Hello.
Uh, in his lecture, I shall we will, uh, I have installed the Metasploit Framework, which is the
vulnerable Linux, actually.
So in Metasploit exploit, not Metasploit, well, operating system.
So this is the vulnerable operating system that you can find kind of, uh, vulnerable relatives, uh
and, uh, Metasploit designed for exploit.
And so this, uh, operating system is not secure.
So in this lecture, we will um actually try some penetration testing, uh, in this Metasploit here.
So I put and they captured in installation video how, uh, these images below eatable operating systems,
uh, do lots of instance in your virtual machine.
Uh, so let's get started by, um, inputting some commands.
So, uh, we will conduz a person with Metasploit here.
So, uh, all these.
Uh, let's get informed with, uh, in my year clear and map s we uh, we will also do an operating
system determination here.
For this, we have to use sudo command here.
And um, actually.
If confusing, what is our IP address is one and 32, so.
Zero.
Uh, twenty four.
So I will uh, you will learn what this twenty four is.
Uh, so just.
Now, consider this um, this went for that, I am telling up scan from zero to 255.
So, um, this feels kind of, uh, networks in our um, no.
Local area network, so because of that, as you can see here, the netmask is 255.255.255.0 zero,
so this means the zero can change, but these will stay.
So as you can see here, we had.
Tried and my scan here, you can see this is the our vulnerable Metasploit Apple operating system,
as you can see here running on Linux 2.6 point.
Um Horses', which is portable local domain.
Here and this, you can see we have several open ports, which is these ports are basically vulnerable.
So I think as you can see here, this is somebody's assembly, which is has lots of exploits on it.
Um, actually, as you can see, we we have a road show here.
We have a vulnerable mice girl.
Actually, I think this is the vulnerable version of my scale.
Uh, this had this to some kind of exploit or what?
Um, as you can see here, we have we can see, uh, over really.
I see here protocols and we have so many, um, things that has vulnerabilities in it.
So, uh, now we will do these same techniques, uh, using, uh, using massive console.
So let's get started.
It was a console here.
We started our research console here.
Um, actually what you like web service?
Yes.
Actually voice.
Is it because, uh, my savings still actually see the desktop unless, of course so.
Oops!
And yes.
I think it was OK in.
Yes.
It was if.
Very safe.
Yes.
We saw it again as she revealed the A terms, a message.
It's very authentication.
So it's and as you can see it, our massive is started.
So now I will use DB in my comment db nib in map here.
So after that, these we can, um, just put your basics or in parameters here.
So consider this that we are using a tool.
So now see, we will.
You will see it.
As you remember our Metasploit.
Um, we determined that our Metasploit IP address look like Pedraza and fit 135.
So in that amount to two point.
Here now, we are doing actually a port scanning here.
So now, uh, this will tell us that, uh, which port is open and uh, was what this port is working
for?
As you can see here, we have, um, actually.
Ports open.
Uh, there's these ports has, uh, vulnerabilities in it, and we will break this policy.
So, uh, actually here and we can see that we run the B in, uh, d b in here, uh, um, command.
So uh, actually, now I will run this command again, but with p and uh, parameter here, p and parameter.
So what this p m parameter will do, um, is that it may will give us more detailed.
Information.
And we are waiting for it, waiting.
And as you can see, I'm a said British police reports on incorrect results, as you can see here.
Michelle is.
He was pretty similar results, so never mind.
So the first, uh, we had the ping request has um, we had to set the P and switch in the in common,
which denotes no ping scan here.
This means no ping scan.
Uh, we can see we have also defined and uh, essary here, uh, which denotes inversion scan.
So having several servers up and running, we can see that the target has, um, the ports open.
Uh, so as you can see, a report one hundred forty five, uh, open.
So this is the netball's, uh, port.
Uh, so.
In actually in Windows Port 445, mean eternal blue, eternal romance port.
So actually, this port have proven to be very successful against Windows seven and Windows Server.
Um.
To handle the two thousand eight and so on, so in this sport, so this port, um exploits me, this
port exploit named was a tunnel blow.
So you actually it's um made a vulnerable if someone's very vulnerable port and service.
And actually the service was I yeah, I say remember, the service was eternal service and used four
hundred four to five ports or in some Windows versions.
It can't, um, open.
Uh, we did.
So.
And that said so.
But we are, uh, using, uh.
Uh, actually, we are using Metasploit about, uh, as.
Uh, well, a tech machine, Typekit machine now.
So if we used windows, we can hack these this field.
But in Linux case, this is the I know there's no port, so I think this is the vulnerable.
Well, because it's a Metasploit will almost be very attached and all of there are more.
No, so this is the penetration testing.
Um.
Operating system, uh, some.
Signs, we are not sure about the operating system.
We can run in screams so.
So now, actually, we do here, as simple as you can see, this is the assembly, the UH, as well.
But now we will actually run the assembly, the UM script in the map to determine which version is using
this port, actually, which, um, operating system and we and we is using.
So, uh, let's get started.
So, uh, in the here, we will use same command, um, db and map here.
And um.
And we will add here, um, Pete, in.
P and P four hundred forty five is Miss Port 445, because we will scan this and we will scan almost
all of the reports as well, and we will use scripts because now we've allowed the script parameters
script and here we will, uh, use this script that named SMB was discovery SMB, uh, OSS.
Discovery.
Here and we will give.
And we will give an IP address of a machine Typekit machine.
So one hundred ninety one hundred ninety two point sixty eight.
Eight point one hundred thirty five, right?
Yes, this was thirty five.
And after that, uh, just click interface.
And as you can see here, uh, we can get information here.
So let's um.
Well, let's find out at the end of the reports.
To find more information about it.
So this week's 11 port is up for actual I think it's the graphic drivers port for Linux here, as you
can see here, almost we have so many ports in it.