Hi, within this section, we're going to focus on privileged escalation on Linux machines in next section.
We're going to focus on privileged escalation for Windows machines as well.
So don't worry about it for right now.
We're going to solve our virtual challenges.
Are vulnerable machines in try hack me.
So Try Hack Me is a platform that is actually created for you to soldI vulnerable machines one more
time like bellhop.
But this time you're going to create a profile for you and then the machines that you will be solving
will be recorded in that profile.
So after you sold those machines, you get points, you get rewards, you get credit so that you get
a ranking.
So when you apply for a job in cybersecurity, you can actually show your profile to the employers.
And you can say that, yeah, I have solved all these challenges.
I have a good ranking in Try Hack Me and so much more.
So it's a good idea to learn how Distri Hackney works for your cybersecurity career as well.
So I have uploaded a virtual machine as a vulnerable machine in this tri hack me platform so that we
can work on that later on.
During the course, we're going to see an alternative of the tri hack me again, which is called Hack
the Bugs.
So let me show you what I mean.
So it's called Hack the bugs that EU.
So this is another platform.
OK, we're going to do the windows, things in the hack, the box.
But there is a paid option and a free option in the hack the box and also in try hack me as well for
license and registration purposes.
We're going to use the windows in the hack, the bugs and we're going to use the Linux in try hack me
so into me you won't pay anything.
But in the Windows section for the hack the bug section, you're going to need a VIP membership, at
least for the time being that you solve those challenges.
OK, I'm going to talk about that later on or just right now.
Don't worry about it.
Reject me is completely free for you, at least for this cause.
Of course, there is a VIP section or VIP option intrigued me as well.
I'm going to show you what I mean once we get into that.
So first of all, we're going to have to create an account and then set our machine up so that we can
communicate with the tri Hackney servers so that we can actually run on and map, scan or ping the target's
vulnerable machine that we are working on.
So as I said before, I have found a vulnerable machine and I modified it and put it in the tri hack
me.
OK, so I'm going to talk about it as well.
So if you have an account in Try Hackney, you're more than fine to use it.
But if you don't, I'm going to show you how to sign up.
So all you got to do is just come over here and say, join now, OK?
And over here it will ask you to create a username and an email and password.
So make sure you give your username, email and password and choose your experience level, which doesn't
mean anything, really.
Just choose whatever you want.
You can choose complete beginner, early, intermediate, intermediate or advanced.
It really doesn't matter.
You will just see custom preferences or custom like offerings for you, but you can reach whatever you
want in this whole website.
OK, just sign up from here after which you will and enter your email and just confirm the account.
Since I have already done that, I can just come over here to login page and say I'm not a robot and
I can login with my username and password.
So once I do that, it will take me to the dashboard of the tri hack me, which I can actually see what
kind of rooms that I'm in, what kind of seats that I'm working on.
So we're going to talk about what the room is right now.
I'm just going to click on the dashboard and start loading for some reason then it's hasn't been completed
yet, but it really doesn't matter.
I'm just going to show you what to do.
If you come over here, you can see the menu like compete, learn, develop, OK.
And of course, the images and the menu options like ICA's can change over time.
But first thing you should do.
In here, when you come over here, just take a look at the dashboard to get familiar eyes a little
bit.
For example, you can see your current ranking.
You can see how many users are there.
Over here we have more than 240000 students or users right now.
It will be more when you visit it.
But if you come over here to activities, you can see a possible virtual machines, vulnerable machines,
which you can work on actually.
And after you complete complete the scores, I really suggest you come back here for free versions of
the vulnerable machines and just try to solve them all together.
OK, here we have some rooms here.
We have some activities in which we can practice some sort of skills.
Here we are two hundred six to seven public rooms, OK?
And you can search for any term like Learn Linux, learn Windows, something like that, to find a related
room.
And you can just choose it from this list as well.
So these are the most popular ones right now.
What we want to do, we want to find is open VPN, OK, we can see that from our dashboard or we can
see it from here as of why we are looking for a VPN, because that's how we actually establish a connection
between try hack me and our recolor Linux machine.
So I'm going to show you how to set this up.
And if you cannot find it, you can just search for open VPN and just find the open VPN from here.
So it will display different kind of instructions for different kind of operating systems like Windows,
Mac OS and Linux.
OK, and there they are in the form of tasks.
So we're going to see what the task is.
But task is, is actually when you get the question or when you get the tip like we have seen in the
Bendit, then you do it.
You can just say, OK, I have done it and just hit submit.
OK, so over here, for example, I can just say completed.
And if we are looking for a challenge, like a CTF, like a capture the flag, it will ask you for a
flag and you get the flag you pasted over here and just say submit so that you get a point.
So this is how this works, OK?
This is how the system confirms that you sold a virtual machine or sold a CTF.
You capture the flags and just submit it from there.
But in this case, we don't have to capture a flag or something like that.
It says that.
Go to the access page, OK, and download your own open VPN file.
So make sure you go to try hack me, slash access or follow the link on the first task because you're
going to have to choose a server from here.
So if you come over here, you can see the regular servers and you can just choose either of them and
download your configuration file.
So this configuration file belongs to you?
It's specific to you.
For example, mine is named after my name, as you can see, in fact, after my username.
And I'm going to save this file because that's what I will use in order to connect to the tri Heckmann
servers.
So you should download your own and just follow along with me, OK?
After that, you can come over here to task for which is the connecting with Linux.
So it says that run through the app, install open VPN, which will install the open VPN tool to your
Linux and Inch'Allah Linux.
It comes with preinstalled.
So you don't need to do this step.
But if for some reason, if it's not installed, just do this and then you can just run the file that
you have downloaded.
So I'm going to go into downloads around L.A. and I'm going to grab my name because there are a lot
of files in my downloads folder, I believe.
Here you go.
So I see my own weepin file over here.
So you will see yours in your downloads folder.
So what you have to do, you have to run the open VPN.
OK, you can just say open VPN and run it from here like this.
So once you do that, it will just connect, it will just connect to this VPN and it will send your
request through this VPN so that you can communicate with the tri HECM servers.
As you can see, fire on if config.
I still see the Channel two four, but also I get a tunnel over here which is zero and I have an IP
address related to that tunnel.
So ten nine one nine nine two one three for me.
So of course it will be different for you.
So once I see that license, once I see the tangible.
Then it means that I can connect to the tri hacked me servers.
OK, so over here it says that get connected.
Since we done that, I believe it will just show up connected right now.
So let's see.
Let's come over here.
I'm going to search for D.B. and ask, OK, so it won't show up here because I made this private so
that no one else can reach it except from the students of this course.
So I'm going to come over here and I'm going to go into that room.
So the room is basically our virtual machine where a vulnerable machine is located.
So it's room DBI and privacy for me.
So this is the link.
But I believe you cannot actually reach that link by just typing in the browser.
I'm going to share a link with you in the resources of this lecture so that you can actually enroll
in this room, so that you can see all the things that I'm seeing right now.
OK, so this is the room that we will be working on.
As you can see, there are a lot of tasks over here.
So each task represents a privileged escalation technique.
All we have to do is just follow along with this and we can try every privilege escalation technique
over here.
I'm going to take you over to most of the most popular ones, most common ones that you're going to
come across within RCTs or PANTHEISTIC.
So I'm going to show you one more time.
As I said before, I found this machine online.
So I'm going to show you where I found this.
And I have modified this a little bit to make this suitable for our own testing course.
So I'm going to search for privilege, escalation and GitHub.
You don't have to do that by now.
I'm just doing this so that you know, that I got this from someone and I want to credit this guy,
which is ciggie Qahar or something like that.
Maybe I'm mispronouncing it.
But again, this guy is great because he came up with this privilege escalation workshop in which he
created the vulnerable limbic system, a system that we are going to use in this course.
So we are basing our vulnerable machines on this guy's workshop.
So thank you for that.
I don't know.
I don't know even the guy, but I have actually benefited from that a lot.
Thank you very much.
So over here, I got this descriptions from the guitar page as well, but I have just made it so that
you can find it for each task, OK, chronologically or in a way that you can follow logically, OK,
so that it would make sense to you.
And I'm not going to just follow along or one by one over here, OK?
I'm just going to follow along with my own curriculum.
But we're going to take you over to the most common ones as well as much as possible.
So if you run, deploy if you just hit on the blog, as you can see, our machine is deployed over here.
So it's called Debian privacy.
And within one minute we will see the IP address of that machine in here and it expires within fifty
nine minutes if we don't add an additional hour from here.
So it will take us much more to solve all the questions.
So I believe it's a good idea for you to add one hour and after you finish your job over here, don't
forget to click on terminate so that you don't actually create a burden for the tri Heckmann servers
for no reason.
So again, so this will deploy our virtual machine and this will deploy the virtual machine that I have
uploaded specifically for this course for you and will give you an IP address and you will be able to
directly reach that IP address and ping that IP address from your next machine because you have downloaded
your own or VPN and ran it in your own Linux machine.
OK, so if you have skipped that step for some reason, don't forget to do it.
So here you go.
This is our IP address.
So once you just terminate this and run it one more time, it may change.
But right now it has the same subnet as I have in my town, zero, as you can see.
So it's ten, ten, one, nine, seven fifty six for me.
So I'm going to try.
That want to see if I can actually reach that and here you go.
As you can see, I can go and reach that, it's very good.
Now, we have established the connection between our callisthenics and between the tri hug me server
that we have deployed here.
We see the username and password.
So we have the root password and the user password here as well.
You won't need the root password, OK, because we will always login as user and try to make our way
to become rude.
But if you need for some reason, the user password is James three to one and root password is James.
One, two, three.
So in order to assess each into that, you have to write as a user at IP address.
OK, this is not the IP address, this is the password.
So let me get the IP address one more time.
So all you got to do is just round this and give James three to one s password once you hit, enter.
OK, and again, if you want to, you can direct DSH as route as well.
But it won't make sense because all the practices that we are going to do is to become route via using
the user.
OK, so I'm going to paste this thing in and here you go.
We are connected to the server so we are not hacking in.
I already gave you the passwords because we will practice privilege escalation in this section rather
than hacking in.
So we're going to stop here and start within the next lecture.