The first step of attacking is analyzing, so we need to gather up the information that we gathered
during our information, like all of our passive active reconnaissance and, you know, analyze it and
figure out what we're going to do.
So this includes, you know, for example, looking at the resources and map and any other scans that
you might have done or any of the testing you might have done in compiling a list of IP addresses,
operating systems of host names.
You know, like at what ports are open.
You going to see if you discover network shares, going to look at discovered user accounts and then
also, you know, potential vulnerabilities that we might have found.
So with what we did, we already kind of know, you know, the targets.
We know what the operating system is.
We know we're doing better split-Level right now.
And we also have like a Windows 10 machine that we can also target as well.
And we know the IP addresses and we kind of saw, you know, the different services and such, you know,
that were listed when we did like MRI scan and a version scan and stuff.
So let's go ahead and look at that information really quick and see what we can, you know, start to
start to get our brain going a little bit.
OK, so I'm back on my Linux machine and I put the results from a map scanned into a text file so I
can look at it, you know, where I need to and just see what ports open.
So I see all these ports open.
And also I did like I believe I did a Virgin scan as well.
We go down and start to get more information on what's running.
So like, for example, Port 21 running versus FTD two point three point four and anonymous FTP login
is allowed.
That's something that you want to write down and actually go ahead and verify.
You know, that that's that's an attack right there, like trying to connect via FTP and see if, you
know, we could transfer files back and forth.
Sea Port 22 is open and is running open, as is age seven.
He won.
So we want to do is actually go and, you know, look up exploits, you know, for this version and
see if there's something that some type of information or something we can gain from taking advantage
of, you know, that service being run for us.
Specifically, Port 23 is open, so telnet might be used.
So that's a as you know from the networking section, Telnet is unencrypted.
So if you were to find a way to use that traffic, you can gain, you know, usernames, passwords,
sensitive information, all kinds of stuff.
So interesting.
So what you really want to do is, you know, go through and start to look at these different courts.
You start to get an idea coming right down or just one by one, you know, go through what we're going
to what we're about to do for, like, searching for exploits.
Soon we you can just go through one by one and just search for exploits for, you know, these different
things right here.
Apache, EBD, two point two point eight.
You will look for X, Y specifically for that and just look through these things and start to get an
idea of, you know, what you can do.
This thing is very exploitable.
That's why it's called metastable.
So there's a lot of different things that we can do.
So let's just jump right into a really basic attack first and then we're going to start to get into
exploits.