All right.
So now we're going to work on installing a less juice shop so to be able to do that.
We're going to have to do a few installs prior to in one of those is going to be Docker.
So we're going to install Docker and it's a little bit complex when it comes to Kelly Linux at least
what we have to type in the terminal.
So let's go ahead and open up a terminal and let's open up Firefox and I'm going to take you to a Web
site where we can just kind of copy paste things and I think it's really great.
So if we just go to Google and we say install Docker Kelly something like that.
The first one that should come up is installing Docker and Kelly Linux updated for twenty nineteen point
four.
Go ahead and click on that.
I will also be adding this to the references down below.
So what we're going to do is we're just going to scroll down a little bit and we're going to go into
the preparation section here.
So now it saying that we have to ensure that Carly is fully up to date.
We don't have to do that here it's going to be OK.
So let's just go ahead and grab this and we'll copy and paste
OK.
You should get the OK back now.
Go ahead.
Just copy the next line and paste.
All right.
Now we just need to run apt update.
OK.
So just type an apt update.
And that will update this.
And now we are updated.
So now what we need to do is just run app to install Docker dash C E so apps install Doctor dash see
and this is going to be three hundred eighty five megabytes.
So go ahead and hit.
Yes on this except that it's going to take a little bit to install.
OK.
So what we're going to do is we're to talk about a lost you shop while this is installing.
So let's go ahead and go out to Google and open up a lost you shop and kind of get an understanding
for what it is.
So with Google there let's go and just type o lost juice shop and there's two pages I'm going I want
you to open the first page is this github page here.
So go ahead and right click open in new tab and then let's also open up this get books that Io page
and I'll provide references to these as well if you need them.
So what we're gonna do is if we scroll down just a bit we're going to be following the docker instructions
on the install down here.
So you can see Doctor container.
We got to install Docker and then we're going to run these specific commands here before we do that.
What is juice shop.
Well juice shop is made by a wasp and it is a vulnerable Web site.
They have a fake ID you shop online and where it is going to go out and we're going to attack it and
we're going to utilize our attacks to earn a bunch of the different oh lost top tens and there are a
couple of different ways to deploy this.
We could actually really easily deploy on Heroku which would bring it out and you can attack this via
the worldwide web and this would not be local to your machine.
Anybody could attack it.
It's not a big deal it's not you know it's made to be vulnerable there's nothing out there that would
leak information about you.
However there's a couple attacks that cannot be performed on this.
So that's why I'm going to Docker out.
You could just as easily go this route if you want to and just watch and learn on two of the attacks.
Otherwise let's go ahead and do the docker installation so let's finish this out and let's talk about
the give book as well.
So on the docker I to is as Docker pull here so go ahead and copy this and paste and that's going to
pull down juice shop which may take a minute or two depending on your internet speed and minds done
so if you need a pause.
Feel free to pause as always and then we're just gonna run this doctor here in the ship boot up juice
shop.
Go ahead and run that
and port three thousand.
Server is listening on port three thousand.
Perfect.
That's what we want.
Go ahead.
Open up local host three thousand here in a new tab.
And boom we have it working.
So this is the juice shop.
Congratulations your applications running.
So here.
Go ahead and just just to miss this.
You can see we have a Web site and we're going to pen test against this Web site before we do that.
And before we start getting into this the get book is the fantastic resource of the course.
Missy if I can make this a little bit bigger so the guidebook has not only just an overview of what's
here.
It has all the challenges here.
So what we're going to be after and what we're going to find here shortly into the course is that we're
we're actually going to have a scoreboard full of challenges and these challenges range from one star
challenges all the way to like seven star.
So a one star challenge is pretty easy seven stars like really really hard to do.
I'm going to cover these in the best way that I think possible we're not going to cover every single
one of these.
We're going to cover what's applicable to learning the top 10 my thoughts for you are that you should
still come through here and challenge yourself to work through some of these challenges.
So while we only will cover the top 10 and we can learn about those if there's a topic in here that
you want to learn about it's really great.
Like say x x x x well external M.D. here we click on it.
It tells you what X X these are and then it says hey we've got two challenges related to this and here's
the difficulty for them.
So you can go and look up these challenges and try to solve them.
And if you can't solve them or you can't figure out where it is.
Well guess what.
You can go to the challenge solutions down here and you can scroll down you can look for it under these
three star challenges for example or you could just do a control F and find the execs Steve challenge
and solve it that way as well.
So it's got the challenges the solutions and all the different ways to click on this and sort.
And when we get to the scoreboard in the app I'll show you how to sort through that as well.
So you should have your app up and running and we should start being ready to be able to attack this.
So in the next couple of videos we're just going to focus on installing a couple more things and exploring
burp sweet and kind of starting to scan our Web site with brb suite and just as a precursor to getting
in and learning some of these attacks.
So that's it for this lesson.
I'll go ahead and catch you in the next video.
We install Foxy proxy which we'll need for Rip sweet.