‫Instructor: Hi.
‫Within this lecture we are going to install our APK
‫on our gain motion and we're going to run our server
‫so that we will be ready to start our CTF.
‫So I'm gonna run ifconfig and if you're on Windows,
‫you're gonna run ipconfig.
‫So remember this comment
‫it shows us the current local IP that we have
‫and we are gonna have to find it
‫because we are going to use it.
‫So mine is 192.168.121.
‫So yours will be different.
‫Just find yours by running ifconfig or ipconfig
‫and then you can run Python app.py
‫like we did in the previous lecture.
‫Okay, so our app is running.
‫Our server is running,
‫and find the APK inside of this master folder
‫and just drag it and drop it
‫on the gain motion so that it will be installed like this.
‫So here you go.
‫Now it's installed and all you add to do is just come
‫over here to preferences
‫and just write the server IP and server port.
‫So in our case,
‫server IP is the local IP
‫because we are running this on our local machine.
‫So IP is 192.168.1.21 for me.
‫So write your own IP and just hit submit
‫and port is by default 8888 as you can see.
‫So you don't have to change that.
‫So over here you will see a usage guide.
‫Okay, under the downloaded master folder.
‫So as you can see, there is a username provided for us.
‫We don't actually need that
‫without even having this username.
‫We can log
‫into this application by exploiting some vulnerabilities
‫but we are gonna see that later on.
‫I'm going to write the password username that are given
‫to us like this at one two thee dollar sign.
‫Okay? Because the instructions,
‫we need to
‫follow the instructions first and then we can actually look
‫for other vulnerabilities as well.
‫So make sure you log in with this account
‫or the other account that is given to us
‫and here you go.
‫Our app is working, as you can see,
‫we got this log on the server.
‫It says that correct credentials user is dinesh
‫and we get to see the activities like this.
‫For example,
‫if I click over here we can see the account numbers.
‫There is some amount to transfer over here and
‫if we leave it blank, I believe it'll fail.
‫Let me give some value like 10.
‫Yeah, it says that transfer is successful,
‫so it actually resembles a banking application.
‫If I go to statements,
‫it will show me the previous things that
‫I have done over here.
‫If I want to change the password
‫I can come over here and try to change it.
‫Okay, that's good.
‫So maybe you can try to change your password
‫like this in order to have a password to remember
‫and here you go.
‫It says that yeah you enter the password
‫that is not complex enough
‫like maybe you can try with other passwords as well.
‫But as you can see it gives us some error
‫and we are gonna see why is that the case,
‫and I believe that's it.
‫That's our application.
‫Now it's time to find the vulnerabilities
‫and it's time to find the exploits as well
‫so that we can hack it.
‫See you in next lecture.