WEBVTT

00:00:01.240 --> 00:00:02.840
Before we begin with our demos,

00:00:02.960 --> 00:00:06.600
let's take a look at what our target organization's environment looks

00:00:06.600 --> 00:00:12.090
like. In this environment, we have compromised an administrator within the

00:00:12.090 --> 00:00:16.470
IT department. We have managed to compromise him using a phishing email.

00:00:17.440 --> 00:00:19.960
The phishing email dropped a stager,

00:00:19.970 --> 00:00:23.570
which established the C2 channel to our attacking machine,

00:00:23.580 --> 00:00:25.510
which resides outside of the network.

00:00:26.040 --> 00:00:30.170
Globomantics has a web server, which is publicly facing, but

00:00:30.170 --> 00:00:33.150
also accessible by employees on the inside.

00:00:33.940 --> 00:00:36.390
Unfortunately, their security was not very great,

00:00:36.460 --> 00:00:39.210
and we have managed to exploit this web server, and

00:00:39.210 --> 00:00:41.260
we currently own and control it.

00:00:41.710 --> 00:00:44.080
As we progress through the demos within this course,

00:00:44.090 --> 00:00:48.650
we will revisit this diagram based on the different tasks that we will perform.