OK, so in the last lecture, I showed you how to get this beautiful screen up and working, but we
want these important voting so that things are a little bit more realistic.
Right.
Shouldn't have to put 3000 in your browser.
That's kind of lame.
And we also want to make it look more realistic to our attacker, who is going to be on the public using
Kawi.
Twenty twenty one one.
All right.
So what I'm going to do is log into our router is what I want.
That's it.
You're not one.
Yeah.
Go ahead.
Log into open sense.
All right.
And the first thing we want to do when we get here is we and we got to do this, OK, because.
We need to block we need to uncheck block public networks and the interfaces, I'm going to tell you
why in a moment.
So if we click on interfaces, we go to win.
We can scroll down, he sees his block public private networks now think about it on a typical wind
interface, you'd want to do that.
You don't want our FCC 1918 know your ten dollar dresses.
You want anything 168.
The 172 sixteen's to wanted me to 31 addresses hitting your win.
That that should be blocked.
That's private traffic but right in a lab.
Right.
And we're trying to emulate an adversary on the Internet attacking our web infrastructure.
And that adversary is going to have a 190 to 168 address.
We're pretending that it's public, but of course it's actually private because it follows the privacy
1918 standard.
So we just need to uncheck this in order for a lab to work somewhat uncheck block public block private
networks, click save.
Then don't forget after you click save.
To apply it, you have to apply the changes.
Otherwise it won't actually take.
Yes, I've learned from experience right now we can set the point forward, so if we go to firewall.
Firewall net put forward, you can see we don't have anything here, so we're going to click on ADD
and this really important to pay attention here.
OK, so we want to interface to be when.
Yes, the destination to be the win.
Address.
It's when we hit the Wynn address in our browser from our Kelly Linux box, this is what should happen.
Destination port range should be from HTP to HDB.
You want to keep the protocol the same, but the target IP, it's going to be different, right?
It's going to be 10 dot 100.
That's 091 and then the redirected target port.
You go to other.
And we're going to change this to.
Three thousand.
We're going to redirect that port.
And what else here?
We can leave everything else the way it is and we click save.
And I can see we've got this rule here for the wind interface TCP.
The address, the union address saying we hit that destination, so any sauce packet coming to the destination
of our winter dress on Port 80.
Do some that magic and translated to this port, which is our dockery's to container oost you shopping
on this internal port.
Does that make sense?
So hopefully that makes sense.
We're going to click apply changes.
And you can see that this little thing is green, if you mouse over it, you can see disabled shows
up, so it is enabled and the changes have been successfully applied.
Very cool.
So now what we should be able to do is hit this IP from Kelly control alt to escape.
Let's put this guy up.
Let's go to Kelly.
Let's go to Kelly, guys.
And Kelly is on that.
Right.
That's how we're emulating the public network.
We're just putting it on our net network, which in reality is just my home Internet network.
Right.
Something real special about it.
But I'm treating this as a hostile environment, the hostile Internet, the big bad Internets.
All right, we've got Kelly.
We're going to log on with Kelly Kelly.
It's just before kids need help setting up Kelly, check up at our earlier videos on doing that.
Now, we are good to go.
Let's just make sure we can hit that interface.
We're going to go to our Web browser.
And, of course, we need the wind interface IP to control, to escape.
Let's go to this a couple of ways.
We can get that.
Let's do it PC one and see if we can get it from.
Gulabi.
Despard.
Scroll down one entity, one six eight zero dot 146.
All right, so back to Kawi one 91 68 zero one 46 teashop.
You see, I didn't even have to put in 3000 automatically forwarded it.
And one last thing we're going to do just to take this up one more notch, just to make it that much
more realistic, guys.
If I'm going to go to her house file that Kawi, I am going to type in one to 168, that zero, that
146 and I'm actually going to put in.
The domain I wanted to map to something juice, that carbon like dotcom, what it does is
host.
Yeah, what this does is that when I type in juice, that carbon buy.com in my browser, it's not going
to go out to the Internet first.
It's going to check the host file to see what IP maps of this domain.
And, hey, it's going to say, oh, the IP is one only two one six eight zero one forty six, which
happens to be the public address ever open since router, which is really our private address.
But we're not telling anybody about that.
And then it's going to put forward into Jaisha from Port 80 to 3000.
There's a lot of cool magic happening here.
So watch.
This is going to work.
Is it going to work?
Look at that.
Isn't that beautiful?
So now we can actually hit berp against this.
We can hit a WASP zap, we can EMAP, we can hit McDo.
I mean, we can just just attack this web app like crazy and learn so much.
It's going to be great.
Okay, so we are at a really good place.
What we're going to do now is in the next election we are going to install the endpoint with this voter
and set it up as far as we can and then we will go ahead and end up setting up a small enterprise.
So I'll see you guys in the next lecture by.