fasb FC F F F f e so f f so but we we have only F nine and
FBI.
Therefore we're going to try to win the application and put a little B to see what kind of things which
are there.
So come back here.
Yes, it was time and again and again to come back here as usual.
So the takes OK, so we win the application.
And try to type this one, be OK and we can go on person is same.
And we come back here again.
OK, now let's go to this second.
And controversy is in process.
And come back here.
So, as you can see that let let me press it here and OK, so if nine was what we don't know, that's
what we are looking for.
FBI is let me check in.
This is for four days a.
It is a yeah, this is it, and then this one is for Sabr and the OK, it was FBI and now what we can
see that B is if aid work helps, B is if aid B is if aid in this matter.
So the algorithm that that is written in the program convert or B to give aid and or as to if B therefore
F nine must be closer.
You see what I'm saying?
If I must be closer.
So let's try C or D, it shouldn't be like M, it shouldn't be that far because if aid is very close
to F F nine, NSB is very close to its name.
So to get from F nine you get to five to if nine is if A and B, so it is for A and B is if aid that
means C might be F nine.
We don't know.
So let's try to check it out.
Come back here again.
And still, the application of.
Going back first, yes.
OK.
And try to win it again, it's the same process, guys tell you which they will password.
So let me stop you again and let me go here to Wendy, the obligational and let's type now seek and
we can go.
And the password is sick, OK?
UPS, it tries, so probably we will get to things, but we will see that little stick.
Yeah.
And so let's let's we do it again.
It's we do it to try to do and that's on it so that you get there to the entry point.
Now stop.
So, OK, we can only establish now and type six.
All right, so no problem with that.
OK, let's go with this tax shift and controversy and come back here again and grab a seat here.
So contrary to let us come here, because this is where we needed to be.
We see that means now we get if nine, we get five nine guys.
You're going to put it like this.
Therefore, since we already get that, A is something and B is something that is of eight and A three,
and now we reach out that if nine is C, so let's dive it if nine four F nine for this one.
OK, you're going to go to the same process again and again and so OK.
For the.
As you can see, that we don't need to choose A, B, C again, because we have already know that they
are they are SBF eight in F, nine because we don't need any more.
So we need to see it.
So that's why we we don't check them.
We don't take them because we have only no deferrals.
OK, so we dig deep now.
We got this video here, guys, because it has to do much Jacobite, so in the following video will
be the continuity.
OK, so we'll see what their.