OK, now it's time to talk about the need to get my cat is one of the original network penetration testing
tools and, as they call it, Swiss Army knife.
So this utility reads Android data across network connection using PCB or UDP protocols.
Now first, let's have a look inside it.
So here in the terminal men and see, as you can see, it is a Swiss Army knife.
Simple Unix utility, which reads like that across networks.
OK, now first try connect to somewhere else.
So pseudo systems to check the status of the Apache.
You can see that Apache is still up and running.
So Nrsi Dash N.V. now stands for disabled DNS resolution and V stands for for more verbose.
Now, actually, you can read more about it from the menu at which I got these from there.
And then what?
IBM address, then the port?
No.
Maybe it will be the local IP address, by the way, as you can see here or if you want.
By the way, this is for the Loop or the local host.
You can get the IP address by using the I config.
OK, so here it is our IP address, as you can see now and see Dash and V, but the IP address the board,
which is 80, this is responsible for about.
How did I know that by using.
Yes, you are right.
Netstat, Dash and TNP comment as we last previously.
As you can see, the Port 80 is open now again and see Dash and V.
But the IP address, what about no?
And if you can see when I try it, you can see it is open and we can book command and boot whatever
we want.
But by the way, this and behavior is unexpected because we are sending about requests, by the way,
about the requested hour or so that indicated ex-chairman that we sell.
Or the main page of the browser, so this doesn't make sense, by the way, but I'm just showing you
how to use the NC.
OK.
Now we can use and see it within it and see with the pope three well responsible for the email for us
SNP, a simple network management protocol and a lot of other boards and verticals.
OK, now let's clear the screen and I want to open a new chairman at OK, like this?
So here we have on the left and we have on the right.
OK.
Now here on the right and here on the left, so and then if we want to use this time to open to listening
on as TCB or you to be bought.
So I would use Dash and the LP OK now and as we learned previously to disable DNS resolution, we which
means the anesthesiologist or you will not search for the IB or the domain name, you just get the IP
and put it as is V for various or to get to get more output, L for listening and P for for the vote.
No.
OK, so I would put the port number and I would put nine nine nine nine.
OK, now press enter.
As you can see, we are listening on any.
As you can see, which means any IP address and we are listening on board nine nine nine nine now here
on the right and see what the IP address.
OK.
As we learned previously and with that, the board number.
Now, if I press enter, you can see that, yeah, we have a connection here.
All right.
So if I type and as it will be there.
But you can see it is not just a command.
It is just like I checked so high there.
Who are you, for example, you can see that it is receiving here.
I am No.
One.
Whatever, OK?
As you can see, we are using it as we are using a jet.
OK?
Now, as you can be used to transfer files, OK?
But actually, it is a bad practice.
I will not handle it here in this court because it is a bad practice, by the way, to use and see because
it is an encrypted protocol or an encrypted connection, they say.
So I will not hand that here.
OK.
You can read more about it.
We will use that direction.
And as simple as that.
OK, now the most important feature of the ANC or the usage of ANC.
For us, the theory that red team that Dakar's which is opening a reverse shin.
OK?
Now, please don't get confused.
Now attackers are mean that we are the red team that detecting weakness in the system.
Not to damage the system or how any system or whatever.
OK, so here on the left, let's imagine this is the attacker machine.
And on the right, this is the victim machine so embedded in the attacker.
We will use this command and see Dash and the ANP, as we learned previously.
So here we are, the attacker.
We are listening and waiting until the victim sent the request to us.
OK.
On the right here, the victim machine, we will use the ANC, but the IP address of our machine?
OK, which is our attacker machine and with the board that you are listening to, as you can see.
But we will use the Dash E option, which means execute action or execute a command or execute a utility,
and that utility will be the best bin bash.
So I am executing a bin bash on my machine and I am signaling that to the attacker machine.
So on the victim machine, we are executing best, as you can see.
And when the attacker here, we can use less.
You can see, yeah, we are seeing everything here.
OK, so you can see that unless this is inside the victim machine, not inside our machine.
OK.
If I type such text, just the text, for example, and as again, you can see that it should be here,
by the way, because I'm using text that we already have it here.
By the way, you can see that the arrows and whatever are not working as you can see this command here
we received not found because this is not a sophisticated chill like the terminal.
This is just the symbol bin bash.
OK.
So touch, not the text, for example, unless you can see that here it is, not text.
OK.
And well, this is the just the basics.
Now, by moving forward with this course, we will learn the techniques, the tools, how to hit the
victim to open such a fashion by executing shell command, by visiting websites or whatever.
OK?
Don't worry.
This is just the basics.
But keep that in your mind.
How to open a reverse shell on the victim's machine by executing Bash Bin Bash And we are while we are
listening on that specific connection with board.
No.