OK, so in the last lecture, we installed the werewolf station, that's going to be sort of our base,
our ground for everything that we're going to build into our cyber age.
And now we need our attacker, the we're going to use callisthenics.
This is the industry standard virtual machine when it comes to launching attacks.
All right.
The most advanced penetration testing distribution ever.
Yeah, it really is pretty advanced because I'm a little bit you can see, yes, it actually is the
industry standard.
And there's a lot of really, really cool things that you can do with Kelly.
Here's a little snapshot of the image.
And if we scroll down a little bit, you can see it's got all these tools, right?
You got burps.
We Hydra, John the Ripper now TEGO in map responder sequel map.
I mean, it's crazy.
There's so many different attack tools here, Wireshark, and it's all built into this distribution
so that you don't need to really worry about installing it.
You can click on tools and you can see I mean, the list just goes on and on, guys.
So we're going to go in and set this up.
I'm going to show you the easiest way to set up Caleigh is just to install the virtual machine.
So I must go all the way up to the top and let's go to download.
And instead of getting the installers, this is the installer.
This is the live CD.
So that you could put from a CD if you want to do is the version for Apple with a new one processor.
Where we're going to do is we're just going to grab the virtual machines for being a workstation.
So we go to the VMware download page.
Know what we can do, by the way, the password tells you, but here's Kelly Kelly.
That's how we get in and we want the 64 bit Kelly Linux being my workstation.
So it's two point four geeks is going to take some time, but we can go and grab that kick this download
off.
All right.
To the download has finished.
Let's go ahead and open and extract.
It's going to right click it and I'm using seven zip to extract the way that I got seven zip if you
don't have seven zip.
By the way, you can just go to seven.
Zip, I believe was just seven zip big with a dash between the seven and zip.
Yeah.
And just download the 64 bit Dixy.
Right.
Install that and once you install it you'll have the option of Right clicking.
And then going to seven zip and saying extract here, OK, so I'm going to go in and check to this folder
once the finishes will come back around, right.
So we've got to extract it, but jump into the folder.
And what do you want to do with click this David Mix file?
It should automatically open with VMware workstation because it is a VM where virtual machine configuration
file.
So we double click it.
And what do you know, the workstation pops to the foreground.
The first thing we're going to do is we're just going to rename this.
It's going to right.
Click it rename.
I'm going to call it Calli 20 21 dot one.
It's the version of the VM.
It's close home tab.
And we need to change a couple of things in here.
So let's go to a virtual machine settings.
All right.
So we've got two gigabytes of RAM that should be sufficient for processors that should work on the 80
gigabytes of hard drive space.
That's a good bet.
We don't need quite that much, but I think it doesn't matter because this VM is built that way.
So we're just going to leave it the way it is.
The network adaptor we're going to leave it is not for now, so we can update the VM after we finish
doing that.
We'll go ahead and change it over to Bridgid because we want our attacker to we're basically trying
to simulate an adversary on the outside of our network, outside of our DMZ, you know, see what I
mean in a moment.
So it's going to be that the way it is, everything looks good.
Click on Over to Options.
Anything else we need to configure here?
Enhanced keyboard with that, if available at sea shareholders, we don't have to mess with that right
now.
All right.
So everything else looks pretty good.
Let's go to the hard disk and see test.
All right.
So this is good.
I was checking the hard disk to see if there was a way to change it over to an SSD because I have an
SSTO on my computer.
But it's OK.
Everything looks good.
Let's click.
OK.
And we're just going to fire this guy up on the virtual machine and we're just going to say I copied
it.
Now, while this boots, you may notice in the background, these files are going to fill out.
That's OK.
Don't need to worry about this.
These are the files that being workstation uses to function like here you have the virtual memory from
the VM.
This is the virtual the VM desk.
The virtual desk.
Right.
So it's not really a disk.
It's just a file.
But the VMware workstation hypervisor lies basically to the guest and tells the guest at this file is
a disk that's a hypervisor work.
While these boots are going to right.
Click here.
When I say new folder, I'm going to call this public.
Right.
Because this VM is going to be on a public network.
It's going to drag it put in public and for the hour.
And we should be good to go.
We can log in with Kelly and we're going to go and kick off an update zero after update tech.
Why that, Kelly, to get this thing going?
Always one of the latest and greatest free labs and CEDO Apte of grade tech y and I love this upgrade
complete.
It's going to take a while and once it finishes, we'll circle back around here and we'll continue setting
up Kelly.
All right.
So everything finished here.
Let's just make sure that we have the latest version of open VM tools, desktop and Fuse.
This is what Kelly recommends that you should have installed.
If you want to make sure that you can drag and drop copy and paste between the guest, VM and the host.
While that works in the background, that's going to change our background.
So this is just a personal preference of mine.
I like to change the wallpaper and see which one do I like here.
This is the guy like.
Yeah, and the other thing will change are the power settings that doesn't go to sleep.
So what we'll do is we'll say system plugged in, get set to never display, display power management,
turn that off.
And put them will change this to never.
When the screensaver is activated, don't bother with this thing right here.
We don't want to lock the screen in.
The system is going to sleep.
This is our lab.
So we want it to be available to us at all times because that all looks good to me.
By the way, if the screen is too small, when you're building this out, you can type DPI and this
will actually change the resolution so that everything gets bigger.
And it'll just be a lot easier for you to sort of view that the contents of your VM than other windows
can be kind of small.
So that's one way to get around it.
And one other thing we should do first is make sure we can think Google.
Of course we can, because we just updated everything.
We're connected to the Internet.
But one thing we should do is just check out Kelly Linux's website.
So if we go to the website, because you're probably going to want to eventually configure a file sharing.
Between the guest and host VMS, let's going to clear this out first, customize and take away the title
bar, take away the bookmark bar, change of theme to dark.
Done.
OK.
We should also get Foxy proxy because we're going to need this when we start doing our pendas without
Pinterest and Firefox.
And that.
OK, let's go to Kelly's website.
This is what I wanted, so we just did this.
So we're going to need to reboot, but this is how you can actually have support for shareholders when
you're using open VMware tools, which you basically need to do is create.
This file here, so it's going to do that.
OK, so that's done, and then we get on to the next one and we're just going to say.
Let's make this file executable.
That's what that plus X does, OK, tabs, I flipped over control should be debased.
Very good.
And then all I need to do is run this controversy of town controls of the.
Now, we don't really have any shareholders, but we can change that as pest control alt to escape the
VM settings and then I can go to options shareholders and I'll just add my local downloads folder.
I mean, it downloads that way.
When you want to copy files between your host, your real machine and your guest VM, it's going to
be pretty easy, like, OK.
Next, I'll make it Read-Only so I don't accidentally overwrite something on my host from my guest finish.
OK, let's go and rerun this.
All right, so now if we go to CD amante,
you can see I have two hundred and forty three files in my downloads folder, so that's good.
Remelted and we can just get there by going to this MLT Agfest download folder.
Very cool.
And one of the things you should pay attention to is if you scroll down a little bit further, tells
you what to do with the copy and paste functionality ends or if it stops working.
So we're just going to go ahead and grab this because occasionally copy and paste will fail between
the guest and the host.
And this is a great way to sort of get around that.
But I'm as a control, control, control.
I control.
I got the C4 cat.
They would go and then I'm going to grab this.
Make the script executable, Joseph, be very cool, and then whenever I need to do it, I copy and
paste functionality breaks.
I can just run this right here.
Copy should be in, that should get everything back to normal and just to confirm the copy and paste
does work, let's just make sure we can track something in.
So I'm going to try to drag this executable into the aware.
See if it works.
Looks like it's got be very, very cool.
Permission denied.
We try skip all.
Let's see it.
Still do it.
Create a city that the city desktop KDDI to go home desktop know we did not because I don't have rights
to write to that folder for some reason.
And it could be because they need to reboot, so let's just go ahead and do that.
When in doubt, reboot.
Back in, if I can drag it over here, you got got the file, so that's all we need for Kelly right
now.
And now we can actually move on to our victim workstations.
And we'll start with Windows 10.
I will see you guys in the next lecture.