So far in this course, you've seen how to do lots of different types of hacking, but let's go to one
of the most common types of hacking out there.
Web hacking, hacking into a website or a Web application is something that people are going to try
the second you put up any Web application or Web server.
So you need to understand at least two of the most common classes of attacks and see how to protect
from that.
So what we're going to do is make use of our Mideast deployable VM, Métis floatable VM has some applications
on it.
It's got Devoir utility.
It's also got a P, my admin and wiki and Web webapp.
There are all kinds of rich things that we can run through in our midst floatable.
All we need to do is set up our Métis portable box so that we can surf from it.
And then we're going to hack into the Métis floatable box from our Windows 10 machine and from our local
desktop computer just to show a little bit of variety.
So come to Oracle Virtual Box.
We're going to make sure that that Métis floatable to.
Is running on our host only adapter.
Very good.
And remember to log in to meet exploitable use MSF admin and MSF aid in doing I-F config just to make
sure that it's on the that three addresses and mine is, it turned out Odah three to five.
So I'll be able to log in to this machine from tendo three dot five as my address.
I'll go and minimize it.
We don't even need to work in medicine floatable.
It's running as a web server so that we'll be able to connect to it using this address from any of our
other machines, including our local desktop machine.
So minimize it and let's start our Windows 10 computer, first of all, make sure you're on the same
network host only adapter of the box net zero hit, OK, and start your Windows 10 running.
And we're going to use both browsers and Windows 10 to go ahead and open up.
Google Chrome and your Edge browser.
And we're going to surf to 10 oh dot three, five or whatever your manipulatable boxes address was,
that one's good.
We'll do the same thing from Chrom Tendo 3:00 to five, and we can see that we are able to connect from
our Windows 10 computer using that 10 not Odah three to five address is the address of our Mideast floatable
server.
I'm going to use my Microsoft Edge first and I'm going to click on DV W.A..
This is the darn vulnerable web application.
Devoir Aydan vulnerable web application.
Pardon the language, but we will use the username, admin and password.
If you don't know that it's down.
Here is a hint.
Admin and password.
And what we're going to see how to do are a couple of things now, there are lots of things you can
learn from the darn vulnerable devoir.
You can do file inclusion, you can do command execution, you can do SQL injection.
And we're going to start off with skull and cross site scripting.
But you can attack a Web server that's running on Almeida's floatable box and safely see how each of
these types of attacks can happen.
And that way you'll know a little bit more about how to protect the security of your own Web server
or a Web application.
So when we come back in the next lesson, we're going to tackle cross site scripting or we're going
to see how to do that two different ways.
And we're going to see how it differs between our Microsoft Edge browser and our Google Chrome browser.
See you in the next lesson.