So let's go to the next challenge.
We are going to challenge 20 to Ken.
All right, so let's go to Disturb.
So the challenge is now presented to oscillate during decided he would like or he would try something
different to BHB this time.
So we know that it's a bit too weak.
So he's trying to hit server side language.
He's trying to server side language.
What?
I can't remember what.
All right.
So try and get Depass would fight using some form of common line input when you have it again as at
me.
So we have another crucial information, Dad, whose name is adamant because we will have to log in
as admin.
So first thing, first in everything.
So you just wait, click and inspect.
Can you sue speech.
So we are going to click on inspect, let's say, if we will find some more information.
It's a good tool.
OK, we are going to network and then we can look for a sheet so that we see what kind of information
do we cast there.
So we go to index.
Come on.
We'll do this, so we go to index.
So let's try to see a silver cloud, flowers cookie.
Can tell until the.
So I'd say nothing.
If you can go to your page source and it would be very helpful for you so that you can find if there
are some encrypted text or commented texts, is that you see.
So there is nothing.
Well, so what we can do, we can just close this tab and try to go back and type something like that.
Mean since we know that there is an actual B had been and then we can take a single Squeers Commandments
or or which one.
It is like two quotes, Zone one and Quad's space or space one equals one and then delete and those
then delete the goods.
So let's try to log in username password encoded so we see that day.
This message comes from a specific deviltry.
So the directory is called secret secret deal.
OK, so if you want, you can try to use durably just to grab more information about their stories and
the and the basic 22 challenge.
So to do so, are we just gonna click here?
As usual, your pain will be terminal and then you type dermal.
And then you copy and paste.
This is for Derwood Basic 22 and a new presenter.
But in this case, we will not be bored to get to the secret directory.
As you can see, we get a lot of every two uses.
But we didn't get the secret directory.
So we got to find a way to to be able to find a secret directory.
So to do so, we are going to use SSA, which is a separate site inclusion.
So we are going to use it because so that we can grab more information, more secret information, which
are both old power when we are using durably.
OK, so let's go back.
OK, so now we can just let them do any more so he knows we're going to pass some comment.
So let's try to use some, let's say some nukes.
Komen said that that all saying no more six.
So, again, just type it like that and just check.
Your common network announced, OK, is what is.
Try to again, it is on process to speak.
So we get to be aware of everything that we get and the other word.
So we call back here again.
Now we are going to list if we have if we can find some directories.
Let's just say this was under.
You will comment and not recognized.
Okay.
So let's go back to.
One of the most well-known comments to find their way to wi fi is using SSA is that we put all the commands
in a h t, m n and therefore we could try to type this.
And this puts it here.
So we just put it like that, and this is the each day comment.
And then what we're going to do since we are using nukes machine.
So we will use Delinda's version of common, not the Windows version.
Okay, so let's try to put it in shop and then shop, execute, execute, execute ACMD Ekwall and then
there will codes.
We put it less and less minus.
And it is a or if we want we can just put this so it doesn't matter if you were about to, if you if
your attacker machine is windows.
So instead of using s.m the equal LSU should say that sim that you call D I o.
Deal.
OK, so before going into the default this but before checking need, you can check the information
on that page to know what is exactly sepoys side inclusion.
So you can just go there.
Let me show you Forrest's.
You can go to this page, you know, and then you use it.
What is it?
How it works.
And then below you will find some examples, if you will.
If you are on Linux or to find it to list files of directory, you will use this one like we do all
access.
There will Twitter, you will use these comments and so forth into one voice.
You can just read it.
Guys, if you add on it, really don't know exactly what is it or about.
So let's go back to our topic.
All right.
So now we can just to it or just click check.
Okay.
Here we are.
Now we find two fires index that BHP and process the BHP, as we can see that in all to mean all of
over.
So we need it.
Fine.
It a fight, we should say.
What a woman.
We needed to find a fighter.
Paul says the BHB, somebody here.
We find it okay.
No D down and then creep back.
What we can do.
We can try to find more more files using the secret bath.
I mean, the secret folder that we have got when we when the page was when the pager generated Oz,
that e when we stage.
So it was something like when we were here.
I mean, they want to click on log in.
So we get this pop up message and then it was on this folder.
So now what we can do, we we can just copy this forwarder and then using the side comment.
So let's go back again.
Now we are going to look for it.
So instead of this.
So we can just try to put the file.
So now.
So now we can Busteed control the purchase by leak case.
We don't need this right now.
Just send her to see.
Here we go.
Here we get Htwe files.
These files was not there before.
So even if we had even if we were in this path of the URL.
But disposal.
This file was not listed.
So now what we can do, we are going to try to open this page.
Just copy control to see and.
Okay.
First thing first, let me let this page open with controversy.
It could be this page.
And then we posted here.
Okay.
Now I'm gonna try to copy this.
This file on.
And go back here.
And we're going to try to delete this one.
And try these.
Nothing found.
So we probably know why.
That's cause we should put it into secret territory, a secret territory, and then pass it here.
So let's see what came.
So we find something that in this secret, there were trees.
So there is a fight.
And then she has some stream inside and some numbers and some integers.
Some OK.
Some something.
It has something inside.
So what we can do.
We don't know if it is not encrypted or.
But it doesn't look like it is encrypted.
Something like that.
So to do so, we are going to just click copy.
Oh, Gaitskell.
It's still loaded again.
And we can go back just to see if it if it is a plain text message.
So what was Ortez try to get the password.
Okay, so we get some.
So we don't know if it is and from or using some form of command line input or case or we use this comment
of this essay.
When you have it looking at.
So we are here as admin.
So we just just posted here.
And of come on ops.
Pass it and try to log in.
Congrats to any five points has been added, so that's how you make you make it.
And then you might ask how we now know that your website is one or two.
It's a site.
So it's just a matter of testing because district word is out and testing.
So if you try some obscure comments and it goes to work, but it doesn't mean that it's unknowable.
You can try some excess comment as well or some SSA comments about site inclusion so that you can get
as much as information which will be required for you to proceed it.
So let's just close it and let's go to the next challenge.
So let's see, what is it this time, do it's gone back to BHB.
But yet again.
So it's just a matter of BHB.
So there is there has been a problem.
He's attempted to create a new site.
Check it out or get this.
It's a cricket ball site and see what you can find, a good friend of mine mentioned something about
it.
If I, if I so it's we modified encryption.
If you don't know, what is it?
We will.
We are encouraging you to go to the first part of all, cause, I mean, at events Ebtekar hacking it
in penetration testing, part COSPAR, part one so that you can learn what about would verify it.
So if you want, I can just show it to you.
So let's go back to all.
Okay.
Or you can just go here and Dipo new to within me.
Let me give me that gun.
Where's.
And now you can type.
Find Ways and Means Committee called King PIN Network.
Nutrition and nutrition.
A computer is getting hit.
So is Scott No is quoted on one of gays.
So this is mine.
You can just click on this one white one and scroll down one again so that you can find the content,
of all course.
What?
So this is it.
We would find inclusion attack.
So, yeah.
Okay, so after earning what is if I can come back here and and proceed with the challenge?
Well, first thing first what I'm going you if you really want to if you want to buy Dysport one and
you are already on the path to it.
And so before.
But choosing.
You can always contact us because we are.
We always have a discounted coupon for our students.
So again, I can give you some.
Oh.
So let's just close it.
Mm hmm.
Interesting.
So let's call Bukkake first date.
So, OK, check it out and see what you can find.
OK, a good friend of mine mentioned something about it.
If I.
OK.
If you can work out what that is.
Good luck.
Anything.
Good luck.
Anything you say.
Anything might be suspicious.
So OK.
So let's first thing first.
Let's check this patient to see what is it.
I'm Jack.
I'm joined.
Welcome to my new site.
It's still under development, but feel free to look at what one does.
He also links to various things in my site news.
Keep track of these sites and work about find out what state sites is what I'm owed.
That's all for now.
But remember to keep checking back.
OK.
So let me check this.
And let me check this to.
So that we can see the content side is open, but still under different man.
Come back for more information on it soon.
What did Michael Jatin take?
Right.
OK.
So let's cheer.
Do you view page source to see.
Well, it's not.
Nothing as important.
Nothing important.
So probably some BHP fireboat.
We are not able to see Aegeus or not.
Or gay is.
We can just Crozet for your.
If needed.
Will be back.
This site is owned and maintained by Mique Joik.
So it's OK to drink.
So we don't need to know that you know.
So of care.
Your page.
So this is nothing.
It's not in now.
So let's close this down so we can still be here.
We really didn't see view page source yet.
And now we're killing kids and nothing.
All right.
So let's suppose it.
And we can still they did like that.
OK, now we can be here, so I don't remember if we are if we have what if we have already look along
this one?
So let me check the Frole.
Doo doo doo doo doo doo.
Let's check if there are some suspicious stuff for commentate and could they, Decs?
Nothing.
Nothing, nothing.
Not nothing.
OK.
So what s closet?
OK, so now let's try to to play alone.
The lengths that we have so.
Again, Joe's closed the story.
Well, guess what, it's complicated.
And so I click here to see.
OK, so we didn't see anything when we just went clicking there.
So when you click it there.
So what we can do.
Let's try to do to change this our meters because we see that it's a BHB file which contain a parameters.
So let's try to modify the parameters it was in use or let's try to type blah blah to see what will
happen.
It's a blank page.
Oh, okay.
So let's try to since we're using we moved five inclusion.
So let's try to put some Web site like let's say baseball quality is unimportant.
You can put your own Web site as well.
For example, my news market place, you can watch a porno site.
So it's not a problem.
So let's try to pull something like.
Facebook.
But first thing first, it has to be HTP protocol.
So please book its GDP.
We do put s slash, slash and Facebook ethical maunder so it doesn't matter.
And then so it was a..
Okay.
Now we get new information.
So you own the white truck.
You just need to think of how you can exploit it is full of abilities.
So therefore we are on BHB file.
So we have to find a way to explore these.
We modified encryption so you can just Google it.
It's not a problem, you know, because there are a lot of stuff alone.
They want to know how you can export some oil share.
So to BHP Werb Shell.
The first thing first.
OK.
So nothing is here.
So you can go to Google and Google it or just just go to these pages or you're gonna just put and Brazilian
posted here and just copy this page like COPD content.
And here again, you will not try to.
To Pininfarina and then with there again.
So and what we can do, we can just copy this now and then go come back to or TASC or does scores weren't.
We have been here.
So now we can eliminate this.
And then we are going to try to bust in there.
And before we think we should put out this s and let's see what will happen, because I know Congress
you see, Tony Gwynn has been at click here to return to the home page so you can use a knee in a knee
which shared be you found Ongo.
Good.
Just go to Starbridge, located to, for example, is a go to start page Starbridge and just type.
Oh, wait, Shell were shell, hp explode and.
And then try to find some Web sites.
This one may be a very good example and try to find some stuff like that.
You see, so how we get it.
We didn't even event.
We didn't even put the quotation mark because when we just copy.
Impressive there.
So this site automatically generates.
So just
you can just take this one, shall exploit anything and just scroll down to find yours.
It doesn't matter.
So not gay.
Now let's go to do.
Next challenge.
So we get this.
We don't need you anymore, we can close within Kail to see his home.
We're not his.
Look what's going on here.