All right, welcome back, everyone.
And before we get started to the real lab, the demo, in fact, of Reflected Exercice Adak, let's
understand how our lab really looks like.
OK, so in our lab setup, we have our system and platform.
An IP address platform is basically the operating system and the system could be any tool that I'm dropping
about.
So we'll be making use of beef in our case.
And beef is the exploitation tool, browser exploitation tool, basically, which we will be making
use of.
Let me tell you something.
I will not be making use of legacy method of showing you.
I will not be using it personally to show you, OK?
It is getting compromised.
OK, see, we are getting the code, you know, JavaScript back and all the stuff will be making the
situation as if it's a real attack happening from the victim to the attacker to the actual vulnerable
side.
So I want you to look and feel the what exactly happening from the hacker and victim and the website
point of view, vulnerable website point of view.
So will be make use of browser exploitation framework.
That's beef.
And that's basically a tool which is a part of Khaleel Index.
So if it is not, I guess with 20/20, it's not really clearly 20/20, it's not a part of it.
So in fact, you can install it, but it will be and it will be downloaded and installed on your system.
The IP address in our lab is standard 0.01, not six.
Then we have a victim of will be make use of the latest system.
We will not be using the machine, maybe Windows seven.
We stand all the time.
Right.
Not even XP for sure.
Um, so will be making use of Windows 10 here, the upgraded machine with bad system antivirus running
into it.
The IP address of the largest of the Windows 10 would be done door to door.
To understand why I'm telling you this IP address so that when we make use of the lab, you understand
where exactly we are going.
Right.
And then we have the way that's basically part of all that's BWV os BWV.
It's basically a Linux platform, which is being which is a project by by Overspread, which is a broken
web application and a DB W8 just one of these subprojects subtable, which is the down vulnerable web
application.
So when we look at the BBWAA BVA Broken Web application, there are a set of tools into a set of infected
application, infected or vulnerable web application.
David W.A. is one of them.
Right, and I'll show you when we started installing them.
So the IP address for this is standard product one, two, six.
Let's look at how exactly it would really look in the lab.
So this is how the laboratory looks like the beef would be used by the hacker in the candy machine.
Windows 10 would be, of course, over the machine.
Who would be receiving the e-mail to you can get the idea will be in the windows, then looking at the
mail will be clicking on and on and on content or phishing email and will be redirected to the W.A.
So mostly will be on the windows then to see how we are getting compromised from the victim point of
view, from the hacking point of view, will be working on the PIF, will be there on the tool to see
what exactly user is doing and how we can compromise the user by by making use of many of the escalation
or many of the social engineering tools as well.
Right.
And the VW is, of course, just an infected application where the output sanitisation is not really
happening.
All right.
So I hope you got the area and the lab said it was clear to you I will get you in the next session.
We will get started with the real real demo for the reflective garrotted scripting in that.
All right.
Thank you.