High within the section re going to sell a new CTF, which is called Wakanda, and it's it resides under
one dot com, which is a fantastic Web site, because there are a couple of actually there are hundreds
of virtual machines over here.
Of course, they are vulnerable machines and this website is completely free.
So we're going to start with those.
We're going to take a look at a couple of those.
And first of which is going to be Wakanda.
So this is a movie, maybe you know that the Black Panther movie and I didn't even watch the movie,
but we're going to try and solve this CTF together, OK?
So if you search for Racan, then if you just find this machine over here, this is released in five
of August, 5th of August 2018.
And as you can see, there are a couple of download mirrors over here.
I just download one.
OK, so it downloads and Alwiya file so that you can run it easily on your virtual box.
And here we have a description.
It's always a good idea to read about description.
This is only hint that we're going to get in this virtual machine in the previous section when we try
and solve the Bendit.
We had a lot of tips, a lot of brief's, a lot of descriptions, but this is the only one that we're
ever going to get, OK?
And it only says that we're going to get the route.
OK, so there are three flags, so flag one flag to and the route texte and we're going to find them.
So this is the essence of capturing the flag.
OK, we're going to capture those flags and this is kind of intermediate level machine.
So anyway, as you can see, there isn't too much heat over here.
Just follow your intuitions and enumerate.
So this is about the enumeration.
And there is a logic that we sold all of those seats during the course.
So we're going to start with this thing and we're going to move on to other things where we focus on
other areas rather than enumeration.
OK, so download this area.
Of course, I downloaded it in order not to make you wait and read the descriptions and then you can
run it on your virtual box.
I'm going to show you how to install it.
Once you download the area, you're going to have to double click on it and just import it as it is.
OK, we can change the settings later on.
Just make sure you impart it.
Of course, if you're using something else, then virtual box like VM, where you're going to have to
make sure that you find a way to import your Alwiya into we are marabout.
I believe this machine is specifically built for virtual buks.
So since virtual box is free, you can download it and use it anyway.
So make sure this is Linux and Debian 64 bit and for the RAM, I'm going to live with it.
Visnjic OK, with your memory, we're not even going to need that.
So let me just go over here.
Network is important.
I'm going to make it into the net network, OK, because that's my Caleigh operates, that's where my
colleague operates.
I'm going to make the promiscuous model of all.
And here you go.
Micheli is working on the Net Network.
Please be aware of that.
It's very important they have to connect with each other.
So make sure you both put them on the same net network.
OK, of course, if you're working with some other network like Nat'l or Bridge Adapter, it's fine
to make sure they actually communicate with each other.
So here you go.
This is our Racan, the machine.
And as you can see, it asks for a login, but we don't know how to log in over here.
We don't have a hint on that.
We are just going to have to just this to the callaloo.
So I'm going to open my color Linux.
And I believe we don't even know the IP address of that machine yet, but we can just do a net discover
or end map in order to get the IP of the target machine.
So let me just run.
I have config.
Here you go.
We're on Channel two four, so I'm going to run that discovery with the range of Tenno to zero slash
twenty four.
So I believe you know how to do this stuff.
OK, how to get the IP from like in an internal network.
And if your net discover doesn't work, you can always go with the end map as well.
You can run and map with a range like this.
OK.
I created in the Net discover, just make sure you get the IP address of the target machine.
That's where we start, right?
We're gaining information over here.
We're gathering information and we're just going to enumerate a little bit.
We we're going to go into the active scan, which is that basically later on.
But we're going to have to see the IP address of the target machine.
And here we are.
So 10 to 14, I believe we we are on ten or two.
Four.
So 10 on to 14 must be the target machine.
And as you can see, we already see the open ports over here.
And that discover isn't even complete yet.
But we can always get the IP from here any way our path is clear.
I believe we're going have to run and scan against this Channel 214.
So I'm going to open a new tab over here.
You can't run and maps scan or you can just use them map whichever you want.
OK, so I'm going to go for the map.
I'm going to go for the service over here.
So S.V. OK, and if you have a favorite and map scan, you can always go for that and see if you get
the appropriate result back.
I'm going to search for all ports, internal 214.
So remember this dashboard dash stands for all ports.
So I'm just going to see if we have like any other open ports rather than this.
And yeah, I believe we can't use the first scan over here, so I'm going to just make it a so here
you go.
Now, we started a map against 10 214.
Of course, it's going to take some time.
If you want.
You can always post this.
And here you go.
We have the Internet discover scan results back in here as well.
So 10 or 214 is the target.
And we can see the Mac address over here.
You can go for the same map if you want.
As I said before, you can't just choose the internal scan or any other scan profiles from here and
you can see the command over there.
And that is just a GUI.
So as a map is just agree, you can always around and map from your terminal.
Here you go.
So we have various ports over here, which is surprising.
Oh no, not surprising because we have already seen the eighty one one one and thirty three thirty three
over here.
I believe we have an extra one, but we get to take a look at all of those things.
Right.
So the important thing is we have the result back and we have the services and stuff.
So other important thing is make note of that.
So I'm going to go into my documents.
I'm just going to go into my folder and I'm going to create a new kind of folder over here, which is
where we going to save all the notes regarding to the CTF.
So I'm going to create a new not text, not file over here, like, no, that's OK with Nano.
And I'm going to copy and paste the map scan results over there so that if we just closed this terminal
by mistake, we can always go back and see what it was.
So I'm going to paste over here like that.
So here you go.
Now we have the map scan result.
I'm going to say control or enter control X now it's SAFET.
Great.
Now, if I can't this out, we can see the map result every time we do that.
So far, so good.
So I believe this was the first step.
Now you're ready to analyze the results back from the map and make our way into this machine.
Right?
So let's do that within the next lecture together.