Welcome to the mid course Capstone.
Now this capstone is going to be utilizing a Web site called The hacked the box hack the box is a fantastic
resource.
Now to go to hack the box open up a web browser and go to hack the box dot E.U..
You'll be brought to this Web site now getting into hack the box is a little bit tricky.
You actually have to hack your way in.
Now it is against terms of service for me to help you do that.
However if you do some googling which is reconnaissance you will be able to figure out how to do it
pretty easily.
Now for this specific part of the course we're going to be utilizing the IP.
And let me show you a little bit of the difference of what hack the box has to offer what the IP is
and then why we're using it.
And then you can either watch this course or you could just you could practice along with me.
So bear with me here for a second.
This is what hack the box looks like.
Once you're logged in now you have access to this left side here.
And on the left side there's something called machines machines is the main way to access this.
OK.
So you come in here and there's all if you come into all here you're going to be able to see two different
types of machines.
You're gonna be able to see active machines and active machines.
Are the machines that are currently active and can be attacked by anybody.
So you see difficulty levels the higher the difficulty here you can see the harder it is.
So if you're a newbie and you want to start working on these you might want to start with the ones that
are kind of lower in the green.
This is a fantastic Web site that you do not have to pay any money for if you do not want to to start
practicing and playing around with hacking.
Now caveat is a lot of these machines are super unrealistic.
A lot of what I'm teaching in this course is practical that's why we're calling it a practical course
and we don't do a lot of the tools and techniques that you might need to be successful there might be
a lot of research time put in here to actually be successful in the course.
However it's still a great way to learn and practice especially if you're going to do something like
a certification exam like the OSP.
This is a good way to kind of get towards that level.
Now you see the active machines here are the retired machines there are over a hundred retired machines.
Look at all these now as a free user.
You get access to the active machines which is 20 at any given time.
Right now we have one hundred and thirty of nine machines which means that there are one hundred and
nineteen retired machines.
The nice thing about the retired machines is you can pick on difficulty.
You have filters over here to do so.
And we could say Hey I just want all the easy ones.
Let's just do that.
I want to try all the easy ones let me clear through those first and then we'll work our way up and
we can pick easy ones and we just go from there.
And the nice thing to do is you come into here and you say like OK you know I want to look at this box
and I'm struggling I I'm on it I'm struggling.
I don't know what I'm doing.
You click in here you scroll through.
There are all kinds of user submitted walkthrough as some of these have videos for them.
So if you're ever stuck.
The nice thing about a retired machine is somebody has probably already done it and can have a walkthrough
for you.
There's a guaranteed walkthrough out there for a machine in case you do get stuck.
So on top of this you do have access to different challenges.
So if you like challenges or you want to practice for what like a capture the flag might be like a capture
the flag.
Competition is basically a bunch of challenges where you score points for solving problems.
And if you win you get some cool stuff sometimes as there's a bunch of those over here which are neat.
And then there's prolapse as well which are great if you're looking to get into Active Directory kind
of stuff but these are really kind of on the advance side and do cost quite a bit of money.
So the hack the box VIP is ten dollars.
If you're 10 euros a month it equates to about 13 US dollars a month.
I do not know anywhere else on the conversion but if you come into here and you see what is VIP it kind
of tells you a little bit more you have less crowded labs and you have access to all the retired machines
so there's quite a few people on the active off site.
So the VIP membership just gives you access to VIP side so your labs are more stable.
And that's really nice.
And there's some other benefits here as well but essentially once you're signed up and you have access
you just come to this access tab and you'll download a VPN file and you just say download a VPN file
and it tells you what to do how to run it and you get connected to the VPN you'll come to a machine
over here and say I'll pick a machine and you'll say hey I want to just go ahead and just start this
machine up and you start that machine up and you're allowed to have one machine running at any given
time so you can start a machine and you can actually reset a machine if you need to.
And then you submit your flags here when you find them.
So basically your goal is to have this machine find a flag and then submit the flag and there's always
a user flag and a root flag and we'll kind of cover what that looks like as we go through these.
So the premise of this course getting into this is that the premise of this capstone is that these are
all going to be VIP machines they're all going to start off kind of easy.
And then we're going to crescendo.
And what I'm going to do is I'm going to list the machine name and all this the machine name in the
title of the video.
So before you watch it if you have the VIP you're more than welcome to try the try to solve the machine
yourself if you can't.
That's fine.
Watch the video.
Figure out where you went wrong and go from there.
The second thing about these upcoming videos they're all pre-recorded.
These are all coming from a mini series that I did on YouTube.
There are 10 of these videos.
There is going to be repeat information but I think that is for good reason.
Again as I said in the last couple of videos I think repeat information is good.
So you're going to see a little bit of repeat but this course is going to crescendo.
OK.
We're going to crescendo all the way through ten videos you're going to start off super easy.
And by the time you get to the 10 video I think you're going to be very comfortable with exploding machines.
You're going to be very comfortable with just the idea of these machines and you're gonna be really
comfortable with a theory and I want to get you if you do not practice along.
That's OK.
Please do not skip these videos please understand the theory.
This is how an attacker thinks this is the mindset of an attacker you have to understand that because
after we get through this we're going to start getting into some heavier stuff some more complex stuff.
And I want you to be comfortable with the basics before we start diving into that or else you're just
going to start getting a little bit lost.
So watch these videos understand what you're seeing.
It's OK to watch repeat information.
There won't be a ton of it but there will be some of it and I think it's going to help.
So the first video we're going to do in this series is going to be legacy.
So we're going to cover legacy here.
So my challenge to you is to do some googling.
Sign up for an account and come to the site.
If you do the VIP.
Go ahead get the VIP started download the access come in here.
Press start and scan this machine with the scanning lesson that I taught you.
If you do not want to take that route that's fine.
The other route that you can take is you could watch the video first then go back and try it on your
own and see if you can improve upon it.
OK.
So I'm going to have eight to 10 videos upcoming and we'll pick and choose those videos out and then
you should be really good to move on into the exploit development part of the section.
So I will see you guys over in the next section.
Once you're through this capstone look forward to seeing you over there.