And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
in this lab we will call for the integration and exploitation of our lab virtual machine.
It's an order.
A wave of virtual machine.
Okay.
So how can we get it.
Following the link that I have provided you earlier.
So you go there and then you copy it.
I think that I completely.
Yes.
OK.
And then you posted here it is this sick or s and then I'm going to wait till the page loads.
Again
indiscernible you.
So we are going to make some comments and then here you have to click it you click on it just to download
it.
And then after being downloaded sort of virtual directory fine and then.
OK.
I think we already have it downloaded.
So.
Exactly.
So you go here and then you will find after downloaded you will have to extract it so you double click
on this just to import it into real virtual box.
And then you you can click you can type any name age and sick.
SIEGEL Yes.
It's on a boon to the digital world.
Okay okay okay.
And now we just click on import.
We don't have to create one.
We initialize the MAC address of all that we've got.
No we don't need that.
We just import.
And then we're going to wait a little bit
so after being imported we have to click on it just to see the details.
Either you can like click on it and then you click on settings or you can just highlighted like that
and then you click here details the first thing first since you are going to work as an attacker on
your candy machine.
So you have to be sure that your candy machine is configured in the same properties which are there
are also in your sick operating system.
OK let's have a quick view.
The network is is on widget US Laden.
OK so let's go.
Here it is.
First thing is you can go here against nothing special.
Okay system just to make sure that everything is wide they store it you don't need to do anything here
on your own network bleach adapter.
Okay.
Good.
Perfect right.
Okay.
We can try to go there.
Always be indigent medical ones too quickly.
But if you want you can just click it here.
It'll be better.
But for this video we look at it and then show it.
Nothing nothing.
And then so we go back.
You just click Okay.
Now click start to start your operating system
started
you will do.
You can in there to reach in
okay.
So meanwhile while you launch your career in this machine of course as usual you have to try to detect
or to get the IP address of your operating system.
I mean this sick operating system and how to do that it's the same process as we showed earlier when
the previous video was.
So what we have to do is by typing net discover minus a interface.
And then your endeavor is probably if you're in deficit my mind is always it's e d it's zero because
I don't have yet.
I would put it in water.
I'm not water.
So it is on e d h as he walks probably yours might be a teen age one.
So it doesn't matter.
OK.
Just follow me date.
OK.
Now we have to start or calendar this much.
So since this is it's OK here.
So we don't know anything for now.
So we just go to Carly machine and then we started study it.
Okay.
We have saved a vision of country news so we don't need these anymore so we can try to do no goat you
can try it.
Goat okay.
And then we would open it up.
Okay.
No no no.
In our
in one so we can open two if you want.
So we're discussing it here.
Okay.
So let me read it to you.
Well now you're going to type in the net disclosure comment.
But first thing first you have to data mine on which interface you are reading this config.
OK.
Now we are on it is your date night and stuff.
And then it was in order just to kick and we have to make sure that all sic operating system is one.
OK.
So we can only do I need know these were annoyed OK.
OK.
It's this one then the last one.
OK.
So we can put it to a C to consult this gun.
OK.
Now what are we going to do.
So after typing this we're going to type this we copy it and then we will pass it into a box.
But listen we have to find a report on which de silver of that if you know what machine is one thing.
So since we copy it and then we can go here and plastic here just plastic to create in a single capacity
and then we if we are going to data mine on which put by typing in maps and map is it one and Canadian
mix that can be used for detecting or scanning network to find out a lot of information for example.
We can find report on which the server is winning is this age to be and and so on and so on.
So let's take and I use a.
And then IP address of the vulnerable machine bust in the replay center.
Yeah for this coming now we're gonna wait till the scan is complete.
Okay so we are going to wear the early to mid again.
Okay now let's go.
Let's go.
Check it out okay.
So we have about 22 distro.
This is s s h.
So we're going to use it but not now.
Why do we need.
We need to put on which the server is running as we said earlier.
This is this age post key.
OK.
Oh I.
Yes.
It's not important for us now.
Twenty one to eight.
This port is opened.
It used to be boxy.
Okay so now we can type days behind the IP address into a web browser because this is the port on which
the server is running.
But we can go to the beat down to see AT&T.
It's it's closed.
So it's unimportant to Snowden.
All right.
So let's dive here.
Got to do it in
here.
Well if you will.
If I was in conduit to you.
Okay.
No.
What are we going to do.
We have to find a way to get much more information encouraging news machine is on the way.
No tools to get information about a server is by when we need to.
OK.
So it's one time this comment.
Nick.
Minus final.
And then we copy and past the IP address of that we know mention you.
And then.
Yeah.
So what we have to do we have to use the proxy use proxy use proxy apps use proxy.
And then again we compete in past the same thing past and then do three one and eight to eight.
Okay.
So now what is going to do it brings us much more information.
Dan and Matt did earlier.
So now we typed Nick do it minus it and then the IP of course and then we use the proxy now.
Okay.
Let's put in a request into and wait till the scanning is complete.
Okay.
This can is complete.
Okay now lets people see it.
It's we did we go oh okay okay.
Okay.
But here we are going to try to get a much
much
it's go down
much.
Oh C.G. I.
Here we have Sergey IP.
This tells us a lot.
What is you exactly.
So it's something that we can try to find a we much shale you see.
So when you see decide is we know what it is.
Sure sure.
Now let's go and then to try to extract this information or exploit disinformation information.
We can try to go to
to proceed with the exploitation we're going to try.
Are we going to use this this cure common cure common.
What it does exactly.
So we are going to target first and then we will tell you.
So we have this.
I would provide you on in the final and the and then would I be.
And then we take a look see.
See.
And then the IP over the second machine.
So as we have it earlier.
So we can past it here.
We think it's him.
Okay.
I sit here and then ETP and then again invested here and then after what we have to do we since we had
this information earlier so that we see it is noble to win what show Chuck.
So we will try to put this behind me and then we type slash and then CGI scenes by again being stateless
of course as it was stutters and then minus age.
Now we feel we we feel we're going to
pound disease and carry work its opening and close it and then in time we type something like test test
and then we'll press semicolon equal content that we have to take put in type takes
and cool people in the USA are being slashed I.D. d so that we can I do we want control our debt.
And then we fix it.
I d I do well is a d d.
OK.
And then you close the courts.
Well so what is this exactly.
So we send it guess weakest to this sick operating system who notable and then so that we feel we knows
what we want to get what we want to get.
We want to get a D D the.
Doing what.
So by pressing into and then you will grab this information.
Okay so it waste no Endo.
Okay.
Good good.
It would take us a while.
What is should it be sold on Oh we got some mistake to connect to this.
I mean.
Okay so we know why.
So we forget to put.
We forget to put the port number of course yes.
Yeah.
Okay.
I'll get to put it in two key and then I need you to compose a note get exactly.
Now we get to 80 and so since we get the idea.
Now let's make a note of command so that we get the reverse Shin.
Okay.
So to get the reversed shell going upwards.
Okay quite some common guys.
And then why do we have to do.
We have to take this DCP.
We have to add this one.
Now it's going to be but I should be in charge so that we get the reverse reverse share and then minus
the N Dev DCP.
And then here we put the IP address of or Kylie mix machine.
You have to be careful in that so we can press Enter enter okay cable but before placing into.
We see that we have some things that we can type that's a mistake here.
Would be space was not.
It should be slash slash.
Then let's go let's go let's go.
E and bash being white all here to mistake Clinton day.
We did take it before it was in there and then.
Yeah.
So let's see if we think music is a weird record okay.
No.
Tolkien was in India.
Yes.
As you can see.
Exactly.
We get here into this domain on a connection.
Perfect.
So one session is opened to know what we're going to do.
We condition.
We have to type this comment.
We should get our time right now so that we get to share to the path.
Okay perfect.
Now let's start it.
This situation will help us to get to this C G I being path so of course I provide you d in the in the
resource.
Okay so now what we have to do we have to type right on right on the line of C a post of import t why
semicolon of course and b t y dot spawn spawn and then we slash the bash be used and then we close the
code and then we could stuff and then now we should point into it.
Exactly Perfect.
Now we get into this being for the gate but as you can see we are heel as WW d'etat sic bows.
We don't have all privileges yet.
So let's find it.
Let's try to escalate the privilege.
That's Charlie.
Let's see first what kind of future is in this system.
You can use the common card then DC pops.
It is DC.
Yeah DC.
Slash slightly.
That's one place.
No.
Oh yeah.
It's like we have to quote my school.
Interesting.
OK.
Now we have to type a fine common to go out and get information.
Look who it is we type it fine.
Come in.
Yeah.
We'll find which and we'd each be and then type
in
this
argument where it seems to me ladies I mean the bus
in packs missing no
O K.
So we find some information delayed on invalid logging too.
Okay good.
So far so good.
Cool.
Right now it looks like we have loads of BHP files.
It's called up
can you we have a few files.
BHP files of Ford's with some kind of quinine shithole that I was using would interesting most parks.
John I want to tweet.
Okay.
Now what are we going to do.
Let's try to see if we if we test this password if we will get into this sink into the sink oil is coming
out.
So look for this task in question so we can try to assess each sheet.
We will assess each the IP address of the victim machine which is over and over what sequoias mushing.
Okay bye Craig.
And then open your terminal.
OK we need to hear Okay now we can type this message if there is a switch and N Sync points the IP address
it was 7 and relevant to incident and 7 wide scenes and then and then we can try to was a to.
Are you sure.
Yeah I'm sure.
Yeah.
Password.
Okay.
The password was this one.
John the bleed again will be copy and then post it here.
You mean Lucinda Oh key password denied C++ would be like that John.
One two three.
OK because we had the worst of all.
OK.
When I lived.
Great.
Okay guys.
So I can we need to see that when I see you said it would confuse many terminologies.
Call it that I can try.
This one my dad or minimize.
Okay now we are here.
We are here as a 6 C O as and
c boys.
Okay so that's good.
You might ask us hey hold on hold on hold on.
Why did you choose this particular username or something like that you know.
So it's it's nothing magic guys as we have earlier typing in it.
Tell me this comment this comment and then we view the password fight in this fight.
Here in the country not every thing that we find before the dot before this.
And Bruce X for example this one everything before it is considered as a user as a user name.
I mean for example here demand is considered as a user.
And this one is considered as a user.
And so on and so on.
And then you can go down on the one moment the would on don't want to underline just the plain old Sig
sequence.
Okay.
You see see this.
So it is well here.
So that's why we put it down.
Okay.
As we can see now we are here as sick.
We are not here as would.
So when one of the easiest way to try to be there as would is by escalating it.
And then how.
So we can try to do so.
So do it it's time to do so in center.
Okay.
Put into it and then.
Now we have to find your password as a device so we can trade the password to good.
So now we are in.
So that's a case of call.
Now we can go back to 0 sequence machine and then we try to type exactly the user name account that
we have hacked and password.
So it is.
Always.
And then it goes into an edit but it was John one to two he was in the
law made a mistake Oh it would be lovely.
And then in the last word.
John one to two.
Exactly.
Here we are.
So this was the test that we had to solve.
Okay.
Thank you.
Of fully you enjoy this video with us guys and then we are looking forward to seeing you in the next
video.
Thank you.