Hi, within this lecture, we're going to go to level 26 of the Bendat, and it's very easy.
If you're on the list, you will see the Bendat 26 assess key, which is our key to go into S.H., into
the level 26.
So it's fairly easy, right.
But it doesn't stop there.
So it gets harder at this point.
And at this point, I had to actually stop the videos and go to Google to find the solution because
it actually had to do something with the rim.
And as I said before, I don't use usually used of them very often at least, OK?
And it turns out it has something in particular to do with the command line and do with the more comment.
I'm going to show you whether this and again, this is a hard one.
I couldn't solve it by myself because I had no idea that we could do that with them.
So I'm going to show you what I mean.
But just before that, I had to give you a heads up so I couldn't figure it out in a short period of
time like I did before.
And as a matter of fact, for the previous lectures, I didn't even look at the Google.
I didn't even do any research.
I just figured that out because I got used to it.
I had the experience, but not this time.
So let's run this comment and say I Bendit twenty six SS HQ, OK, and we're going to login has been
the twenty six to look host.
OK, so we are in the local store.
In this case we're in the server in this case.
So we can say localhost.
I'm just going to say yes OK.
And here we go.
We managed to log in, but as you can see the connection to localhost closed.
So in that case we can try to change the show like we have done before.
OK, like I remember we used the as a channel rather than Bashar Lynard to maintain our session before,
but it doesn't even work over here as well.
So of course we can try it.
But here we have some kind of tools like tips.
We have more tools.
And it was pretty confusing for me to understand how we can use the more tool in here.
So of course, I went on and do that, so I had to try this.
Right.
So Dashty with bin S.H. or Bin Bash.
OK, just go with bin Bash.
If it doesn't work, go with business age, it won't work either.
So as you can see the connection to localhost cost and we didn't even get the detailed information like
we did last time.
So you can go for being without the quotation marks and you can try the other alternatives as well.
But as you can see, it doesn't work.
So what can we do with the more comment?
More comment is something like chat, OK, it's very simple.
So I try to I actually stopped at this point and tried to Google it out to find out about more.
And I found out that it's actually connected with them at some point.
So let me show you what I mean.
So when we do, let me show you when we do chat, OK, we get the result back like this, right?
So if we do, the more it will give us the same result, exactly the same result.
So as you can see, it's nothing different than cat.
But if we have something like this, OK, if we do cat password TXI, as you can see, we cannot see
all the lines, but if you do more password-protected, it will show us the first page and then when
we click enter, it will show us the second page turn page and we can just use the arrow points arrow
key arrow up key arrow down to see the whole thing over here.
So more does this.
It's exactly the same with Cat, but not exactly because it lets you see the part of it.
Then the space is not enough for you.
So how can we use this?
And furthermore, we have other tools over here like we it's vem.
OK, so we are vem.
So how can we combine those two together?
This is where I actually had to Google it and understand.
If I hadn't have the tips over here, maybe I wouldn't actually think of that as well.
So let me show you what I mean.
I'm just going to run this as it is.
OK, I'm going to go into the Bendat 26 and I'm going to say yes, and as you can see, we have a lot
of information over here.
So what I'm going to do, I'm going to make this a little bit smaller so that it would lack in size.
OK, so if you can think about this, it will run it with more automatically.
It turns out that when we run this, let me make it even a little bit smaller when we run this and say,
yes, as you can see, it displays it with more.
And the point is, if you right, we right now, we and I in your keyboard, it will open the window
for you.
So that's what I didn't know.
You can go into the room and you can write some commands over here, OK?
So it's a little strange.
It's a little strange.
And more strange part is if you hit escape, you can write some comments like we used to do Kullen WQ.
Now we're going to do Cullom set.
So it turns out that we can set the bash over here.
We can set the shadow over here.
OK, so I found I found this out by Googling it.
I didn't know that.
And the way it works, you have to write Schellekens to whatever you want, like in this case being
Basche.
OK, so I want to set it to be back.
And if I had entered, this will be set for me.
And if I run Shell.
Here you go.
We have the shell in twenty six.
Now I can clear this up and I can just do what I want to do.
And it's a little strange I admit that and I didn't know that you can go into from Mark and I didn't
know you can set the shell in them with a command like that.
So so far so good.
I learned anything.
I hope you did as well.
Right.
So right now we are independent twenty six and we are maintaining our recession.
So that's what we were trying to do, even though we had DSH keep it didn't let us go into because the
shell was something else rather than the big bash.
Of course I'm going to cut out the pass for just twenty six as well because when we use this as a key
it doesn't let us in.
So I'm going to copy this and I'm going to save it to level twenty six over here.
OK, let me now it and I'm going to come down, I'm going to pass this and I'm going to say level twenty
six and here you go.
OK, now we have this but I will show you some more depth of this lecture, more depth of this level
in order for you to grasp it in an intense way as well.
So I'm going to exit out of this one.
OK, you can just do column Q exclamation point and you can exit out of this one.
I want to go into Bendit twenty five because I want to show you something.
So as as you can see, there is a tip saying that it doesn't use beanbag.
OK, so if the cat, the ATSE password like we always do in the penetration test, ok, you just do
cat atse password.
You can see all the shells that are used in this machine or in the server.
If you come over here, all of them are being Basche actually, but not Bendit 26.
So in here we have the user bientôt text.
So this is not the regular bash and maybe we can get something out of this as well.
Right, so we can get this and see what it does.
Or we can just try to go into that folder and try to understand something.
So let me come over here.
As you can see in the user being show text, it exports the term to Linux, it changes the environmental
variables.
It's more it more actually the text I that is why we have been seeing that more.
So it isn't as standard standard procedure that we come across our face off, but this is how it's supposed
to be.
And it actually had this exit over here.
That's why we actually had the trouble of maintaining our recession.
So maybe we could have understand something from here as well.
So that's why more tax Taxotere to happen.
That's why we managed to get into the we like.
Yes, OK.
So here you go.
That's why we are seeing the more that's why we can write V and go into the Web.
That's why we can actually change the Basche.
Change the channel, to be sure.
We can just say said, shall ECAs been Basche.
So maybe you now understand it in a better way.
Anyhow, we managed to go into the Bendat twenty six by running Shell.
Right.
So so far so good.
Right now we are in twenty six.
Let's come over here and say see how we can go to level twenty seven.
As you can see it says that.
Good job getting your shell.
Now hurry and grab the password from the twenty seven.
Yeah I would say it's a good chap to get this show and it only saves around less.
So I believe it's cutting us a slack and it's a fairly simple step in this point.
So I'm going to run that this and see what happens over here.
So we have as set eweida I believe again, so we have a text taxi over here and just text taxi was the
thing that we have been seeing with more, I believe.
So I'm going to run this band.
It's twenty seven.
As you can see.
It says that to run the government as another user, I will run it with ID.
We can see that it belongs to the 27.
So I'm going to cap the password of Bendat 27 like we have done before.
So it's fairly easy.
It's Usted one more time.
So Bendit Pass kept that seben the pass and banded 27.
So here you go.
This is the password for the twenty seven.
So I'm going to copy this and I'm going to save this as well.
So again this is very easy because we have done this before.
We know what how it works and stuff, but we didn't know the rim thing.
So here we are in the band twenty six so I'm going to exit out of this one.
I'm going to hit Callon Escape column two, exclamation point and I'm going to exit out of this one
as well so that I can log into Bendit.
Twenty seven.
Right.
So do that.
Go into twenty, twenty seven and let's see if this works.
I'm going to paste this over here and hit enter and here you go.
Now let's continue with in the next lecture.