So in this know, we are going to see this command in action tutorial where this project called induction,
so you can go to track me and sign up for an account and search for induction in the activities, you
will get this induction to walk through a voice command induction, the one set of command commanding
action and explain how to prevent the dinosaurs.
OK, now, before this, we need to connect to the network.
It's using this open VPN.
You don't need to worry about this.
Open will be an installation that is referred to the cardinals.
I have to do is go to this access machines and click on this open.
Will you look at this website?
And what you have to do is you need to download this configuration file.
So using this open configuration, what you need to connect to the servers to access these machines.
So I have already downloaded this, uh, configuration file.
So you need to run this open, we've as a route user, so open VPN and you need to say the open open
a file and you need to enter now enter the password for your username and it will be corrected in a
few minutes, less than a minute.
Now we need to go in this room.
I have already joined the room and we need to deploy this server.
So let me do this.
Uh, before I want to explain something, we are not commensurate with zipRealty, which shows the industry
and, uh.
OK, show some, uh, output and let me go to the desktop.
So here's what I can do is I was happy Labor Day and I put this car and if I, uh, put another comment,
then this bill will be executed as a separate comments.
And as you can see, the Koran has been executed and output is displayed.
And after the Koran, the interpreter will identify that this current has been completed and then the
next comment will be executed.
You can see the evidence output here and output here.
So if any website that's, uh, giving this option for searching the files are executing any comments.
And if you put this me and you can, uh, type in another comment to display the output.
So this is where when the Web server is put recorded.
So let's, uh, this is called command in action.
We can inject the comments in the, uh, extra box or any other variable field.
We have enough.
So red circle.
So I think the machine is the.
So as you can see, the IP address of this machine is this IP address.
Let me copy it and say export to, uh, let's say now a new word processor injection is equal to this,
uh, very fuzzy IPA.
So we get the new interface that is standard zero adapter.
And this channel is connected to this open within.
They track it.
And I got the new IP address, which is a crazy IP address, not once I do not want be a private IP
address.
So what I can do is I can just ping dollar injection.
So as you can see, I am successfully, uh, Bingol to this, uh, this Web website, recopy this one
and let me open this in the Firefox browser to see anything rideable.
So in the meantime, I run the Google Tattooer on this, you order.
To restart any directress so fast before the.
Sorry, two times.
So it is the research, I think, order to do the right thing, so that's the right research in this.
I have explained all this data here.
I can just say computer.
You can also read this description if you want to.
So this is a command in action and you can put the semicolon and then execute the next command.
This is part of brain communication.
So the source code of this has been displayed here in a screenshot.
You can see that username.
So this is a letter M.
So as you can see this.
So this timber has been stored in the U.S. and it is being sent to the pier to back it, as you can
see here, the user name date of his attempt to trace the value we typed in this username.
Feel that is that so it will get the term value and then it will just go for the filename or the exact
syntax of this exact filename and then execute this comment.
And then if that is not allowed to say that user name has not fallen on the system.
So let me try to search, since this is the territory that it's searching for, any directories that
say, see, possibly
so user it's possible is not for an assistant maybe searching for you.
OK, we don't care about this research because we can put the semicolon and then execute our comment.
So you can all read this description if you want and just explaining directory.
So I need to I need to ping the box with back.
That's what it is.
So I told you we can take the temp semicolon and then to a list.
As you can see, even though my temp was not for this and this has been found on the system, so that
we, uh, since Arizonan's each time we just temporalis has found on the system, it is considered whole
output as it found on the system, because it triggered any any value on executing this current temp,
comma, semicolon, unless even the user error and unless you some output rate.
So that output will be measured in this ls rock.
And then we discussed, uh, this user was for another system.
So I can simply put, uh, with ten packets minus C, C for comp and 10.
And this IP address.
Occupying the box with 10 packets.
OK, we thought maybe it was OK, I'm sorry, OK?
OK, my answer is correct and the box connect to the file on the web server.
What is the scanner?
So we need to a final conclusion.
I can say McMorran and then I can say this as you name.
Minus yet.
OK, you know, it was not for us, so we need to say we need to straighten in a file.
I need you to be spread the search further for, you know, my minister greater than so reverting to
logs, if not be.
OK, since.
OK, OK, I have understood not our output has been stored in the logs.
Again, sir, not the sensor not found on the system, they are exposed to what is really controversial.
So, OK, up to now we have see just executing commands here.
Now I will show you how to get the reversal from this command.
Let me go to test monkey monkey one key and a reversal.
So before that, I want to identify which programming languages have been installed on the system.
I can see which, uh, python.
So Python has been found on a system that's fine and go to this reversal, Jegede, and you can see
the Python reversal circle, so you need to copy this.
So this is like similar to net cat and you see the socket module and module in the python section.
No need to worry about this.
So let me put it in here.
So we need to modify some changes, we need to modify the IP address to our current Linux machine,
which is our Canizaro adapter.
We did this IP address, so let me turn this.
So this is you can also this is not only to the Koran addiction.
You can just get a reversal from this whole Koran addiction.
So I think that's all for this.
I can I'm happy with this.
One, two, three, four.
Copy this.
Another one.
And, uh, before, uh, decoding this that rehearsal, we need to set up a prisoner.
Uh, I think this card will be sufficient.
And now let's use the semicolon and space and copy paste my entire python socket programming code together.
Now, if I submit this and if I go to my journal and you can see, uh, we have got the.
All right.
And what they have asked is, Cannava, no, now it's very comfortable to execute our commands, all
these Russian four point four point on this one is the Russian.
And there you go, inter-group into the output and the other type of therapy you get.
All right.
Want to pick up this IP address?
So how open in an, again, newly and let's say route and sea route was found on the.
On top of her big success and the world will return to that input and say the other w w w.
The rebel leader has also been found on a system that's a success and, OK, my name is, uh, Michael,
and we got the.
Now you see the actor commanding the action that is a similar way without this comment, but we will
use the power struggle and it's also seems make a good command and you can see the description here.
And you can try to identify whether it's a Linux system or the Windows are the only two types you can
differentiate between the system and what the system is using in your config if you got any output or
a phone on the system.
It means our server is in the Linux.
So are have config was not the admin type IP config then maybe this IP configure also not for me type.
OK, who am I going.
Who am I.
Is it the Linux and whoever else finance system.
Maybe I have configured the tools or she has not been installed.
So it's Linux system.
We have conformed with that.
This is the next system.
You can also try are these comments as well.
What is a strange text file in the website troubador.
So we got this one letter address and we have got this expert, Dr Pepper.
But let's get Dr. Pepper.
Not directly.
It's just I do not remember.
So we to Dr. Pepper dirty.
So my answer is how many non non service even users are there?
So to find out this, you need to go to the home further in that you will find the number of users who.
In the conference room, find a home, there is a father who's available.
Am I wrong?
OK, I think there are zero, yes, zero.
OK, my answer is there are not zero users.
You can also check this.
It's impossible to file for the end in order to receive from that.
And why is this happening?
Is.
Go on to say who, but I put out my answer, the available data, and I need to get this done.
OK, my answer is correct.
So why do the users shall us?
So what you can do is to find out.
We need to read.
The Tea Party will differ in that our user is the word that I need to re see the contents of the shell
from where the shell is executing for this data to get it see already.
And so there we go as well.
All the services and the user you can see from the last there are no non users, right?
There is only the one service.
And you can see the whatever the data has encrypted password user group and some comment and the home
folder where the whatever W and the user bin Asbill system will not it.
So this is the directory where the shell is starting for this available data.
So I personally want to use running, OK, this is I need to find using LSP.
Police minister.
So that is good reason to use this, uh, information about the next distribution.
You can also find out this LSP release and there are some like this, what looks like a lesbian, gay
and lesbian recipe, etc., which relates to the system information.
So we have got this 18 zero four four.
Copy this.
So print out the what the old photos, Bonaparte Felder, Bernie Shaw.
OK, what is the message of the day?
I don't know what's the territory exactly the Maudy.
Let me look at this, Maudy.
So a bit more before Mardi Gras, so let me copy this one.
Let me see whether this is the.
Excerpt or not, so it is Daltry now let me see this aerofoil.
OK, this is the I think this is harder, if not, let's try Dr. Pepper makes the world taste better.
Superintendent Mark felt it very short and so beverage, so Dr. Pepper, maybe the beverage, because
we have the two of us work on the platform, it's let me try this, Dr. Pepper.
Good.
OK, I talked to Dr. Neme, so we need to get the flag.
Good.
We're getting this far.
We have completed the walk through.
Oh.
Exposed the vulnerability and get the flak for this.
You can expect a better one.
So I think we need to do this preregistration.
OK, let's do this prescription, not a problem, need to.
Let us review any other comments we can execute as to the.
Oh, OK, I will explain this is an opportunity for you to get the pediatrician and also.
So I discoursing about this in previous question topic, how to get the prescription together.
So don't worry about this.
Mr. Carter is only about this at the current injection or just current injection.
I hope you have understood decongest the main concept.
You need to understand this if you have any the current addiction possibilities.
You need to execute this reversal for better convenience so you can go to this market.
You cheat and you need to find out what programming languages have been installed on the Web server,
Surbiton and BHP and the PSP to modify the IP address to the correct machine so that the connection
to your correct machine and then we need to execute the revolution, then we will get the cell and we
can comfortably consider a lot of, uh, whatever shortages are there.
So don't worry about this.
All Rorschach's and you of the network conditioning and prescription.
After those sections, you get a card table.
Are these.