OK, so now let's go through actually how to set up our virtual networks, sewing machines will be able
to talk to each other and our laptops can actually talk to our virtual machines.
So what you're going to want to do on a callisthenics machine, in a virtual box window, you're going
to want to right click and again click on settings and then click on network and change the attached
option, the attached to option to host on the right.
So this is going to do is going to make a career as a private network with just the host so that, you
know, your host has an IP address and your kind of little exposure has an IP address and they can talk
to each other.
OK.
So now let's go through the process of setting up our target machines, so we're going to set up to
target machines right now.
The first machine is called Métis Floatable and the second one is called O.W. Aspey Broken Webapp Machine.
So these are virtual machines that are made vulnerable on purpose, you know, for educational and training
purposes, you know, like this class.
So we're going to use them as our proving grounds or training grounds in a sense.
So you can download them from these two links right here.
And you're going to notice that they come in the form of MBK files.
And that just means that, you know, we just have to select this file as the hard drive when we create
the virtual machine, if you remember that option during the process.
So now actually go through the process of doing one of these sounds and click on the link.
I'm going to click on Download, it's going to say download.
Surely you don't have to click any links of buttons that'll do it for you.
So don't worry.
So now let's see, let's put this on the desktop, it's safe and it's going to take a little bit of
time to download.
So once that is downloaded, we're going to come back and we're going to extract it.
OK, so now we have a zip code downloaded.
So I have seven zip results.
I can just right.
Click here to extract here.
And it's going to extract out the Dabic file, as you can see right there into this folder, metastable
two Dash Lennix.
OK, so that's what a VMT K file is going to be that we're going to want.
So once this is done in a couple of seconds, there we go.
We're going to open a virtual box.
We're going to click on new I'm going to name it Métis Loadable Spolar.
I think so.
Change the title to Lennix.
I just choose the next two point six kernel version and you can keep these as the defaults because these
are these machines are for performance, so it doesn't matter.
So right here is the option.
I was talking about using existing virtual hard disk.
OK, so you're going to click the little folder right here.
We're going to click and we're going to do a desktop mislabel two and then choose this file right here.
And I see you click on it, Double-Click, on a crate.
And now we have a major splitted machine with the right click.
It hit start, no start.
And it's going to boot up just like, you know, just like the counter machine did.
But it's a lot faster because it's already a creative machine.
We're just booting it up.
OK, and then when you get into the main screen, it'll give you the login information if you want.
But really, we just want this machine up and we want to go through and actually do then the host only
network settings like we would like for the coffee machine.
So let's walk through that really quickly.
So for the coffee machine, right, click settings, network change from that to host only adapter,
right.
And we're going to want to do the same thing for metastable.
So Settings Network and then host only clicked the wrong one, host only and then we're good to go.
And then you want to do the exact same thing for the Broken Web Apps VM and then we have our target
set up and they can all talk to each other.
OK, so now this next step is optional.
You can do this if you have the capability to do so.
But we're going to also want to set up an active directory domain.
Whether you do it or not doesn't really matter because I'm still going to showcase the attacks.
It is the actuator.
I do the main but the main step, the main reason for doing this one as well is just to give you a better
idea of what you actually see in the real world if you would have become an ethical hacker or a penetration
tester.
So we're going to set up a domain controller as running Windows seven, twenty, twenty, twelve and
a Windows 10 client that's going to join that domain now.
And like I said, I'm going to showcase some attacks.
So that's why we're going to want to do this.
So I have these links right here that you can go to where you can download the ISO files and just install
the virtual machines, just like the other ones that we did.
We used ISO file to install it, kind of like the Sky Linux VM and then you just setting up from scratch.
And I'm going to walk you through some of the settings for actually setting up the domain is pretty
quick.
The project is less than like 30 minutes to do it and then we'll be good to go.
OK, so now we're just going to go to the basic set up for Windows Services and 12.
So when you get a problem with this screen is to start now, it's going to start the set up process.
So you want to choose a second one where you're going to choose the server with a GUI or else you're
just going to have a command line except the license terms, custom install.
You're going to choose right here and click on next and then it's going to go to the install process
is pretty is pretty pain free.
So just go through this and get back to setting up Barg.
OK, so once that process finishes, there's just going to reboot the virtual machine and you're going
to have the Windows logo here and it's going to be loading is going to boot up for the first time.
Then it's going to go through some initial setup and then we're going to start to set up a domain controller.
OK, so we're setting the password for the administrative account on the domain controller.
So super secure password.
That's not the password.
The password.
Finish and now we have a log in.
So you're going to want to send a control or delete, appreciate and, uh, answer Chudleigh right there
putting a super secret password
that's going to lock you in for the first time.
And it's just like any other computer, when you first log in, still in some setup stuff might be a
little bit slow.
But what you're going to see is when a server, there's always something called server manager that
pops up automatically.
And this is where you're going to do a lot of the initial, you know, setup for your domain controller
or just in general, we're going to say, yes, we're here.
So we're going to let that load up and then we're going to be able to set up our domain.
OK, so from the dashboard, the first thing that we're going to want to do is configure this local
server.
So one thing I like to do is change the computer name.
So going there, click change.
I already have it here, but like domain controller, Labbe DC, whatever you want it to be.
Unfertilised DC Fellag domain controller.
And I'm going to hit OK, and then it'll ask you if you want to restart.
So the changes will apply but it'll have to do that right now.
We just restart later.
It's not really we do.
One of the things I like to do is make sure that I know what the IP address from my devices are.
So you can go in here and you can actually give me a static IP address so that you always have this
IP address, which is on the network.
So I think our our address is 192000 one six eight, five, six, and then we can give it whatever other
address that we want.
So let's just make it 20, for instance.
And I believe that is going to get all of them automatically or subnet mask that we want.
So remember, this is like a 24 network, so there's only two hundred and fifty six possible addresses
for this one.
So we're going to hear, OK, on that X this stuff, and then that's some of the initial stuff that
we need to do.
So now we're going to want to do is go through and set up.
We're going to add up our roles and features for to make a choice.
We have to make this, you know, a domain control their first.
So you're going to click on and you're going to click there.
And before you begin, just skip this page.
If you don't want to see it again, and then we're going to do role based or feature based installation.
We'll get you this server right here.
Don't worry of the IP address.
There's no way about it.
That'll change when the computer restarts to the static one that we chose.
So now we're going to want to check active directory domain services, Indianness server.
So it's OK for us to do our domain services and then also DNS server.
OK, and that's all we're going to need for now for what we're going to be doing down here next.
And then just hit next on this right here, sheepherding next, and we should be good to go, and then
we're just going to to restore Mattingley just, you know, to restart if we need to hit a store and
it's going to install those features.
And now this is going to be our domain controller.
So now once this restarts, we're going to go through some more settings to actually, you know, set
up the domain and promote it out to other devices on the network so that they can join the network,
join the domain that we just never going to be creating.
OK, so now we're going to go ahead and get a domain.
So we're going to click right here.
And it's a little flag with the little yellow triangle that looks like an arrow click on this server
to a domain controller.
So then now we're going to click on Add a new Forras right here when the option is available.
This is going to allow us to name our domain and actually go through the creation process for our domain.
So give it a minute and it'll pop up.
I just rebooted the computer, so it's a little bit slow.
OK, so another option is available.
So just click on ADD New Force.
I'm going to name this ethical hacking lab that's going to be the name of my domain that I'm about to
create.
So next and then we're going to want to put a password right here.
Don't forget the password just in case you never know.
Keep it simple.
And that what you're going to click through, everything else is populating all these initial settings
for our domain.
We're going to hit next.
It's going to check for any prerequisite.
It's going to take those prerequisites for any issues or areas that we might run into.
So it's verifying that, you know, we're able to make this server the domain controller.
So to give this a minute will verify.
You can pretty much ignore these errors.
I wouldn't worry about it too much.
So let's go ahead and install.
And this is going to go through the process of creating our domain and making this the domain controller.
So let's go ahead and let this lower, then we can determine next steps.
OK, so now we're going to have to restart the computer because we did install, you know, active directory
service like.
And then after we do that, we should be good to go.
So one of the things we're going to want to do is that we're going to want to create an actor director
or we can create a couple.
But really right now, we need to create one for when we do add the Windows 10 machine to the domain.
So we're going to go ahead and open up active directory.
So let's see.
We should be able to type it in here and it should come up.
Give it a minute.
Actor, director, use the computers.
So we're going to open that up.
Actually gave this thing rams a little slow.
OK, so now an ethical this is ah so you see that we are a domain here and we're going to click on users
and then we just right.
Click anywhere new user and we give her name.
The name is Paw.
Victim, you know, you don't really have to give it a name if you don't want to.
You might have to actually.
So put your name full name for victim use the login name.
That's a poor victim again.
And this is probably saying, you know, that's the law line for this domain.
And that's their login username.
Pretty much so.
OK, next, we're going to have a password.
Uh, let's see.
Just any password, really, obviously keep it a little bit simple.
So just, I don't know, password and then password.
And I'm not going to make them change you when a login for the first time and I'm going to make it so
that they can't change their password and that it never expires.
There we go.
Perfect.
And they finish.
OK, I guess that the some complexity requirements.
So, see, uh, one exclamation point there is I should make it better.
I should point.
There we go.
And now we have a domain account on here for that machine when we do create it.
And now then we're going to be good to go.
OK, so once you get through the initial Windows 10 set up, you can choose this option right here,
domain join instead.
And it's going to allow us to join the domain that we just created.
So now we need to put in a name.
So, you know, we know that this is a victim, of course, and we're going to make a password for them,
uh, just for.
And I would just make it password.
One exclamation point, which make it that one more time, and this is like the local account for the
computer and it makes you do all this security stuff.
So go ahead and do that.
I'm going to get to it.
So when you get this green, you just hit acceptor, turn off some of this stuff.
Like I mean, if you don't want all this stuff on which you probably don't, just go ahead and turn
it off, turn all of them off and accept.
And then was probably going to load us into our screens soon and then we can do our initial set is very
quick with this one, which is going to change the hostname, give it a static IP address and joined
the domain.
OK, so once you have Windows 10 loaded up and you go through, you know, all the basic, you know,
initial startup settings for Windows 10, the what we're going to do here is very, very quick.
So what we're going to do is we're going to change your IP address.
So what you can do is right.
Click on this icon right here, the Internet settings.
Ethernet change adapter options.
Right, click here, properties, and we're going to double click where you see I IPV for Internet Protocol
Version four and we're going to give it a specific address to use for the IP address.
So nine to one six eight.
OK, it's not working.
One, two one six eight five, six, then dot twenty one.
That's what it's going to be for.
This one is going to automatically give us a sound mass that we want and we're going to keep the default
gateway to where it is.
And then we're also going to set the DNS server as the domain controller.
This is going to allow us to connect that to the domain so that twenty.
Here we go.
So now what we can do is we can open up a command prompt.
And then we can try to see if we can ping our domain, so let's see what happens.
So open a command prompt.
So Ping, remember, Meile was called Ethical Hacking Lab and bam, we can pick the domain.
So that means that we can join.
OK, so now let's actually go through the process of joining the domain now that we know that we can
connect to it.
So let's go over here and open up our control panel.
We're going to click on a system and security.
We're going to click on a system and then we're going to click on change settings right here.
And it's going to allow us to change our name on the computer as well so we can change Windows 10 Dash
Target and we're going to join the domain.
Click the box right here at the Code Hacking Lab..
There we go.
That's the name of our domain.
Enter this here.
OK, right here.
That's how big of a deal is that bio's name?
And now it's going to pop up with a box that's going to ask us to input administrative credentials.
So this is whatever the admin credential you set, you know, on the domain controller.
So let's go ahead and try that out now.
Super secret password.
Now we're now on the domain, so we're good to go, so we hit OK, and now we have a domain where we
can.
So what we're going to do is we're going to have to worry about that.
So we have to restart our computer.
And what we're going to do is we're going to log in to the computer with the poor victim account that
we created.
OK, so when once you computers restarted, you should be a member of the domain.
So we're going to pick our other users.
I was going to say sign into ethical.
That's the ethical hacking domain.
So what we're going to do.
Let's see, poor Victor, and then we're going to put in the password, I should sign it into the domain.
And it's going to be an initial log in for the domain, so it might take a little bit of time and it's
going to do this right here, even though we were logged in before, because now we're logging in with
the domain account.
OK, so once all this stuff is done, you're pretty much good to go and you have to remain together
and we've got to be able to use it when we start attacking our networks.
OK, so now that we have a lab set up and everything is supposedly on the same network, we can go ahead
and test connectivity, which we machines.
So you see some screenshots here.
These are showing the command prompt output from when I ran, you know, the IP config.
I have config commands.
So before we do this, just make sure that they're never going to be sitting for each VM is set to host
only mode and then that's going to allow us to test test the connectivity by doing a ping.
All right.
So like I said, you could find the IP address, open up windows and type in IP config or in Mac or
in Linux type.
And I have coffee and the version of the virtual machines that they're Linux.
So use I have to find it.
OK, so now let's actually go through the process of testing connectivity between these and we actually
got that actually works.
So I'm going to open up a command prompt that's IPV and we're going to look for one that says Ethan
and Ethan adapter virtual box host only network.
Some I address from my laptop on that network that is set up is one nine two one six eight five six
dot one.
So now let's go over to our political machine.
I if config.
Now, if your address doesn't start with the same one nine two down one six eight, whatever, as your
host, as your laptop does, try to reboot this because you might need to reboot it after you change
the network adapter sitting.
So just keep that in mind.
So now that we know that they're pretty much on the same subnet, I could try to pin one onto the one
six eight, five, six, down one.
And we're getting we're getting responses back.
So now these machines can talk to each other.
So that's awesome.
So just be you guys reference as well.
I want to let you know where you can find other machines that you could practice on.
We'll talk about this a little bit and then, of course, as well.
But I just wanted to, you know, offer this hour right now, if you want to expand your hacking lab
to test on some things as you learn, here are a couple of options where you can get some virtual machines
to test on.
So on Hub Dotcom, they allow you to download virtual machines that were intentionally made vulnerable
so that, you know, you could practice hacking.
We'll warn you that some of them are extremely hard.
So be careful and then also have the box that you use, a site where you can connect directly to a network
of vulnerable machines in an attempt to hack into the practice.
But the catch this Web site is you have to hack into the Web site to actually gain access to us.
That was pretty fun.
Don't cheat.
All right.
OK, so we've got a lab set up.
So what's next?
So before we dive into the first stage of hacking is actually essential that we go over some Linux and
the scripting basics.
So I'm going to quickly go over some Linux fundamentals, Python fundamentals and Basche basics so that
you're ready to encounter and use them when you're hacking.
So I appreciate you guys for watching this section of the course, and I'll see you in the next section.