Congratulations on everything that you've gotten going so far.
If you've made it this far successfully, you've already got a virtual ethical hacking lab that has
a Caleigh Linux virtual machine and a Windows 10 virtual machine, which will be more than most people
ever get a chance to put their hands on.
So great work getting this far.
I'm also going to show you how to do two additional virtual machines in this lesson and the next one.
Now, if you are on a very slow download speed at home or if you just want to get into doing some of
the ethical hacking and Caleigh in windows, you can wait to download and install these last two virtual
machines until a little later.
But we're going to do an Android virtual machine.
A lot of attacks these days are coming on mobile devices, your phone, your tablet and other Internet
of Things devices.
And then Metis Floatable two is a Web server that we're going to learn how to attack and then how to
defend.
So let's get started with the Android virtual machine.
The great thing about Android VIMS is that there's a Web site called OS Boxes.
If you've never used OS boxes before, their terrific Web site for virtual machine images of dozens
of different kinds of free and open source platforms.
And one of those is the Android XIV six platform so that you can run an Android tablet or phone right
on your computer in a virtual machine.
So we're going to go to OS boxes, dot org slash Android dash x 86.
And once you get OS boxes, you find that there are some Android virtual machines.
And you can scroll down just a little bit that you will find several versions of Android dating all
the way back to some of the very early Android, one Android two, four, five, six, seven, eight,
and even some of the latest Android version nine.
We were using ORIO just a year or two ago.
Now we're using PI, so we're already to the PE's.
We'll see what comes next with Q and R and and so on down the alphabet.
But if you come down to any of the flavors from Orio forward, I've had some really good success using
the Android Oreo distributions eight, not one, and later for ethical hacking to teach my students.
But I'm going to try something a little newer.
We're gonna go to the first release of Android X eighty six nine point o pi and you'll find the virtual
box download and click the download button for the 64 bit virtual box.
Virtual machine.
You'll notice this takes you to SourceForge and it will start a download.
It'll take just a few moments for that to download.
You'll notice it's giving us a seven zip file.
While this virtual machine is pretty much ready to go, it still has a few pieces that we have to take
care of ourselves.
So we'll go into our downloads folder as soon as that finishes.
All right.
When the download completes, you should have an Android 64 bit.
And whichever version of Android device you chose with a seven zip extension, that means we'll need
another application to unzip that.
If you're on a Windows computer, you can just go to two seven zip dawg, or you can do a search for
seven zip.
And you'll find seven zip dot org, it's a free download, just like everything else that we're using.
But if you're on your Mac, you've already got an application that will unzip that archive.
We're going to open it with the UN archives are the same thing that we use to expand that huge Windows
virtual machine.
So once you an archive or once you extract with seven zip, all you have to do is open up the 64 bit
folder.
Inside that 64 bit of folder, you'll notice that we don't have an OVA, a an open virtualization archive
or an open virtual appliance file.
We have a VDI.
That's the virtual disk infrastructure.
What we're going to do is attach this machine to a new virtual box VM.
So this is not as ready made as our Caleigh and Windows virtual machines, but it's just one or two
more steps.
So we're going to go through that process right now.
We're going to create a new virtual machine that will use this Android disk file.
So this is like the virtual disk or the the flash memory inside your Android phone or tablet.
So we're going to start a new virtual box machine.
We'll call this Android nine DRDO.
And we'll change the type to Linux and we'll just change it to other 64 bit Linux.
That should work just fine.
So we're creating a new virtual machine that will house our virtual Android phone or tablet.
We're going to give it about two gigs of RAM, the same as our Kelly Box.
And we're going to use an existing virtual hard disk.
That existing disk is this Android X 86 virtual disk infrastructure file.
So we're going to use an existing disk create.
OK.
First, we need to find that disk.
So we're going to choose that virtual hard disk file.
And we just need to go to wherever we downloaded this folder.
So we'll click add.
And I've downloaded mine to an external disk because we're downloading a whole lot of big files and
I'll find that 64 bit folder.
And there's my Vehbi I file.
All I have to do is click open.
And now I've got that available in my list of disk drives and I can choose it.
And now I have a hard disk for my Android 686 nine DRDO.
And that is almost enough to get our virtual Android device up and running.
But we need to make one additional change for any of the Android eight DRDO and newer virtual machines.
We need to change the graphics controller.
If you ever start an Android device from a virtual box and you see that there is just a black screen
or a console log in a terminal prompt, you're probably you're probably suffering from the same errors.
A lot of my students and you have the graphics controller sent to the wrong adapter.
So we're going to use the V box s v g a graphics controller.
I got there by clicking here.
You can also double click on the display and just change this to V box s BGA instead of the V MSBA.
Press.
OK.
And it may say in ballad settings, Detective.
But that's OK.
It's still gonna work just fine.
So we will start.
And just like we did with our other virtual machines, it's a good idea to change the view on the virtual
screen to 200 percent.
And you'll see it is getting to a console screen.
But this should boot up into a really nice Android display.
There we go.
And it'll take a few moments for Android to boot up the first time, but once it gets up and running,
we'll be able to see a real Android phone or tablet operating system.
The nine DRDO release one is a tablet operating system.
So you can see that it's already got our virtual desktop in front of us.
Your machine may be a little bit slower.
That's OK.
We're running a virtual machine inside your computer.
So sometimes it takes a little extra time to get everything loaded.
The first time you run your Android virtual machine, you'll notice it's going to do a lot of settings.
It'll go out to the Internet and connect and get some additional information.
But you've got the same types of applications that you would expect just on a regular Android device.
You can open up your contacts, you can open up the Google Play store and don't put any of your actual
Google account information in to this device because it is not your real phone and you don't want to
leave any information in here that could be taken advantage of by someone else.
But you will see you've got your home button down at the bottom.
You've got I you can see the square button will show you all your active applications and you can get
rid of those so you can get rid of all of the apps that are running.
And we've got g mail.
And if you say push up from the middle, click and drag up, you'll be able to see a number of apps
already installed and working on your phone.
And you won't be able to make phone calls from this virtual Android device, of course, because it
doesn't have a SIM card.
That's the little card that lets you connect to telephone networks.
But it will let us do just about everything else, including G mail, YouTube, using the Web browser
and and connecting and testing different applications app.
So once you've got this machine up and running, if you ever need to leave the virtual machine, you
can press your right control button on a P.C. or your left command button on a Mac.
Know that'll get you outside this window if you ever get stuck inside there.
And if you ever have any mouse trouble in an Android device, an Android virtual device, you can turn
off mouse integration on a Windows box that'll be in the menu bar at the top of the virtual machine.
You just click input and turn off mouse integration on a Mac.
It will be at the top of your screen input.
And just check mouse integration that will turn off the regular mouse.
And then you have a little bit slower mouse inside the application to get back out.
Again, we can use that.
Left or right?
Control key on Windows device or the lift command key on a MAC to get back out of that window.
And then we'll turn on mouse integration again.
It seems to be working just fine on the Android version nine DRDO.
So once you've got your Android nine Dotto device, we can hit the back button here.
There we go.
And we got our lock screen, we got everything just like we like it.
We will give this a run in a later section and we'll actually learn how attacker's getting to your virtue.
Get into your cell phone and your tablet by safely practicing in this virtual machine.