During the section we will be talking about talking was exploit so what is a vulnerability and what
is an exploit.
First vulnerability is weakness found in an operating system or asset or software or an application.
While exploit is the programs that can be used to access systems through this weakness or this vulnerability.
Let me simplify more assumes that after gathering information about our target we were able to do know
that he's running Windows 7 or Windows 10 or Windows 2000 and 3 or 2000 and see it.
And also we were able to get some information about the application running which version of Acrobat
Reader which version or of a Flash Player.
Now let's things the operating system for instance so assumes that I went to Google and I typed Microsoft
Windows 7 vulnerability.
You will find a lot of Web site that explains the weakness in Windows 7 vulnerabilities especially the
CV or the common inability.
So if you click on one of those you will get a list of all the weakness in Windows 7 an explanation
about this for an ability.
This is a public vulnerability I mean it has been announced by Microsoft or any other security entity
that Windows 7 has this specific vulnerability.
And this is a very high vulnerability and so on.
Now the problem used to be that.
Okay.
I know that Windows 7 has a lot of weakness except that I know how to use them because most of the time
it will need the program to be able to hack this weakness or vulnerability so on the previous time at
an all time we used to like create a program.
And unless you know some programming language like C or perl or Ruby or any of the language you not
be able to use it but recently actually smoked recently.
Since around 10 year a new product has been released which is a framework for vulnerability and exploit.
It's a program called meta exploit that simplify for you how to use those exploit those program and
those vulnerabilities in a sense of justice.
OK just for the size in the sense of so program itself has a list of all for the ability and has also
program.
So what are you going to do.
You just need to point to the burn ability that you need to do.
For instance you know that for Windows 7 there is this vulnerability under this name.
So I need to use this vulnerability so he can search inside this database for an exploit for an appropriate
for and programs that can hack this 1 2 7 through this vulnerability.
And he will ask for some input.
And once you put this input he will try to hack the system.
So in this case you don't need to go through programming or anything.
He got his own library and he's importing all the exploit.
And he's just asking for input and then you can use them right away.
It's quite easy to use so meta sprite is one of the best penetration testing framework that managers
have an ability to exploit in a very easy way.
And we have two different versions.
We have the command line which you're going to start with and then we have the graphical and actually
both of them are with the same effectiveness.
I mean you know don't don't think that the graphical one will be hard would be easy to use and it was
without all the capabilities not actually feel free to use both of them.
So what we're gonna do now we're going to I'm going to show you first Zimmet exploit as a framework
and how it works.
The common line then we're gonna move to the easy one which is the graphical interface myself.
I use a graphical one which see which is called Armitage all the time so let's see how Tron brewing
and use it for different kinds of attack.