Hello, everybody, welcome to my advanced ethical hacking, networking, penetration testing, costing.
OK, welcome for the application cooking you live in now we're to we're going to just use Ida here or
if you want, we can go to your Windows up application, can use your IDA there, and or you can use
only Tebogo or X 40 to debugger.
So it doesn't matter if you can work with them.
So that's perfect.
OK, so let me minimize this.
We don't want this anymore, so we can just.
Cancel everything, yeah, OK, cancel everything.
OK, so now so before starting application 11, we can we can cancel everything because you don't need
them anymore, so.
Right.
OK, so let's try to open the applications to see what it looks like on this, so it is on your desktop.
OK, so we click.
And we wanted.
Okay, as you can see, please enter the password check password, I give up my basic symbol.
OK, so let me check.
I gave to see nothing.
OK, so let me try it again.
All right.
Let me put something like anything above the.
And take Bushwood, so you enjoy it and then the Bushwood.
OK, so remember this, this string's guys, we we got to find it in the code, so.
We will consult with them and then here we are going to try to open it using ADA so we can judge it
ADA.
We put it here.
OK.
OK, well, no, no, no, I don't want you.
Thank you and thank you for asking.
All right.
So let let let us enlarge.
It's a little bit and coming here as well.
OK, I think it's enough, it's enough good.
Now, as you can see, let me put it a little bit like this, like this for you, and then I will I
would like to put it back here.
We have a lot of functions, names.
Therefore, we don't know exactly where this thing takes that.
We're going to try to find out.
I mean, that is a message we're going to we don't know where it is located.
So we're going to find it out.
You can just trying by pressing in on each of them to see the codes and so on and so on and drag it
to the end to see the return value and and so on.
But here, as we can see, so we can move this this line here or here so that we can put everything
into function.
So again, I try to go down, down, down or something interesting.
Take a password, get text password.
So let's let us try to see for nothing.
Is there nothing?
So it's not that interesting, therefore, therefore, OK, no strings.
Let's try to save some things.
There is nothing much, OK, so you can try to to to look at each of them guys.
Let me take the last one they put on my OK.
This might have a lot of string text oil.
So let's let's go down below and check, check, check the functions, how it looks like.
We need to find a message.
Think.
Again, here it is divided into two parts.
So, as usual, annual notes and a congratulations note.
So let me go that way.
We see that we got that one message which says that so you into it and enjoyed password.
So let me now put this back for you.
Okay, a little bit more.
Yep, so that's enough.
Now, what we can do, we can try to see what is written in the red line.
So let me come here.
Congratulations.
The password for H.B.
It is.
And we don't know.
So we're going to find a way to to make the code instead of going to the green.
To the Green Line, it was good to Despard, the awful as usual as we have seen in applications in previous
application, it it was just sometimes immoral to tune up that point so that we jump into the opposing
lane.
Therefore, here, it's an order stuff, what is within the ECB and e dot you and s what?
It's mean that so.
It is usually like, come on, come on, intermediate language, if you don't know what it is, you
can try to Google it or to go to Wikipedia Stockbridge to try to find out what it stands for.
It is it branches.
It branches the cord to the target, if it is called.
And then or if it is or do it, this is what it is all ordered and went to the target if equal and short,
short form.
OK, so before changing it, you got you got OK, first thing for you or you already have enough of
you how you can make it.
You get to change this line to its opposite.
So its opposite is back that this I mean back is not to the target because this is bunji not to deter.
If this is when to not target you have to change it to went to the target and or do it instead of unordered.
OK, so let's check it first.
You can go on Google and copy this line.
I mean, from here you copy it.
That is, of course, you take all and then you pass it on Google to see information if you don't know
where it is coming into it.
So let us briefly talk a little bit about it.
So this is a list of of the instruction in the instruction set of the common intermediate language byte
code.
So here, as you can see, we have the code and we have the instruction.
We have the description, type of instruction, instruction, how it is.
You will find it very, very helpful, because sometimes in the code, in the assembly code, they might
only write this and how you're going to know that.
What is this?
You get to figure out, you have to know them or just go to Google to find this, to find its opposite.
They say that this is a bunch to target if you call.
So you're going to try to find when went to the target, if not equal, you know, so this is how it
is, guys.
So know what we can do.
We can just go back here and check again.
All I got this is A, B and E that you end.
So we come here and W Conjoint F or and Ormoc, it is an F and then we type B and E dot u n.
So that s again is all we do everything.
So we see that it is zero X to be tweeny.
Let's quickly go.
This is the OK code and then here this is the instruction we would we'd say to the court what to do.
Therefore let's let me try to just go here.
It was Twittery.
We're looking here.
So it is to be the description is Boonchu to target if unequaled, or do it shut down should form.
Therefore, we get to find it winge not to target or went to target if equal.
OK, now let's once again control EV and type Wenge to target.
Now if Ekwall we need if equal.
Exactly.
We will not take this one because we need that s as well.
So this is the code to e we're going to try to copy this and passed it there.
Or if you can remember it, it's just Baghdad.
S OK, so let's come back here to own this machine.
So we got to find a way to change it.
As usual, you just come here and click on edit.
Let me and logit a little bit for you of the I will put it back again.
So you click here on a date and you choose patch program and you choose a simple.
Assembly.
So in this process, we do this and support the assembly.
OK, so what we can do now, we can try to to edit it.
OK, so let me try to work with space and then we jump into the aid of you could so what we can say
that this module doesn't support the assembly, which is that it's not a problem.
So let let us jump into this and quickly try to find something different, OK?
Change but eight change, right?
No.
OK, so we get to board that accord.
Therefore, let me go here.
Change word if it is allowed or OK.
It allowed us to change it.
Therefore, let's go, let's come back, let's come back to here it is.
It was Boonstra to target if we call short form and it was zero X to eat.
So we come back here again with type zero X.
To to eat your eggs, to eat, right?
Yes, let me check in back again.
Zero eggs to E!
So, OK, we know we click on OK, therefore it gets changed automatically.
Pilferage, you see this is the instruction, this is the instruction.
So we just changed the code.
Therefore, we're going to in the program we click on edit again and Puch program.
Let me apply patches to input file.
OK, so we click here it is on this opportunity then.
OK, so we put it like this.
Therefore now we can close this application because we already padget but instead of doing so, let
me jog it here so far and try to open it here.
Try to open it.
Well you hear.
OK, so we click here now we have change it so we can take anything.
That's a beep, beep, beep, beep, beep, beep, beep, beep and jeff password.
Congratulation, congratulations.
The password for any age is strong with ID we see something.
It might be the password but we don't know yet.
But since we get into the white node, they'll fall.
We will trade on all it should be is account login account to see if it matches.
OK, so let me jump to colourings machine now so we have to remember it.
Chuong Capital s in space and copy to our capital w and ability.
All right, so let's make it here and let's go back to Orcharding Machine.
So, well, you, my colleague, we can get started here.
Let me decrease it for you.
OK, now it should be alright.
So we come here.
So we come here, then we are looking for application live in this one, and it was let me check it
again a little bit.
It was that strong.
We did hear strong.
We did let me increase it so that you can see you might see strong.
We did OK.
This one strong.
We did.
I can I cannot copy.
So let me come back decreasing so that you can see on my screen.
OK, good.
So come back here and we type strong copy.
That is strong.
John and caboodle you.
D e d all right, so as usual, control a controller X to cut it and come back here and copy and paste
it here before we submit or.
Let me check how many points I have already so far.
I have nine hundred to ten.
OK, so now we are here.
You can just click on Submit to see.
Please into the password, the password is not quick, is it, to let us check it again?
It doesn't look, it's a way to remind who I put stream.
It's not a stream.
It's June.
I'm sorry, guys.
OK, so it's Tongon control x ray control x.
So let us come back.
Let us come back an application live in and control V and submit.
Congrats.
Excellent.
We waited 30 point has been added.
That's absolutely good, guys.
So as you can see that sometimes in the assembly code or some applications, there might be not only
the usual code, I mean, from the assembly language ability, the they might put some some common intermediate
language as well so that they empower the software.
If you can check it here, you might get some some more information about it.
Let me check it for a moment.
And the first and the first part, let me check it to see what kind of information they have put their
space.
And they told the special name and then so, so, so, so so far, nothing is here.
Probably it's on the last one.
And let me check if they don't put some information for us, because usually they usually put some information
about it that this software is not for Microsoft, visual, basic or for Microsoft, stuff like that.
OK.
Again, you're looking in the wrong places and I was not looking for it.
OK, Microsoft with all these extremes.
Yeah.
So you can get this information as soon as you get this kind of good case, you will quickly understand
that this code, they they can be so common instruction language.
Therefore there are plenty of them.
Please check it out.
It's very important so that you teach yourself how to do it if you can't change it on either, as you
can see by changing the instruction or if you use or only debugger, you might change the instructions
that instruction very easily.
But in ADA, if we got any one message, so therefore we were not able to assemble it, but we were
able to change the word.
I mean, the code is so.
So that's how we made it.
OK, so, so far so good.
So let me come back to Organelle Unix machine and come back here.
And so now we now we're going to go to the next application phase, so which is the one.
So download it and extract it.
And we are looking forward to see you there.
Thank you.