WEBVTT

00:00.980 --> 00:02.149
Hey, everyone, welcome back to the

00:02.150 --> 00:03.499
course. So in the last video, we

00:03.500 --> 00:05.389
talked about our tool called Impact

00:05.390 --> 00:06.539
for vulnerability scanning.

00:06.740 --> 00:08.239
We also talked about why we even

00:08.240 --> 00:10.189
care about vulnerability scanning as

00:10.190 --> 00:11.317
a penetration tester in

00:12.080 --> 00:13.339
this video, where to cover a tool

00:13.340 --> 00:15.050
called Open versus will go ahead and

00:15.620 --> 00:17.359
launch it, set it up, configure it,

00:17.720 --> 00:18.949
and then we'll run a scan with it

00:18.950 --> 00:20.239
and take a look at the results.

00:20.870 --> 00:22.309
So be sure to log in several Web

00:22.310 --> 00:23.119
site, which, again, if you're

00:23.120 --> 00:24.835
watching this course, you should be

00:25.010 --> 00:26.959
already logged in unless you're

00:26.960 --> 00:28.639
taking it on an underground forum.

00:28.640 --> 00:30.109
In which case, please log in to

00:30.110 --> 00:31.489
Siberry just so you can go ahead and

00:31.490 --> 00:32.490
follow along with the website.

00:33.800 --> 00:34.699
All right. So once you logged in the

00:34.700 --> 00:36.409
separate website in the search box,

00:36.560 --> 00:37.369
you'll go ahead and type in

00:37.370 --> 00:38.569
vulnerability scanner set up in

00:38.570 --> 00:39.570
configuration.

00:39.860 --> 00:41.059
And specifically you're looking for

00:41.060 --> 00:42.679
the one that says part two on it.

00:42.680 --> 00:44.297
So you could type all of this out

00:44.750 --> 00:45.750
if you want to.

00:46.020 --> 00:47.119
But generally speaking, if you just

00:47.120 --> 00:49.219
type in a vulnerability scanner

00:49.220 --> 00:50.779
and then start typing set up, it'll

00:50.780 --> 00:52.399
show you a couple of options with

00:52.400 --> 00:54.129
that in the title and then you'll

00:54.140 --> 00:55.610
choose the one that says Pecky

00:56.060 --> 00:57.090
period to on it.

00:57.110 --> 00:58.110
So part two on it.

00:58.880 --> 00:59.959
Once you've done that, go ahead and

00:59.960 --> 01:00.960
click the launch button.

01:01.340 --> 01:02.749
It will more than likely tell you

01:02.750 --> 01:03.829
you need to launch the lab in a

01:03.830 --> 01:04.729
separate window.

01:04.730 --> 01:05.869
If it does, I just click on the

01:05.870 --> 01:07.429
launch item button and that will

01:07.430 --> 01:08.569
actually launch the lab for, you

01:08.570 --> 01:10.010
know, it takes roughly about

01:10.550 --> 01:11.726
anywhere from 40 seconds

01:12.470 --> 01:13.760
to a minute or so.

01:14.300 --> 01:15.589
I put one or two minutes on here

01:15.590 --> 01:16.879
just because that's the longest I've

01:16.880 --> 01:18.810
seen it go before it launches a lab,

01:18.830 --> 01:20.569
but in most cases about 40 seconds

01:20.570 --> 01:21.859
or so. And it should launch

01:21.860 --> 01:22.860
everything for you.

01:23.540 --> 01:25.159
Once it launches the lab for you,

01:25.160 --> 01:26.479
you'll see the paper box, which

01:26.480 --> 01:27.469
you'll see in the background there a

01:27.470 --> 01:29.329
little bit to close that out.

01:29.340 --> 01:30.559
We're just going to click on it and

01:30.560 --> 01:32.239
we'll select the next button

01:32.660 --> 01:34.159
and then just click the button and

01:34.160 --> 01:35.200
then I'll close it out for us.

01:35.480 --> 01:36.590
That'll take us to the Caleigh, the

01:36.620 --> 01:38.059
next login screen in this particular

01:38.060 --> 01:39.060
case.

01:40.010 --> 01:40.999
And we're just going to go ahead and

01:41.000 --> 01:42.499
get logged in now, the Log-in here

01:42.500 --> 01:43.489
is actually going to be the word

01:43.490 --> 01:45.156
student, all lowercase, so student

01:45.650 --> 01:47.749
for our username and then student

01:47.750 --> 01:48.750
for our password.

01:50.310 --> 01:51.779
Not to go ahead and get us logged

01:51.780 --> 01:52.780
into to here.

01:54.640 --> 01:55.719
All right, so it's go ahead and it's

01:55.720 --> 01:56.979
going to log in, it might take just

01:56.980 --> 01:58.719
a moment or so here, the next step

01:58.720 --> 01:59.559
we're going to do is launch a

01:59.560 --> 02:00.549
terminal window.

02:00.550 --> 02:02.409
So here in step six, the way

02:02.410 --> 02:03.819
we do that is we just click on this

02:03.820 --> 02:05.889
black colored box on the far left

02:05.890 --> 02:06.890
here.

02:07.650 --> 02:08.879
Click on that, it will open up the

02:08.880 --> 02:09.930
terminal window for you.

02:12.130 --> 02:13.319
Let's go back to our lab document

02:13.320 --> 02:14.320
now.

02:14.370 --> 02:15.269
So the first thing we're going to

02:15.270 --> 02:16.499
actually do is we're going to create

02:16.500 --> 02:18.449
a file and in

02:18.450 --> 02:19.379
their file, we're going to put a

02:19.380 --> 02:20.460
bunch of IP addresses.

02:20.490 --> 02:22.169
So when we get to step nine, you

02:22.170 --> 02:23.139
just want to make sure you type of

02:23.140 --> 02:24.140
mean just like this.

02:24.570 --> 02:25.799
But we're here at step eight now, so

02:25.800 --> 02:26.689
let's go ahead and use it.

02:26.690 --> 02:28.589
Tool Command called NENO,

02:28.830 --> 02:30.239
which will allow us to create this

02:30.240 --> 02:31.955
particular file and then we can put

02:32.070 --> 02:33.479
our data inside of that particular

02:33.480 --> 02:34.480
file.

02:34.650 --> 02:35.609
So let's go ahead and do that now.

02:35.610 --> 02:36.959
So we're going to type in Nanao all

02:36.960 --> 02:38.999
lowercase, the scanning,

02:39.870 --> 02:41.219
underscore target,

02:42.030 --> 02:43.240
underscore list.

02:43.290 --> 02:44.849
So once you've typed that in Nannerl

02:44.860 --> 02:46.259
scanning underscore target on the

02:46.260 --> 02:48.024
score list, just go ahead and press.

02:48.030 --> 02:49.169
Enter a new keyboard. You'll notice

02:49.170 --> 02:50.969
that it'll open up that particular

02:50.970 --> 02:51.970
file for us.

02:52.440 --> 02:53.729
Now, if you want to pause the video

02:53.730 --> 02:55.298
and jot down these IP addresses,

02:55.860 --> 02:57.329
you're welcome to here in step nine,

02:57.330 --> 02:58.530
because that's our next step here.

02:58.950 --> 03:00.616
If you just want to pause video as

03:00.720 --> 03:01.979
you go through this and make sure

03:01.980 --> 03:03.744
you put them in as perfectly fine as

03:03.810 --> 03:05.610
well. I'm just going to go ahead and

03:05.850 --> 03:07.830
read them off as I typed them in

03:08.070 --> 03:09.638
and try to go slow enough so you

03:09.960 --> 03:11.049
can just type them with me.

03:11.850 --> 03:12.719
All right. So just go ahead and

03:12.720 --> 03:13.720
start typing now.

03:14.460 --> 03:15.779
Now, I do want to mention also on

03:15.780 --> 03:17.460
your keyboard the number key,

03:18.450 --> 03:19.969
the number lock may not work in

03:20.370 --> 03:21.749
this particular virtual environment,

03:21.750 --> 03:23.999
so you may have to type it regular

03:24.000 --> 03:25.349
or use a virtual keyboard

03:25.830 --> 03:26.830
that's inside of here.

03:27.150 --> 03:28.469
So I'm going to use my regular

03:28.470 --> 03:29.759
keyboard. But again, I won't use the

03:29.760 --> 03:31.919
keypad portion simply because

03:31.920 --> 03:33.439
it's not going to work for this

03:33.630 --> 03:34.630
particular lab.

03:34.800 --> 03:36.289
So our first IP address is going to

03:36.310 --> 03:37.409
well, all of these are going to be

03:37.410 --> 03:39.050
one only two to one six eight zero.

03:39.090 --> 03:40.090
That's something.

03:40.710 --> 03:42.419
So so just keep that in mind.

03:42.420 --> 03:43.619
All of them will be one hundred two

03:43.620 --> 03:44.770
point one six eight eight zero.

03:45.180 --> 03:46.379
This first one would be 10.

03:46.380 --> 03:47.399
The next would be about 20, et

03:47.400 --> 03:49.017
cetera, et cetera, all the way up

03:49.050 --> 03:50.050
until about 50.

03:50.520 --> 03:51.869
So let's go ahead and type in one at

03:51.870 --> 03:52.870
a time here.

03:52.980 --> 03:54.849
So 102 dot

03:55.020 --> 03:56.969
one six eight, not zero

03:57.270 --> 03:59.520
10. Then we'll put a comma in space

03:59.970 --> 04:01.169
and then 192

04:01.830 --> 04:02.908
dot one six eight zero

04:03.960 --> 04:06.240
dot 20 comma space,

04:06.810 --> 04:08.520
192 dot one six eight

04:09.450 --> 04:10.710
zero three zero

04:11.460 --> 04:12.359
comma space.

04:12.360 --> 04:13.619
Now you could also just copy and

04:13.620 --> 04:14.429
paste these.

04:14.430 --> 04:16.139
I just like to do the manual stuff

04:16.140 --> 04:17.458
sometimes just because it builds up

04:17.459 --> 04:18.459
muscle memory.

04:18.630 --> 04:19.850
So the next one here is one of two

04:20.040 --> 04:21.949
one six eight zero four zero.

04:22.320 --> 04:24.084
And then finally we wrap up with 192

04:24.420 --> 04:26.250
dot one six eight zero

04:26.820 --> 04:27.820
five zero.

04:28.290 --> 04:29.549
All right. So once you've typed that

04:29.550 --> 04:30.539
in there, you're going to tell on

04:30.540 --> 04:31.619
your keyboard, are going to hold

04:31.620 --> 04:32.790
down the control button.

04:32.970 --> 04:34.169
And then while you're holding down

04:34.170 --> 04:35.159
the control button, you press the

04:35.160 --> 04:36.059
letter X.

04:36.060 --> 04:37.349
And if you notice at the very bottom

04:37.350 --> 04:39.149
left the command prompt, there are

04:39.330 --> 04:40.169
the terminal window.

04:40.170 --> 04:40.949
Excuse me.

04:40.950 --> 04:42.269
You'll notice that the exit

04:43.020 --> 04:44.339
is the option we're actually

04:44.340 --> 04:45.839
selecting here. So control and then

04:45.840 --> 04:47.699
X will exit out of that portion.

04:48.240 --> 04:49.289
It's going to ask us, do you want to

04:49.290 --> 04:50.399
save the changes? We're just going

04:50.400 --> 04:52.350
to type of y in there since we

04:52.470 --> 04:53.759
want to say yes, we want to see the

04:53.760 --> 04:55.139
changes, we want to save our IP

04:55.140 --> 04:55.919
addresses.

04:55.920 --> 04:57.419
And then our last step here, once

04:57.420 --> 04:58.379
we're back at this particular

04:58.380 --> 04:59.759
screen, we're just going to press

04:59.760 --> 05:01.529
the enter key, her keyboard to save

05:01.830 --> 05:02.880
that particular file.

05:03.540 --> 05:04.799
All right. So you'll see, once we do

05:04.800 --> 05:05.789
that, it takes us back to our

05:05.790 --> 05:06.790
command prompt.

05:07.260 --> 05:08.760
So let's go back to our lab document

05:09.390 --> 05:10.889
and feel free to pause this video if

05:10.890 --> 05:12.389
you're still working on that first

05:12.390 --> 05:13.390
portion there.

05:14.850 --> 05:15.859
So we've gone through all these

05:15.860 --> 05:16.879
steps here, so we've gone through

05:16.880 --> 05:18.299
step nine, went ahead and typed in

05:18.300 --> 05:19.790
our all those IP addresses,

05:20.630 --> 05:22.279
we then did control X

05:23.180 --> 05:24.199
to back out of that.

05:24.650 --> 05:26.089
We then got a prompt saying, hey, do

05:26.090 --> 05:26.929
you want to save this?

05:26.930 --> 05:29.089
We said, yes, we do by type in Y.

05:29.660 --> 05:31.669
And then we finally saved our file

05:31.670 --> 05:33.079
by just pressing the entropy and the

05:33.080 --> 05:34.080
keyboard.

05:34.870 --> 05:35.859
Ah, so now we're going to go ahead

05:35.860 --> 05:37.179
and actually launch our tool now

05:37.180 --> 05:38.289
that we've created our file, we've

05:38.290 --> 05:39.519
loaded it with IP addresses.

05:39.730 --> 05:41.379
Now we've got something to scan.

05:41.380 --> 05:42.640
Right. So let's go ahead and launch

05:42.880 --> 05:44.350
open versus the way we do that

05:44.860 --> 05:46.689
here is unless you're

05:46.690 --> 05:48.454
a user like on your own machine, but

05:48.550 --> 05:50.139
in this case where a student user

05:50.620 --> 05:51.999
saw a different user than route.

05:52.030 --> 05:53.696
So we need to type in pseudo space

05:54.220 --> 05:56.120
open versus dash start.

05:56.980 --> 05:58.209
So let's go ahead and do that now.

05:58.380 --> 05:59.889
Want to type in pseudo.

06:00.850 --> 06:02.169
So we can change ourselves to root

06:02.170 --> 06:03.999
for this particular command

06:04.120 --> 06:06.129
and then open valves and

06:06.130 --> 06:08.100
then dash start and then just press

06:08.140 --> 06:09.249
enter into keyboard here.

06:10.200 --> 06:11.049
That's going to ask you for a

06:11.050 --> 06:12.309
password again, that's the one we

06:12.310 --> 06:13.649
just use to log in to Calli.

06:13.810 --> 06:15.579
So that's the student all case

06:16.060 --> 06:17.049
and it's not going to show you on

06:17.050 --> 06:18.069
the screen there. But once you type

06:18.070 --> 06:19.899
it into Internet keyboard and

06:19.900 --> 06:21.159
it's going to go ahead and start

06:21.160 --> 06:22.600
open vast for us now,

06:23.050 --> 06:24.819
it may take some time to launch

06:24.820 --> 06:26.679
open. Vohs could take up to five

06:26.680 --> 06:27.680
minutes.

06:27.820 --> 06:29.239
Most cases it was taking about two

06:29.240 --> 06:30.240
or three minutes for me.

06:30.280 --> 06:31.339
But I'm going to go ahead and pause

06:31.340 --> 06:32.340
the video here.

06:32.620 --> 06:33.747
Once it opens open Vohs

06:34.480 --> 06:35.559
and launches everything, it's

06:35.560 --> 06:36.969
actually going to open your Firefox

06:36.970 --> 06:38.587
browser and take you to the Green

06:38.890 --> 06:40.899
Zone security assistant login

06:40.900 --> 06:42.519
page. So once you see that, you know

06:42.520 --> 06:44.439
you're at the right step and that'll

06:44.450 --> 06:45.969
be at step 16 and then we'll be

06:46.240 --> 06:47.240
ready for step 17.

06:47.290 --> 06:48.129
But again, I'm going to go ahead and

06:48.130 --> 06:49.130
pause the video here.

06:49.180 --> 06:50.499
And once mine launches, I'll go

06:50.500 --> 06:52.329
ahead and pick back up with step 17.