OK, so now we're going to get into the Web application, security penetration testing piece, this
is going to be five guys.
The first I just want to show you some motivation for this.
So if you go to hacker one dot com, you can get a list of vulnerabilities that were previously disclosed
to legit companies.
Right.
So if we go to Y hacker, one of the go to activity right here, you click that it takes you here and
you can see the bug types, for example, the company.
How much money has been paid in bounties over the last nine days and then the amount that was given
to this particular researcher.
So access open redirects, right?
If you just go through this list, you can see you can make a good bit of money.
With bounty.
And this list goes on and on, you know, I encourage you to actually go through here and you can read
some of these reports, the ones that have full disclosure.
Meaning the titles linkable, you can click it and get details, technical details on exactly how the
bug was exploited.
Like, for example, look at this one, that's crazy, right, but what I want to do is show you how
we can set up this lab in our cyber range and truly get the hands on practice.
We need to succeed.
So if we go to a wasp dog, there is a vulnerability web applications directory.
And the part that is interesting to us is a section for offline.
So this is the defacto sort of repository of deliberately vulnerable Web applications.
And you can scroll through here.
There's dot net gote, there's bricks.
These are all deliberately vulnerable Web applications.
And you can download them here and you can even see the technologies that are being used anywhere.
Application.
So we've got a cloud goat dam, small, vulnerable web, I mean, there's so many different -- vulnerable
file upload, you know, there's so many different applications here.
A lot of them actually have vulnerabilities that map to the OOS.
But top 10, which is what we're going to be working with in this tutorial session game utility, this
is a really good one.
You can look at the number of stars to kind of gauge how popular it is to shop.
See, it's got four point 4000.
So obviously this is pretty popular.
That's what we're going to use in the cyber range.
So if we click over to do shop.
You can see that this is a flagship product that maps to the top 10 and buy flagship, it means that
it has demonstrated its strategic value to OOS and the application security community as a whole.
OK.
Do shoppers right here.
Probably the most modern and sophisticated, insecure Web application for security trainings.
So this is what we definitely need and we can get it by going to the GitHub page.
Would you shop and we just download it?
The only thing I really like about it, you know, it's constantly being maintained and updated.
Look at all the permits.
Look at the last commit rate, relatively recent as of the time of this recording.
And you can scroll through here and you can see, you know, pretty much what he can do and you can
get a nice little tutorial on how to set it up in various places.
Right.
But we're not going to set ours up in, you know, Amazon, either the U.S. or Azure or Google Compute.
We're going to set it up in our range.
But in order to do that, you know, we need to make sure we have an operating system to host our Web
application, so we will be using Gunta server for that.
So if we go to Mutu Dotcom or we need to do is go to download.
And then we want to get everyone to suffer and then we can scroll down and go to Emmanual server installation
and we can grab the latest release, which at the time of recording is twenty point ten.
Right.
So let's grab that and we'll come back to the video once the download finishes.
I'll see you guys in a little bit.
OK, so the download has finished.
Let's go ahead and set it up.
We're going to go to file new virtual machine Minova stance, right.
Typical route to the location.
You can see we've got our copy of a Mutu server.
Load it up.
We're going to click next name.
There's a wasp juice shop.
20 gigabytes of space should be good, well, stored as a single file for performance reasons.
And this all looks good right now.
We're on that, we'll flip it over to host only once we get everything updated.
This ram's a little bit too much, though.
We can decrease that by half.
And we're installing a Mutu server because it doesn't have a GUI, which should also save on resources.
So we're going to power it on this virtual machine after creation and click, finish, click into the
window.
And I'm going to ask you about the server control, OK?
To escape the VM, I'm going to drag the name of WASP Juice Shop into our private folder.
And it's looking pretty good, right?
They wouldn't let this thing boot up and once it finishes, will come back.
And one thing I did want to mention as it boots up is you don't need to keep all your vehicles running
all the time, right?
So if you want to save on the resources on your host, maybe you don't have thirty two gigabytes of
RAM on your host.
You only have 16.
You know, you can just spin up whatever you need for the exercise you're running.
So let's say you just want to pop the web server from the outside to see if you can pivot into a workstation
on the internal LAN.
Well you could disable PC too, like I did here, and free up a few resources.
So you have to be strategic in what you have loaded what's running so that you can get maximum performance
out of your lab and maximum utility out of it.
So we're going to do we're just going to go for English and we can say update to the new installer.
Sure.
I like cutting edge.
All right, so the keyboard is English, US will leave everything at us.
We're going to click done all right.
And we'll leave the default network interface in place.
We're not using a proxy.
We'll keep a default mirror and we will use the entire disk tab down to done.
So this is looking good right now.
I'm going to click done to start the installation.
Now, this error message is saying that this will result in the hard disk being overwritten, which
we understand is not an issue because this is in our lab.
We're not over writing the host desk, this is the guest VM, which is currently clear of any data.
So, yes, my name is going to be Duse Use.
On the username is Jesus password,
all right, done, and we don't need to install open SFH server and I don't know these server steps,
are we just going to get done?
We don't need server snaps.
All right.
So we're going to let this Runnable come back once again.
All right.
Very sweet.
So it says all upgrades installed.
So we should be good to go install comp. So we'll reboot and log in and we'll do that in the next lecture
when we figure you shop.
I'll see you guys in a little bit by.