So now that we know how to get the expertise, you know, you know, multiple locations where we can
find them, we're going to make sure we understand, you know, what is doing and make sure that it's
set up correctly.
So, you know, this is not only to ensure that it's going to work, but ensure that you don't cause
harm or damage to a system that's going to be attacking, especially if it's a client, because you
don't want to do that.
It's the last thing that you want to do.
There have been many cases where, you know, exploits actually have a malicious code and they would,
in fact, or destroy computers, you know, that there were launched against.
So just always, always be careful and be sure to read over these things and make sure that you know,
you know what's going on.
So this kind of brings me into, you know, dissecting exploits.
So to better understand them, you know, you have to open them up and then sex ed or look at them on
the exposed deep Web site and actually see what the code is doing.
And, for example, you know, you might need it locally because you might need to edit the show code
for it to work properly.
And show code is pretty much like the command that's going to be executed a lot of the time that's going
to create a connection back to your computer.
You may have to edit that sometimes.
You may not, but it's something that you definitely looking to make sure that the Chalco that's in
and that is in there isn't any, you know, malicious is going to destroy or connect back out to like
a command and control center somewhere.
And, you know, you might also need to understand what kind of arguments that the exploit needs to
actually launch correctly.
So that's actually going to colonics.
And let's look for an exploit and actually just dissect it a little bit, see what's going on.
So what about the kind of Linux that actually opened up the exploit that we copied over for the VSAT,
TPD two point three point four backdoor command execution so we could actually look through it and start
to understand kind of what's going on before we're actually, you know, launching.
So, for example, we know for this one it's going to require misplay and it's actually verified.
And as you can see, you know, as an excellent ranking right here.
So we know that this one is going to be safe.
And so what you want to do is kind of look to it.
You get some more information like right here, tells you, hey, this module exploits a malicious backdoor
that was added, you know, to the user.
The download archive just gives you more information.
You know who made it inside.
So what we want to do, we want to see the code part.
So it's OK if that you know, if you don't know Ruby.
I don't know Ruby myself personally like to to indef.
But once you start to understand, you know, like different scripting languages.
Well I understand like the basic syntax of scripting languages, like Python for example, you can kind
of look at this and see the similarities just a little bit different of syntax so you can kind of see
what's going on.
So right here is defining function.
That is actually, you know, that's the explosion itself on.
And, you know, they have some pseudocode in here.
It says, OK, it's connecting.
So we know what kind of is going on right now, just trying to connect over the specific word that it
needs to for the exploit.
Then it has some more code that's kind of just going over actually how to handle and control the back
door that is creating.
So from what I see here, everything looks fine.
It doesn't look like it's anything malicious.
I don't see anything that jumps out of me as something that could potentially cause harm.
And I understand the general flow is going on just taking advantage, you know, of something inside
of, you know, that vulnerable service.
So we would actually this is a good candidate for us to use, you know, actually when we were to,
you know, launch our attack against this port.
So.
Now we know a little bit more how to dissect, so get used to looking at scripting languages, get used
to understanding kind of flow of these things and what's happening, and you'll be able to spot out,
you know, most of the time.
You, Pynacker.
I mean, you're not going to find in marksman's.
I'm anything.
That's where militias are damaging.
But, you know, you can never be too safe.
And then other times, you might need to just understand, you know, what kind of arguments an expert
actually might need when you, you know, launching it from the command line.