Welcome welcome welcome to the exploit development part of our cause.
I'm really excited about this because we get to start putting together some of the things we've been
learning including python and MSF venom to build our own payloads and it's going to be really fun.
So what we're gonna be doing in this course is we're going to be using an attack machine and a victim
machine so the victim machine has to be a Windows machine so you can run it in a VM.
I have a VM here or you can utilize your own windows machine if you're running through this course on
a Windows based machine.
If you're running on a Mac or you're running on Linux then you're going to have to virtualize this Windows
machine.
Now shouldn't be too big of a deal if you're already running in a VM where situation or virtual box
situation.
All we have to do is go out to the Interweb to here and if you go to Google and you just type in Windows
evaluation the first thing that comes up should be Microsoft Evaluation Center and you just click into
their and we scroll down just a little bit and it says check out the latest products.
We're going to say check out windows and right here assess Windows 10 enterprise.
That's fine.
Now I'm going to be running the whole course through Windows 10 pro.
It really doesn't matter as long as you're on Windows 7 or newer.
So if you have Windows 7 8 or 10 that's absolutely fine.
And then you just click through here say I want the ISO enterprise and then just fill out all of your
information Hey continue get the iso file and download it and then load the iso file into your VM where
that is the option if you are running it virtualize if you again if you're on a Windows machine as I
will be when I'm running through the course.
You do not have to download this part.
Now there are two items you will need to download both of these are going to be on your Windows machine.
So on your victim machine we're going to have something called Von server if you go to Google and say
Vulcan server Von server is the vulnerable server that we're going to be attacking.
So this is a server that we're going to have running on this machine.
It's going to allow us to write a custom exploit against this and get a reverse shell.
It's got to be really fun.
So we're going to actually use the grey corner right here from 2010.
You click on this and scroll down.
There is a download button down here it says Vulcan server does it now windows may actually block this
download if Windows blocks is download.
Go ahead and turn off your defender.
I'm going to actually have you turn it off.
Once we start the spiking video but you can go into defender and just turn it off in here and Windows
Defender settings if you need to.
So you have virus and threat protection right here you can see that I have it turned off you can just
have it turned off so from here we can just download our attachment and I'm just going to hit open because
it's a dot zip.
So again you're going to need a dot zip of some sort.
And then I just like to extract this out to my desktop is fine just somewhere easy to be able to get
to it.
And then we can extract the actual or unzip this whole thing right to our desktop or we'll just call
this phone server like this.
Something similar this is absolutely fine.
What's important is that we're able to have all these files on our desktop.
So that's exactly what we want here.
And then the second part is immunity debugger.
So we come over one tab here.
We've got immunity debugger from immunity Inc.
And this is the link we want to click on.
Now what this is going to do is this is going to allow us to run the program through this debugger and
then we can see all sorts of cool stuff.
It's a program debugger.
So when we are triggering different types of exploits we can see how it's affecting the memory the stack
how it's affecting the program and it'll make a lot more sense once we're in there.
But it's really really nice.
So if you scroll down just a little bit you can see it says download and says download immunity debugger
here.
This is all we got to do.
And you could put a fake name in here.
You can put Joe Schmo and then however you'd spell that and then put a one to three fake street etc
fake at fake dot com and then fake here and it should let you download it.
You have to put in your real information and see it just works right away.
Hit save.
And then once it's done downloading we're going to go ahead and get this installed.
So if it takes you some time for this download go ahead and just pause your video and then we're gonna
go ahead and keep going.
So I'm going to say run on this and say yes and it's going to say that he needs to install Python two
point seven.
So we're gonna say yes and say I accept next and install close that now it's going to launch the python
installer where it is going to do for all users.
If you have an issue with that you can stall it just for you as well next.
Next Next let this load and it's all very very point and click on this.
So our goal here is to be able to write our own exploit code by the end of this and it's going to actually
be really fun.
So let's go check and make sure that immunity ran
and this is what immunity looks like the first time you load it up.
So from here we've got everything installed.
We're going to watch a short video on what a buffer overflow is and how we are going to leverage it
and then we're going to get right into the hands on portion of attacking this victim machine here from
our Cally machine and getting a reverse shell off of this victim machine.
So I'll catch you over the next video when we start covering what a buffer overflow actually is.