Hey, everyone, welcome back to the
course. So in the last video, we
talked about our tool called Impact
for vulnerability scanning.
We also talked about why we even
care about vulnerability scanning as
a penetration tester in
this video, where to cover a tool
called Open versus will go ahead and
launch it, set it up, configure it,
and then we'll run a scan with it
and take a look at the results.
So be sure to log in several Web
site, which, again, if you're
watching this course, you should be
already logged in unless you're
taking it on an underground forum.
In which case, please log in to
Siberry just so you can go ahead and
follow along with the website.
All right. So once you logged in the
separate website in the search box,
you'll go ahead and type in
vulnerability scanner set up in
configuration.
And specifically you're looking for
the one that says part two on it.
So you could type all of this out
if you want to.
But generally speaking, if you just
type in a vulnerability scanner
and then start typing set up, it'll
show you a couple of options with
that in the title and then you'll
choose the one that says Pecky
period to on it.
So part two on it.
Once you've done that, go ahead and
click the launch button.
It will more than likely tell you
you need to launch the lab in a
separate window.
If it does, I just click on the
launch item button and that will
actually launch the lab for, you
know, it takes roughly about
anywhere from 40 seconds
to a minute or so.
I put one or two minutes on here
just because that's the longest I've
seen it go before it launches a lab,
but in most cases about 40 seconds
or so. And it should launch
everything for you.
Once it launches the lab for you,
you'll see the paper box, which
you'll see in the background there a
little bit to close that out.
We're just going to click on it and
we'll select the next button
and then just click the button and
then I'll close it out for us.
That'll take us to the Caleigh, the
next login screen in this particular
case.
And we're just going to go ahead and
get logged in now, the Log-in here
is actually going to be the word
student, all lowercase, so student
for our username and then student
for our password.
Not to go ahead and get us logged
into to here.
All right, so it's go ahead and it's
going to log in, it might take just
a moment or so here, the next step
we're going to do is launch a
terminal window.
So here in step six, the way
we do that is we just click on this
black colored box on the far left
here.
Click on that, it will open up the
terminal window for you.
Let's go back to our lab document
now.
So the first thing we're going to
actually do is we're going to create
a file and in
their file, we're going to put a
bunch of IP addresses.
So when we get to step nine, you
just want to make sure you type of
mean just like this.
But we're here at step eight now, so
let's go ahead and use it.
Tool Command called NENO,
which will allow us to create this
particular file and then we can put
our data inside of that particular
file.
So let's go ahead and do that now.
So we're going to type in Nanao all
lowercase, the scanning,
underscore target,
underscore list.
So once you've typed that in Nannerl
scanning underscore target on the
score list, just go ahead and press.
Enter a new keyboard. You'll notice
that it'll open up that particular
file for us.
Now, if you want to pause the video
and jot down these IP addresses,
you're welcome to here in step nine,
because that's our next step here.
If you just want to pause video as
you go through this and make sure
you put them in as perfectly fine as
well. I'm just going to go ahead and
read them off as I typed them in
and try to go slow enough so you
can just type them with me.
All right. So just go ahead and
start typing now.
Now, I do want to mention also on
your keyboard the number key,
the number lock may not work in
this particular virtual environment,
so you may have to type it regular
or use a virtual keyboard
that's inside of here.
So I'm going to use my regular
keyboard. But again, I won't use the
keypad portion simply because
it's not going to work for this
particular lab.
So our first IP address is going to
well, all of these are going to be
one only two to one six eight zero.
That's something.
So so just keep that in mind.
All of them will be one hundred two
point one six eight eight zero.
This first one would be 10.
The next would be about 20, et
cetera, et cetera, all the way up
until about 50.
So let's go ahead and type in one at
a time here.
So 102 dot
one six eight, not zero
10. Then we'll put a comma in space
and then 192
dot one six eight zero
dot 20 comma space,
192 dot one six eight
zero three zero
comma space.
Now you could also just copy and
paste these.
I just like to do the manual stuff
sometimes just because it builds up
muscle memory.
So the next one here is one of two
one six eight zero four zero.
And then finally we wrap up with 192
dot one six eight zero
five zero.
All right. So once you've typed that
in there, you're going to tell on
your keyboard, are going to hold
down the control button.
And then while you're holding down
the control button, you press the
letter X.
And if you notice at the very bottom
left the command prompt, there are
the terminal window.
Excuse me.
You'll notice that the exit
is the option we're actually
selecting here. So control and then
X will exit out of that portion.
It's going to ask us, do you want to
save the changes? We're just going
to type of y in there since we
want to say yes, we want to see the
changes, we want to save our IP
addresses.
And then our last step here, once
we're back at this particular
screen, we're just going to press
the enter key, her keyboard to save
that particular file.
All right. So you'll see, once we do
that, it takes us back to our
command prompt.
So let's go back to our lab document
and feel free to pause this video if
you're still working on that first
portion there.
So we've gone through all these
steps here, so we've gone through
step nine, went ahead and typed in
our all those IP addresses,
we then did control X
to back out of that.
We then got a prompt saying, hey, do
you want to save this?
We said, yes, we do by type in Y.
And then we finally saved our file
by just pressing the entropy and the
keyboard.
Ah, so now we're going to go ahead
and actually launch our tool now
that we've created our file, we've
loaded it with IP addresses.
Now we've got something to scan.
Right. So let's go ahead and launch
open versus the way we do that
here is unless you're
a user like on your own machine, but
in this case where a student user
saw a different user than route.
So we need to type in pseudo space
open versus dash start.
So let's go ahead and do that now.
Want to type in pseudo.
So we can change ourselves to root
for this particular command
and then open valves and
then dash start and then just press
enter into keyboard here.
That's going to ask you for a
password again, that's the one we
just use to log in to Calli.
So that's the student all case
and it's not going to show you on
the screen there. But once you type
it into Internet keyboard and
it's going to go ahead and start
open vast for us now,
it may take some time to launch
open. Vohs could take up to five
minutes.
Most cases it was taking about two
or three minutes for me.
But I'm going to go ahead and pause
the video here.
Once it opens open Vohs
and launches everything, it's
actually going to open your Firefox
browser and take you to the Green
Zone security assistant login
page. So once you see that, you know
you're at the right step and that'll
be at step 16 and then we'll be
ready for step 17.
But again, I'm going to go ahead and
pause the video here.
And once mine launches, I'll go
ahead and pick back up with step 17.