Hey, everyone, welcome back to the
course. So in the last video, we
wrapped up our lab on renumeration
where we use tools like DYG as
well as in Mount.
In this video, we're going to talk
about a tool called Core Impax
will jump right into vulnerability
scanning.
Now, why do we care about
vulnerability scanning as a
penetration tester?
Wolf, for obvious reasons, right.
We want to look for vulnerabilities
during our scanning an enumeration
phase so then we can exploit those
and these fun tools called
vulnerability scanners that the
defenders use.
We can use those as well to find
vulnerabilities on the particular
system or systems we're trying to
access.
So, as I mentioned in this lab will
use a tool called court impact,
so go ahead and logged in the
website, which you should already be
logged in to.
And in the search field, you're
going to look for a vulnerability
scanner setup and configuration.
Now, be careful because there's
actually two different labs with
that same title, but you'll notice
that one says part two with
it. So the part two is actually the
next lab we're going to do.
We just want the vulnerability
scanner setup and configuration one.
And if you click on that, you'll see
a launch. But
once you click on the launch button
may give you a message that you need
to launch it in a separate window.
If it gives you that, just go ahead
and click. You know, launch the item
button in the separate window and it
should launch the lab for you.
Now, this one takes probably about a
minute or so to launch up.
Sometimes it takes up to two
minutes. I found a lot of that,
again, depends on connection, speed
and those sorts of things.
But generally speaking, a minute or
less in the lab should launch for
you.
Once it launches, you'll notice the
little pop up I have in the
background there, that's what you
will see on your end as well.
All you have to do to close out is
just click on next and then OK,
and it'll take you to the login
screen here.
So once we're at the login screen
here and step five, you're going to
go ahead and log in now, it's
already it should default to the
administrator username already if it
doesn't, go ahead and type that in.
But you should only have to enter
the password. So the word
password, we've got a capital P,
the symbol on lowercase
S s w
and then the number zero.
So that's a zero and not a capital O
lowercase are in a lowercase D,
so let's go ahead and type that in
now. And once you touch that and go
ahead and press enter, click the
little arrow key right here
and that will get you logged in.
So P capital P
the at symbol lowercase
ssw the number
zero again that's a zero and not a
capital O and then the lowercase
R d
that I said it might take a moment
or so. Now you may get this pop up
here and actually you probably
should get the pop up here.
Just click on ask me later.
We don't really care that the the
Windows license is not genuine in
this particular virtual machine
and then you'll get this other pop
up here and just say, OK, to that
one. Now, you also may see a pop
up about do you want to restart your
computer?
Technically, there really are not
any changes. We we certainly haven't
done any. So just click on Restart
later and that should give us plenty
of time to complete the lap.
All right, so go ahead and do that
in Paul's video, if you need to go a
little slower on removing all those
paper boxes there.
We're going to move on to the next
step of her lab now,
so here in step seven, we're going
to double click on a little core
impact professional icon on the
desktop.
Now, it does take some time for this
tool to launch, generally
speaking, about 20 to 30 seconds.
So I'm going to go ahead and pause
the video real quick.
And once it comes back up, I'll
go ahead and start the video again
and kind of use the magic of fast
forwarding here.
All right, so we use the magic of
fast forwarding, so this is what you
should see once you've launched a
tool, you'll get you'll start off
with the Tip of the day, pop a box
here. Just go ahead and uncheck
the shot. It's a start up.
It's really not too relevant since
we're not going to launch it. Tool
again, she's a good habit to get
into if you happen to use
this particular tool in your
workplace.
So just don't check that box there
and then just say close.
And that will allow us to actually
access the tool here.
So once you've done that, we'll go
back to our lab document here, so
we've already covered step eight
where we closed the Tip of the Day
box.
So now we're going to create a new
workspace. So as the
creating a new workspace implies,
we're going to click on the new
workspace here at the top left.
Once you click on that, you're going
to click on the blank workspace of
the very top option there is going
to open up this paper box for us.
So in my workspace name,
we want to go ahead and type this
right here, so we're here at step
11.
We want to type in network,
underscore vulnerability, underscore
scan's so just like that.
So let's go and type that in now.
So network underscore
vulnerability and then
underscore can.
All right, so our passphrase here,
we're actually just going to put the
word scanning so
you'll see right here in step 12
where it's going to put scanning and
then we're just going to confirm
with that in the second box as well.
So this type of scanning, all
lowercase.
All right, and once you're complete,
you can go ahead and just click the
finish button there.
That'll create the workspace for us.
All right, so now we're at step 14
here. So what we're going to do at
the very top left here, we're going
to double click where it says
network information gathering.
So set top choice there.
And that's going to open up a little
wizard for us.
So let's go and do the analysis.
Just double click the very top left
on there and you'll see it opens up
the wizard for us now
in The Wizard. We're just going to
click the next button here.
We're going to leave this defaulted
to the core impact program.
We're using that one in this lab.
So just click on next there.
We're going to leave it as IPV
version for.
So let's go ahead and click next
there.
And then we're going to leave this
default network range in place.
Now, if we didn't have that, we
would type in one attitude out one
six eight zero zero
four twenty four.
But we're not worried about that.
It defaulted in there for us.
And so we're just going to say next
there.
Let's go back to that document
before we do this particular
item here.
So we've already gone through most
of these steps. We're gonna step in
right now, but let's just cover what
we've talked about so far.
So we went ahead.
We click the next button, wants to
Wizzard launched here in step
16. We left alone the default.
So it was default to the core
impact. So we left that alone.
We just say next.
And then we also left it to the IP
version four and we click next.
And then again, we just look at the
IP address range and we let
that default alone and we click next
as well. So now we're here step 19.
We're going to actually select a
fast scan for this first one here.
Now, I do want to mention it's going
to take some time.
It might take up to five minutes or
so on this particular one.
One time it took like almost ten
minutes. So that's why I put that
range there.
But generally speaking, it takes me
right around four to five minutes to
complete.
So, again, I'll do some magic of
fast forwarding and we'll take a
look once the scans complete.
So what we're going to do here, just
click on the fast option and
then click the finish button at the
bottom.
And once you're going to notice,
here is a scan run here at the top
right under the status column.
Once this is finished, then you're
good to go and we'll move on to the
next step of the lab.
So, like I said, I'm going to go
ahead, pause the video here.
And actually, based on the time, I'm
probably going to go ahead and start
the video here and we'll pick it
back up in the next video to finish
out the rest of this particular lab.