Welcome back.
And now that we got our Windows 10 machine set up, we want to perform a vulnerability scan real quick
to see whether it is vulnerable, and then we'll show you a tool that we can use to press the target
system.
So, first of all, open up both of your clinics and Windows 10 machines right here.
I ran the IP config command to check out the IP address of the Winterstein machine.
And what I'm going to do is I'm going to scan it real quick just to see what port it has open and whether
our setup was correct from the previous video.
OK, great, we got the port four, four, five open, that is all we need now.
I have also performed unnecessary vulnerability scan this morning on 10 machine and for some reason
it didn't manage to find this ghost vulnerability.
Now, that could be some type of a bug, maybe, perhaps since if I type locate and then the vulnerability
name, which is KVI dash two zero two zero dash zero seven nine six.
And this is just the name for this particular vulnerability.
And I type enter.
Here it will find the path to the Nessus with the module for that vulnerability.
So it seems that it has a plug in for that vulnerability and it should be able to discover it.
But once again, for me personally, it didn't manage to find it.
You can try it out, you know, right now how to use Nessa's to just open it up, open your windows
machine and run a scan in Nessus on your machine and see if you can come up with this vulnerability
from there.
But what we want to do right now is we want to copy this name.
And we want to go to the Firefox.
Since remember, this is something that we do not have in mental framework, we must find the exploit
ourselves.
Once the Firefox opens up based upon unknowability name.
Right here, and I'll just type it real quick to two zero two zero zero seven nine six and we can add
it up.
Let us check out whether there are some available tools on GitHub repository.
So we've got the few responses right here.
And what you want to go with first is the vulnerability and what I mean by the scanner is we want the
tool that will tell us whether the target machine is vulnerable to this attack without crashing or exploiting
it.
So we'll go to this link right here.
And it seems that this is the tool that we need.
It says the vulnerability name scanner that.
Identifying and mitigating the CV two zero two zero zero seven nine six four in the flight.
So let's check it out.
Let's go to the name of this vulnerability, then we'll go to our desktop and we will get clone that
repository to our desktop directory.
Once it finishes downloading, we can type.
Here it is right here.
Let's change the rectory to their by typing CD and let's see which files we have.
So we have only this scanner dot file.
So it is a python file.
Let us go to this page and just check real quick whether it is a Python two or three program.
And by the usage that we can see right here, it seems that it is a python free program.
So let's test that.
If I go right here, check out the IP address of Windows Tennesseean.
For me, it is one to that 168 of the five letters from the program, Python three.
And then type the IP address.
Well, we get a response that we wanted, it says right here, vulnerable.
Great, now we can test other tools that will crash and exploit the target.
First, I want to show you a tool that you can use to just crash the target.
And with this tool, we don't need anything else besides the IP address of the target machine.
So you can crash any target just by knowing its IP address for the exploit that we will cover in the
next video.
We're going to cheat a little bit.
We need something in order for the expert to work.
And I will show you that in the next video.
For now, we want to see how we can crash the target machine, see if we go all the way down.
You will see this GitHub link.
It is from Geon sitting and it has the name of our vulnerability.
If I go right here, we can see we got a few falls once again, this is a python tool under here.
We got to use it.
So we got a demo gif here.
We can see the comment that he's running.
And if we go right here and copy the tool.
And once again, we can go to our desktop and get cloned to name.
The link based right here, wait for the download to finish, and if I type S, we now have two directories.
This one is scanner and this one is the one that we just downloaded.
So let's go CD CVT.
We got the demo, give the README file and the vulnerability itself.
Of course, if we want to, we can now know the vulnerability file or the python file and we can scroll
all the way down to see the code of this exploit.
And down here we get the usage.
So all we need to specify, as it says right here, is the target IP address.
Let's try it out.
If I go right here and type Python, I believe it's Python three once again and then KVI Dogpile and
then the IP address of the target machine.
Before I run it, I will lower the screen so we can see both of our targets before running this program.
And right here, if I press enter.
Well, here it is, we successfully crashed the target machine.
It got the blue screen of death, as we can see right here, and it is now restarting and this is also
critical vulnerability.
Once again, I need to mention that you should never be able to crash the target machine just by knowing
it's IPEX.
This is something that we would also 100 percent write down inside the bubble and a testing report.
Now that we managed to scan the target to see whether it is vulnerable and we used another tool to crash
the target, let's see in the next video how we can exploit the target machine and gain Shell back inside
the Linux machine.
See you in the next video.