Welcome back, everyone.
This is the lecture on A&E, in fact, about major on planning.
OK, so this this is the beginning of a section where we'll be taking our first example for hacking
that's attacking Windows 10 on pre attack fees.
So understand this.
We have talked about five pieces.
So what I'm really you know what I'm actually referring to.
It's all about before exploitation, before the post code phase.
The first and second, the the information gathering and scanning comes in to pre attack phase.
And that's what we are going to talk about, will be will be talking about information gathering and
scanning fees in this case for for targeting and even understand why we understand it.
Just that there are two reasons.
First, I want you to understand that we want to we want to practice something which is latest, which
is all updated.
We we can actually take an example of all the Windows seven and all those machines.
But because now they use it all, all all the folks are all the users, will making use of Windows 10
and making use of old technik won't really work for them.
So it is I'm making sure all the content are updated.
Second thing is most of the audience out there are Windows 10.
So it is it is good for us to understand because that's what a real world really looks like as well.
So what is planning basically for to win any war, to win any stuff planning is must we have even seen
in the world?
And where are we example as world commander example as well.
So before we could even start our exploitation or start over hacking, we need to understand who is
our target?
Is it really a single user or is it an abuser?
So what I'm really talking about is if the user a bit different, but if your user is random, if you
want to hack any random user out there globally or you want to be specific, let's say, about Adam,
you know, maybe James or anybody is right or maybe the specific employee of a specific company or specific
user of a specific location or specific name of the employee or whatever it is.
You know, if you specify you you are OK to have any Windows 10 or you have a strict hacking in your
mind that I want to hack this person.
Right.
So this is something that you have to clear before you go further.
All right.
And the hacking approach for for exploiting or compromising a target machine is very different.
Hacking a random user can be like, you know, kind of it's good for it's economical for fraud, fraudster
or, you know, cybercrime activity where they launch a campaign or launch an efficient e-mail campaign
for like millions of people or thousands of people worldwide.
And they think, OK, economically, if I get ten people or twelve people to click on it and they can
you know, they can be redirected to the some phishing sites and that they can grab some money out of
it or anything.
So that works for for cyber criminals.
Right.
But for ethical hacker or sophisticated hack, it's all targeted.
It's all specific employees or specific users of a specific organisation.
It could be institution.
It's could be any organized, it could be any company as well.
So in that situation, what what are the different methods?
So you have your attacker ready.
You have your malware or payload ready.
What is the method?
What are the possible methods available is either you can make use of USB, you can put the malware
into the USB and then you can insert into the system.
But that some sort of, you know, that needs a physical interaction that needs person to be physically
available and he can who can insert the pen drive and all those stuff.
Right.
For for for doing something in the in the in the user of any organization or company.
It could be even more difficult because that gives you have to pass or you have to cross the physical
barrier as well, physical security barrier as well.
So there are challenges, easy or quick or simple method could be a phishing emails, but that's the
95 percent of time that's the most effective and.
Some of the more interesting way which has evolved very well as the social media adnoc not remember
that these are all approaches, these are exploit method approach.
Basically, you still have to develop your malware.
You still have to deliver your payload will be making our payload ourself.
But you need to decide which method you would be.
You would be opting for delivering that payload, for delivering that model.
Right.
Either you can share through EMY and attaching any files which contains the malicious malicious payload,
which I'll teach you how to do that social media attack as well, which you where the hackers, you
know, impersonate with some of idea or something and then they share some suppliers or they probably
get the immolators account and they compromised the users as well.
Now understand this.
Why are we doing this from fundamentally?
Why can't we just simply if we know a person, you know, if we know a person, if we know our target,
why can't we reach out to them?
Why, why?
Why?
We can't really directly reach out to the system itself, to be really honest, to raise it.
And people folks who understand the Internet or architecture or DCP IP, well, they it's basically,
of course, will be covering the Tsipi stack in detail as well.
But understand this way, there are two reasons.
First, as every system that is being used by home user or the organization, it's hidden behind a router
hidden by a router.
So you have a router which basically translates your private IP, your system IP address.
But the external IP address with that, the external party, the attackers or anybody out there won't
really get the idea of what are the system, what is the system, actual IP address.
So there is no idea somebody can get the information about this user.
Another, as there is by default, all the old all the incoming request from the from the external party,
from the untrusted party or from the public network is blocked.
You can never find Facebook popping up on the system and asking, OK, hey, are you interested to post
some blogs or something?
No, that's not going to happen unless you go out.
The request never comes back.
And that's the that's the Stapleford behavior that the connections connection approach.
Basically, that's how the three way handshake DCB stack really works great.
And that's why once you once there's something inside your system, once the payload is in your system
and that sends the request out there, then the payload or the execution can be done on, then somebody
can be reach out to your system.
Right.
So that's exactly what works.
And that's why you need the malware to be available on your system.
And that has to be intentionally downloaded by yourself or maybe by any other method.
Right.
So that's completely planning fees.
And because this is all about hacking Windows 10 machine, we are we are not talking about hacking.
We have application and this example.
So will be very much on this track, will be very much on will be very much talking about hacking or
payload or malware or exploit related to the windows.
All right.
So I hope you got the idea.
In case you have any question you can ask me the security.
I'll be there for you.
Thank you so much.