Welcome back.
It is time we switch things up a little bit and move on to a different target for the next few videos,
we're going to be attacking Windows seven machine.
And the difference between exploding Windows seven and the anticipatable that we were attacking in the
past few videos is inside of Windows seven.
We are not going to install any additional software.
So these exploits will work on anyone that uses Windows seven and hasn't updated their operating system,
which is most likely everyone running some pirated version of Windows.
For this, you will need to install Windows seven virtual machine.
And I got my right here.
It is currently up and running and you will need to install them inside of your virtual box.
First, you can take a look at YouTube, how you can download Windows seven.
So far, since the ISO file is something that you will need for the installation of virtual box windows
machine.
And if you can try to download the 64 bit version of Windows seven, once you get the ISO file, the
installation process is rather easy.
Just go to the virtual box, then click on New Right here.
You can type in anything you want.
You can call it Windows seven.
You can select right here which version you got either 32 bit or 64 bit.
And once you select it, click on next.
Let me just say right here, cannot create this folder already exists.
Yeah, this folder already exists because I have already created the Windows seven machine, but if
I call it, for example, Windows seventy seven, just so I can change the name of the virtual machine,
click on next here.
What you want to do is you want to add at least two gigabytes of RAM.
Now in case you don't have two gigabytes of RAM, feel free to add one gigabyte.
But in that case I'm not sure whether it will work since I haven't really tried it.
Once you create a virtual machine and set the frame, you can click on next right here, select create
the virtual hard disk.
Now the next, next, next here you can select the hard disk size.
You'll need to go to match.
You can just choose something like 20 to 30 gigabytes.
Click on create and your virtual machine will be right here.
Once you do all of that, there are just a few more settings that you need to set up.
So just go right here onto the settings.
And in the storage, you want to delete this empty right here and under the controller, you want to
add the Windows ISO file.
So in my case, here is mine, Windows seven, Ultimate X 64 Doti.
So I would choose that one and then I would proceed to the network settings and change from the net
to the breached adapter.
Select your adapter right here and click on Create.
After you do all of this, you can start your process of installing Windows seven and the process is
rather easy, as I already mentioned.
However, there is one important step that you need to pay attention to, and I got the screenshot of
that step right here on my desktop.
As far as I remember, this step happens, I believe, at the very end of installation.
And here it asks us, help protect your computer and improve windows automatically.
Here we want to select the last option, which is ask me later, it says, for that option until you
decide your computer might be vulnerable to security threats.
And by selecting this, we are simulating a vulnerable Windows seven machine that wasn't regularly updated.
Once you do all of this, you should be ready to go.
The other steps of installation are not important.
Just remember, once you get to this step, select, ask me later, OK?
So right now I got both of these machines up and running.
I got clinics and Windows seven.
And if I go to my virtual box right here and besides this, Windows seventy seven machine right here
that I created right now.
So I will just delete it since I don't really need to.
Windows machines besides it.
You will see I got these two Windows seven machines, so I got Windows seven thirty two bit and Windows
seven sixty four bit and both are installed with a different ISO file.
And the reason why I got two of them is just to show you that sometimes some of the experts won't work
and that doesn't mean you didn't perform the exploit correctly.
It's just that sometimes they just don't work.
Whether it is due to architecture or some windows update, it doesn't matter.
Just you will see that, for example, some of the experts will work on this version of Windows seven.
But on this one, it will not work.
Now, there is also one thing that we must do on the target machine before we actually attack it.
So once you install Windows seven and you have it up and running, go to it.
And from the desktop, you want to type control panel.
And in the control panel, we want to disable the firewall.
The reason we do that is because the attack that we are going to perform targets support for four or
five, which is by default, open on Windows machines.
However, it is also by default being filtered by a firewall that is automatically on every time you
install Affinitas machine.
So for our experts to work, Target has to have that port unfiltered by the firewall for us to be able
to exploit it in companies and larger networks, that usually is the case.
This port will be open and unfiltered.
Why?
Well, because it is a simple protocol or server message block protocol.
It is used in network file sharing and it allows applications on the computer to read and write files
and to request services from server programs in a computer network.
It is basically used for different directory access or for printer access or something similar.
That's why it is usually open inside companies without any firewall whatsoever.
Let me show you what I mean.
If it go right here and under the system and security like the Windows firewall, I already have it
disabled.
But by default you should have it like this.
So you should have firewall up and running.
If I leave the firewall up and running and I go to my Linux machine and scan it real fast to student
and map, we are going to use the same skin.
In order for this to work, I need to know the IP address of my Windows seven machine cell type IP config
inside of the command prompt and it will tell me it is I to that one.
Sixty eight.
That one, that eight.
So if I go back and scan that IP address.
Input my password.
This shouldn't take more than just a few seconds, and you will see right here that these ports are
open, but for you they will probably not be open.
Why?
Well, because you haven't really disable the firewall yet.
So even though I scanned it right now, once again, while the firewall is on, you can see in the scan
results ports are set to be open.
What you are going to see in case you haven't disable the firewall already is you will most likely see
one thousand ports filtered.
And to fix that, what you can do is go right here, click on Turn Windows Firewall on or off.
Then select right here, turn off Windows Firewall and turn off Windows firewall in the second option
as well, click on OK, and now the firewall is off.
Now if you go and perform, this can once again for me, I will have the same results.
But for you, you will have much more ports open.
And I also get some ports open that weren't open once the firewall was enabled.
Besides all of those ports, you should also see the port one three nine being open and the port four
for five being open and those are assembly ports.
So the key thing to get from this is go to the windows and disable the firewall once again, control
panel system and security and then Windows firewall.
After we do all of that, you are ready to go.
In the next video, we are going to see how to perform one of the most known recent exploits called
Eternal Blue.
See you in the next video.