All right, everyone, this is mission this session is about the real hacking will be hacking our Windows
10 machine, a victim of Windows 10 machine and decision making use of beef tools.
And as a part of a vulnerable website, it's going to be the best way for this instance, for this lab
will be making use of some more labs as well, like B VAP and some other as well.
But for this session, we'll be making use of Damadian related Web application.
All right.
So let's get started with the beef.
So if you remember the lab correctly, we have we have three elements.
First, we have beef walking on the galley.
Second, we have a the machine that works on the Windows 10.
And third, we need the vulnerable website.
That is a part of SPW.
Wait, that's TBWA.
So let's get started.
Let's first set up our hacking machine on the hacking machine.
That's Kelly, basically.
And we need to start our beef system beef tool first.
Hmm.
Where exactly it is.
OK, sorry.
I guess.
Yeah, that's it.
And did this.
All right, so let's get started.
But beef.
It would be taking some time to load the project.
All right, and here we go.
So the beep beep system has started.
Let's go to the browser.
OK, and we need to go to 127 zero zero upon you, I know, that's what I know, right?
So this is where we'll be managing or managing all the devices.
So currently we don't have any active device at this moment.
Let's keep it on the left hand side.
OK, so this would be our hacking machine on the right.
We need our Windows 10 machine.
All right, here it is and you go, OK, this is our window stand with the machine.
Where will be?
Yeah, yeah, this is our weakness, stand the machine, and we also need our BBWAA.
OK, Bill will not be accessing the machine, but just remember, what's the IP address?
OK, so so this is pretty clear.
What do you see on the left?
That's our beef.
What do you see on the right up there.
That's our victim machine.
What do you see on the bottom.
That's our that's our BBWAA, which is the infected website.
All right.
So let's get started.
What we need first is we need the code, OK?
We need to have those JavaScript code to be ready.
OK, and now the first thing that we would do is will be will be along the way from the victim machine.
Just imagine a situation where the machine has got the victim machine has got some length.
And through that link it is sending, you know, our victim machine is sending some JavaScript posting
basically or submitting some JavaScript code to develop a site which is on the bottom over here.
And we'll see if the BBWAA reflecting those code back to the system or not.
If yes, then it is actually affected.
It is already vulnerable and system will be compromised by the attacking machine, by the beef and beef.
Quickly get the access to the machine in that case.
OK, so let's open the explorer.
OK.
And after doing that, that's.
Let's go to Ben.
All right, so we'll be logging to our OSB, BBWAA, which is and this is all SBW, and in this there
are multiple projects running that are multiple infected sites will be going to TBWA, which is --
vulnerable Web application once you go there.
The default credentials, as I've been advent and then get into it, we can perform many activity with
this.
What is more important, what is more important as far as this session is concerned, it's The Exorcist
crosseyed script and deflected.
OK, so this is a feel, the feel.
This is a feel in this directory.
OK, well you can quickly get to see if this is infected by yourself.
OK, you can quickly get the idea.
And let's see if being a user on Windows 10 on Windows Machine at this moment, if I want to see if
I'm submitting some JavaScript code, is it sending me back as it is or is it making any changes?
So what you can do is just submit any script.
So let me make use of a very simple script.
So this is a syntax, I hope, you know, as of now.
So whatever JavaScript you want to make it in the stock, you know, this has to be decided with the
script and with a script as well.
And and then you can let's say in our case, we are just adding a lot just to give us a prompt.
OK.
Hello.
And once you submit, you see this, you have submitted a scapegoat and is it giving you back on your
system?
That's JavaScript code.
You've got the idea that exactly it is happening.
That means the site, this DPW is actually infected.
OK, so let's submit something over here.
Very interesting.
What we are going to do is will be making use of this whole Geass, OK, will be making use of this
whole year and will be submitting.
Here it is.
Right.
So what it mean to say is I will be making use of JavaScript to be redirected to downloading Ribot's.
I mean, starting to be redirected to our belief system so that the beef get the session request.
So what we could do is we can make use of script again, the same style.
All right, and now, because we want to add a redirection of the site, we have to specify the you
are so you have to start seeing that kid on the first starting the next goal and the final step.
Then the IP address is the door to door, one door, then sorry, one, then three times.
And then it's OK to cheat.
Yes.
OK, so this is pretty much what exactly it is looking for and also keep your system open so that we
could see any situation is coming to it.
Let's submit and see if there's any request coming into the system and we are supposed to have some
session coming back.
We should have some system.
All right.
So that's lovely.
The moment we hit Enter, it took some time.
And now what was there earlier as offline?
Now you see the same system.
Now the system is coming as online.
You see this this active system IP address is then not one dot one, not six.
If you can go here and you see the IP, sorry, I can think you see the standards.
You are 136 Quietist and 210 01.
Well, is because that's the mediator who is the mediator then the the last B.W. with the down vulnerable
application and the mediator which is the requester in between.
So if let's say we go here, we could even see in here on this next step, just after the basic Metsu,
the other tab, which is the requestor requester, is the mediator, which is sending the request on
behalf of the victim.
Right.
So the two then not zero out, one that well, we get this right.
How it can be really helpful.
Remember this in order to the we we have made use of the script.
The script can be shared in the social media platform through any website link.
And people go there, click on the links and there could be hundreds of thousand people get compromised
quickly.
Right.
That's the one thing.
Now, let's do some nasty stuff here.
The station is still active.
Now, what we can do is let's look at some of the information for this or let me increase the size of
this.
And you can see the quickly we do it, we get the all the information of the system.
OK, so the moment you go into details, you get to see about all the capabilities, what can work,
what not.
And you also get the information about the engines, what is the operating systems and everything,
everything you can think of resolution of the system.
Is it a part of any virtual machine?
Yes, it is designed to watch a machine.
Even you can see over here as well.
It is coming in from what your machines do, logs, commands and everything.
What we are really interested about is the commands.
Right.
So what are we going to do is will be, you know, in this case, will try to fish this user or will
try to hack maybe his LinkedIn account or maybe his Instagram account or maybe Facebook account and
how exactly we are going to do that by grabbing those username and password, the credentials basically.
Let's say we want to we want to get the access to his LinkedIn account.
We want hacked his account for sure.
In that case, you can click on social engineering in the command section.
You can see there are multiple options.
I'll be taking it this, because this way you get the real world idea about how those accounts were
compromised and basically happened.
You see multiple options are available.
You would see multiple options are basically being available.
And every every feature those takes to whois user interface, every everything every feature has a different
color to it.
What do you see on the green that basically indicates is exploitable and undetectable?
If you try, that user will not be knowing that what exactly is happening.
And it is completely it can it is completely hackable or exploitable.
What do you see on the orange color that indicates that indicates that it's work for the target, but
it can be detected as well.
You know, and what you see on the other color may be red as something which is not going to work in
that situation.
There could be some great color as well.
If you go in more detail, there could be some.
Yeah.
So you see this gray color.
It indicates that it's not yet verified, so.
Not even beef is not sure that that would really work.
Let's drive it some according to type or something so you can go to social engineering and over there
you will find petty theft and or there you can just try making use of.
Yeah, we can try making use of any any sort of comments I made use of just Facebook.
You can execute our probably you can make use of it and probably I have already tried some.
So what you can do is you can make use of any of such commands or you can make new one as well.
So what I could do is probably.
Yeah, so let's say there's I want to get access to the LinkedIn account in this case, so let me select
the LinkedIn, the you can select what the background is and all the sunbaking stuff, and then you
can define what would be the you are a custom logo and everything.
So you can you can select what would be the defined or your desired logo.
In that case, you can re execute it.
OK, so the moment you do that, you see on the right hand side this is what it is coming this time
out, you can you know, it could be any website it might ask you for, you know, in order to get the
access to the site.
Well, I have you have considered BBWAA, right?
It could be any any kind of site which might ask you to login with your Facebook or Instagram account
or LinkedIn account to get access to the system.
Right.
So that can be done as well.
We can even try with any other stuff, maybe a YouTube account or maybe it's a Facebook account so we
can try doing the Facebook, we can try executing it as well.
And it will be taking effect.
You can try limiting one feature and you can try executing many other features as well.
Accordingly, once the feature has been executed, let's say in this case we made use of LinkedIn,
OK, and we put the password like user test and test.
You just sign it.
Okay.
And the moment users sign in, we get the command results.
So we get the command result as this test and test.
Right.
So this is something which we can keep trying and we'll get the result about it.
But so this is what's the deal when you keep going with it and try to get more and more information
about each individual family.
So this is like every for every commands you can execute all those features.
Right.
So you can do it for Facebook, you can do it for LinkedIn, or maybe you can customize your self and
then execute that.
And the problem will come up for the user end user type.
His desired is actually ID and password.
For him it would be invalid.
It will say it's invalid password for for us it would be the commands that comes to us.
Right.
So that's how we can keep trying it.
And we get more information about what exactly happening on to the system at this moment of time.
I hope you got the sense about how to make use of a contact are probably for if anything, maybe, but
LinkedIn, Facebook or any sort of stuff.
As you have seen, this is being available for you know, this is being available for many of the comments
I so you can drive at LinkedIn, Facebook when Windows ideas and everything as well.
This was this was for learning purpose and be there whenever you tried this.
And remember this, the browser like Chrome, Microsoft page, keep, you know, keep keep the other
security patches updated.
And so that to come over come from this kind of football abilities which can be exploited to be.
So there could be a situation where in such command it doesn't work on Chrome in such some situation.
Or maybe Microsoft is.
Well, I mean, Microsoft age.
Well, and if there are some victim machines which are not updated, it is definitely going to work.
But for some of the system, it might not work as well if those are running the up to date system.
All right.
So I hope you got the idea about how to how to take the how to hook JavaScript to the system, how to
send some, you know, a blog.
I mean, login box as well for the user, maybe for different accounts.
I hope you got the idea.
We'll get you in the next session.
Thank you.