Hello, everyone, welcome to the windows penetration Essentials
course. In this video. We're going to be taking a
look at setting up. Our penetration testing distribution and
the hypervisor that will be using later. On
in this section. We'll get started with setting up our vulnerable boxes
and then we'll finally conclude with installing the
various tools that are very helpful or that are used
when performing Windows penetration testing. Alright,
so let's get started. Now. As you can see, my host operating system
that I'm using right now is Windows 10.
So again, this video and the installation instructions
will work for any operating system, regardless of,
whether using Windows Linux, Mac OS, even BST,
right? So we have opted to use virtualbox and
Kali Linux has all been testing distributions. And
for good reason virtualbox is completely open source, which
means you don't have any issue of licenses. And you
can essentially install it on any operating system really easily and
for Kali Linux, it is one of the most popular penetration testing
distributions and one that is supported by many.
Many organizations as the official de facto standard. So
let's get started. Now. I'm just going to open up Firefox
here and you can see I'm currently on the virtual box download
page and you can do that by going to virtualbox.org and
Wiki downloads, right? And this will give
you the various binaries for your
various operating system. So you have Windows Mac or Linux Solaris,
etc, for Linux distributions. You
don't have a binary. Instead. You have the actual installation
instructions.
The various package managers and in the event, you
do have the actual binary at all these source code. They are instructions
on how to compile the software yourself. So that shouldn't
be an issue at all. So once you've downloaded virtual
box, you can go ahead and install it. It really is a very simple
install in terms of the installation wizard on Windows. It's
even simpler on Linux and Mac OS. Alright.
So once you have virtualbox installer, we can now get to the actual meat
and potatoes, which is Kali Linux here. So
you want to go head over to offensive security.
Purity. And if you go to Cali dot-org on the download, we
are not looking for the ISO file, right? So, the ISO file is
essentially the installer and we don't want
to go through the callee, install. The reason for that is we're going to
be working in a virtualized environment, which means we can actually use
their official VMware or virtualbox images, right?
So in our case, we're using virtualbox, you can
go ahead and use VMware. If you want. It's entirely up to you. I'll
click on the offensive security VM download page and
this will give us the various images.
For the various hypervisors. So for example for
VMware, we have the images here for virtualbox. We
have the images here and you can download the latest version. And
the great thing about downloading, a VM images. It
already has everything installed and you'd
really do not need to go through the install process. You just need
to click on the OVA file or the of ovf file and
it will import the virtual machine for you already
installed and you can get started immediately. Alright,
so once you have that downloaded, we can get now get
Started in my case. I have my virtual image here.
That is currently the version twenty nineteen point
four. So it's a bit outdated. And again you I
recommend that you use the latest version. The reason I have
the outdated images because I can easily just update the
packages and update the entire distribution, whenever
I want to, instead of downloading the new image, right? So as
you can see that this is an ovf file if I just expand
this and that means you just need to double-click on it and
it's going to bring up the virtualbox page here now.
I guess I have various virtual machines. But in your case, you won't
have any. If this is your first time using virtualbox and
is going to prompt you to import the virtual Appliance where you can specify the
various options. You can actually take a look at the various options here
and you'll actually point out the directory
to which the actual the virtual disk
image will be stored or the virtual machine disk
right over here and you want to
specify whatever you want to store virtual machine and then click on
Import. In my case. I already have my calavius.
I'm set up here, man. It's already updated to version 20, 20
points to. So that's the latest version as recording this
video. And you can pretty much use one virtual image.
And again, you can then just keep on updating and
upgrading as you feel is appropriate. All right, and
the other great thing about virtualbox is the ability to
take snapshots not this is not exclusive to virtualbox and
when generally speaking about hypervisors, but it's very
important that you take a snapshot of your virtual machine. And
what this does is it preserves that state?
Which you actually be set up your VM in that pristine State.
And whenever you make a mistake, or
there's an issue with the operating system of the virtual machine, you can
easily roll back to that particular snapshot. So, in my
case, you can see I have a snapshot called Kali Linux 20,
20 point to Rolling and that is a
snapshot that I can always revert to in the event. Something does happen in
my current state, which as you can see, it's changed. So
again to take a snapshot, you can just right click here on and
you want to make sure that you click on this little menu here.
Yeah, and then that will allow you to view the details of the VM, which is
pretty much the page. You should be seeing if you go to snapshots, you'll
be able to take a snapshot of your current state. In
my case. I've already done that. So I won't be doing that as for your
settings. You can pretty much assign as much system
resources as you can out recommend about 2 gigabytes per
virtual machine. And the most important is the network settings,
where you want to ensure that this is on the bridged adapter and
you want to specify your actual interface here
or your network interface card my case. It's a
Take pcie network interface. So
I'll just hit okay, and we're ready to go and then I can
just click on start that's going to start up my virtual machine.
And if I just minimize that for a second, if we go to details the
default credentials for the virtual image are actually
added as a description here so you can see the default
username is root and the default password is tour.
Alright, so now that we have that set up, we can actually just
open up the VM here and it's currently starting up.
So I'll just get that set up immediately and in
the next set of videos, we're going to be taking a look at setting up our
virtual environments and then we'll take a look at installing some
of the important tools. We'll be using
You perform penetration test on Windows. All
right, so we'll just give this a few seconds and
that's going to start up Kali Linux for us. In
my case. I've already changed the password. So I'll
just enter my root username and
I'll just enter the password to which I changed it to. So that's
the first thing you want to do. After a default setup of
your virtual image. It's going to give you a default installation with
the default credentials of route
and tour so you won't open up your terminal here.
In my case, I'll just do that right now and
I'll just open up bash here. And the first thing you want
to do is hit at password and you won't hit enter
and that's going to allow you to change your Linux password here for the root
user. All the user that you're currently logged in as in
my case. I'll just I'll just enter a new password
and there we other password is updated successfully. And
you have now changed the default root password. So that's going
to be it for this video. The next set of videos. We'll get started with
our virtual environments. And then after that, we'll take a look at
installing the various tools that we're going to be using on
Kali Linux. So I'll be seeing you in the next video.