Hello everyone. I'm here. We are again with another video
from section 10. Vulnerability audit, will
in this video. I'm going to talk about exploding real
in Quincy. And actually the reason I'm
recording this video is that I'm going to show
you to you very useful and important website. They're
going to talk about it.
Grab some questions and then we're going to
talk about a websites and why we recording video. So
let's go. Well, here we are. We have
to website here now Chrome. And
first one is already given.com and
the other one is exploit dashdb.com
first. Let's
go to the real and Messina litigation and
talk about it and see what's
information. We have here and what it is website or
From Vice. So we can
see the disclosed and created of this
identification mode bypass description in
this module, explain education, bypass vulnerability in
real green. See Server version, 4.1.10. And
4.1.1 8 says
of proxy listener. And El Portal, proxies to
Target server and Auto in see options. Required
a twin see wheeler, be installed on
the
Attacking machine.
We can see the order here and developer.
So this play devil options, load module
which in a broken soul and run the con shown option
or for adventure. So if you remember that,
when we talk about Malaysia flight, we will run the
Metasploit. We have some colitis as
F and definitely, the stand for the display with
console. That's use.
this comment, and if you want to,
Use these exploit in the price point. You
should run this command and then show actions selections,
show options, then set
a personal homes and running. But
as you can see, we have some comments and description about
what we have here. So it's kind of interesting. So
what is this website? Exactly. You may Wonder, let's
go to the main page. Rapid7.
And if you scroll down here, click on one of
them. Both in exploit database, you have a variety of exploits
and update the stories. They
can see and use them actually on your target. So
we imagine that using a
map to scan your host and then you
find out that your host
vulnerability, that not patched. So
when you come here,
And your search one vulnerability or related. One
abilities can find it and use it on target. It's
interesting right now. You can see here. We have Firefox
security updates. That was a new patch
and we have all
the series here.
Let's go to the next website. The
expectation to beat this will very, very important. So
we have the same finger. But this time we have
all the code or one you
can download exploit.
And his information on it. So this website.
For example, when you click on exploits, have
exactly the same thing. We have a lots of
expertise here that you can explore. And try to see,
you know, find your own exploit are going
to use for it, and here's a modules, and platforming types. For
example, web apps locals. We have PHP Hardware,
we have windows. So we have some can
able
Patch here of the month is here for exploiting, so
we can find your platform. If you want to, you know, using Windows,
for example, going to filter here, or
you can use it in your not platform. If we want
to find the next platform Android or anything
else? And just scroll down here for Windows.
Titan-3, if you want to find out expose for pageantry after,
this is a good option to see what we have here.
We have some passengers in Ecology of new form. For
example, we have training here. Then we can
scroll down again and see you again. What we have for
Windows. Well, okay, now letter it.
Actually have some Goods. We have rce. That's just
a remote code. Execution is one of the most important
things in a large top 10 that you can use for contributors
in the Target though. As you can see here. We
are really good things here. They can use it on your targets because
most of them are updated. As you can see,
the dates. So that's means sometimes
not, sometimes the people doesn't
care about that updates and security patches.
So you can if you have the ability to scam,
Trying to scan it and try to intercept and try
to use it in your own purposes, can
be very helpful. And actually it's very good for
the printer testings. And I took on hacking a companies because some
administrations that didn't care about her still
needs to very, very be aware of that.
If you are one of them do not continue
that, try to always check the patches Chuck. You
always have a security vulnerabilities were sold and
trying to to allow them. Let's see other options here. We have shrimp boat.
it's
This also is a good drinks. You can just you gotta explore more
about here. For example, we
have severe Windows, the
reverse TCP. All right, okay. To
here is the code and description of how
we have actions are very good Aang.
We're the code Char code is in for mentioned.
Testing is very important is if you can get access with that.
And yet, that's it.
We have a crib on why in substance very important trying
to show you one example, and then real and VC. We
can see and show your comments and
how to succeed in a career terminal. The next video.
I'm going to talk about detecting one's ability at one
level Windows systems are going to use Commons in a calyx of
luck.