Welcome back.
In this video, I want to show you another example of ISIS can show in the previous weekend.
At this point, which is a Linux machine right now, we are going to see what results can we get scanning
a Windows machine.
So I have right here Windows seven virtual machine, and what's special about this machine is that it
hasn't been updated in a year.
And keep in mind, there are a lot of people in the world that don't regularly update their operating
systems.
This machine specifically doesn't have any additional software installed and running on open ports.
The only open ports it has are these ones, and most of them are open by default.
Once you install Windows seven, let us see what our next can will manage to find on an updated Windows
seven machine.
So let's go right here and go on to a scan.
We already know how we can perform this scan, so I will not be explaining the details we navigate to
the basic scan and we can type right here.
Windows seven, the IP address I checked out right here it is 192 to the 168 at Fontanne six.
And if I scan it.
Go to the discovery, we can scan all ports in the assessment we're going to scan for known Web vulnerabilities
in the report, we leave everything default and in the advanced, we'll leave it on default.
I will click on Save.
And just from my skin.
This will start scanning my Windows seven machine, and in a few minutes we will receive the entire
scan and all the vulnerabilities it managed to find for our Windows seven machine.
Once again, keep in mind that it doesn't have any additional software installed.
I just installed an operating system and connected it to my network.
Let's wait for the scan to finish and we're going to see what it will manage to find.
OK, the scan has finished, let us check out the results that NASA's gave us.
If I click on my Windows seven, we will see it managed to find four critical vulnerabilities and to
high vulnerabilities.
And these are the vulnerabilities it found on Windows machine that hasn't been updated, let us check
them out.
If I click on this and click on Microsoft Windows, multiple issues we will see for critical vulnerabilities,
unsupported Windows OS.
This means that the windows has not been updated, as it says right here, he's either meeting a suspect
or is no longer supported.
This simply means it hasn't been updated in a while.
As a result, it is likely to contain security vulnerabilities.
And that is true.
We get the MS 14, which it says right here, vulnerability and channel could allow remote code execution,
uncredentialed check.
And down here, we also get what type of vulnerability it is, so we could just search for that vulnerability,
search for an exploit and gain access to our Windows seven machine.
We also get this our DP, our CEO, or also known as the blue chip attack, and as you can see right
here, this attack is relatively new.
It is from 2019.
So, for example, if there was anyone running Windows seven that hasn't updated their machine since
2019, they are vulnerable to this attack.
This attack exploits remote desktop protocol, which is running over the port three three eight nine.
Cool.
Right.
We manage this cover vulnerabilities and critical vulnerabilities for the Windows seven machine.
This necesito is really amazing.
However, there are also some vulnerabilities that it didn't manage to find.
And I'm talking about really high vulnerabilities.
So it is finally time in the next section we're going to see how we can exploit bunch of these vulnerabilities,
how we can gain access to the target, steal information from the target.
We will see also how we can maintain access on the target and we will see how we can cover our tracks.
You in the exploitation section.