Let's take another scenario on how to use army Dash.
Now we saw before that using exploitation.
Need to do some research.
OK.
Now what if I need to save some time and the objective will be assumes that I have the network where
I'm doing it penetration testing and my objective is to just find one week computer inside this that
if I if I can compromise one computer inside any network it will simplify for me the process of compromising
the remaining machine even if they are secure.
So let's see another way for using Armitage.
That will simplify our role.
So don't forget that first we need to start the services.
You don't need to do that every day.
Every time in the same station.
But you need to do it at the beginning of each session.
I mean if you shut down clinics next time we started that you need to do that.
So service
post.
Gary Sick will start and mine is already started.
Then service
meet the supply staff.
And now we are ready to use our army.
So this could be one of the tools that should start with.
I mean you shouldn't start to a complicated too.
You should start with an easy tool sometimes when you do penetration testing and you start using a tool
like army tells to solve all the problem for you.
But if you start looking for exploitation and start writing some codes and stuff like that maybe you're
doing a lot of effort.
And after all the target is quite easy to compromise.
So let me connect and click on yes and it may take a few minutes until it stopped.
Now what.
While it's starting let me show you what I have as a network I have different computer running so I
have a server.
I have one to 7.
I have Windows XP.
I may run the Windows 8.
So and I suggest that you do the same.
Having a different operating system will let you test the effectiveness of any tool on different operating
system.
And after a while you know that this tool is very good when it comes to under 7.
And this tool is very good with when it comes to Windows Server in general and so on.
So you need to have your own lab with different platform including Linux and even Android and you need
to start practicing.
So as you can see it that the army is open.
So let me add a host so I can go to host And I'm going to add a host here.
And I'm going to type the IP of my server 1 9 2 1 6 8 1 6 3 2 5 0 and getting the IP.
I don't think should be a problem for you right now remotely or locally.
But now we're talking about lan mania clan and we click on it and the host has been added.
What should be the next step next step would be to say Kansas host.
So I would go here to host.
I'm gonna ask him to do an map scan.
So as you can see he's doing everything on behalf of you.
And I'm going to choose intensive scan and he puts IP we're going to click on okay.
So it's taking time as you can see below is scanning also open port and he's checking all the servers
and he's also checking in his database.
If this computer has this service what vulnerability and exploit can be used.
What expert what for an ability have and what exploit can be used.
And don't forget that the exploit is a program that it can be used to hack the system through the vulnerability
or weakness.
So he's verifying that and he's checking the operating system what servers back all support all the
service.
And as you can see below he's doing a full scan on my system I can do that for one machine or I can
add I can add all the machine here and do that on all the machine.
So it would take a few seconds or maybe a few minutes depend on the amount of services and it would
go and the scan has been completed.
And how can I know that the scanner has been completed you can see that he scans a computer and he was
able to figure out the operating system issue an icon here.
If it was Linux as it should be and Linux icon or Android or and you click on OK next step is to go
to attack and click on Find that thing.
So you cannot start with this option you have to start by scanning for it because you're going to search
the attack that is applicable to those below port and service an operating system.
So you go to attack and but before clicking to attack I want to show you something.
If you're right click on here on Armitage you're going to find some options like services logging as
you can see of only three option and host for option if you don't have any option called attack yet
but once I go to attack and I click find attack you're going to start searching in all meet exploit
database because after all this is a graphical interface of methods both forever for everything that
may work on this specific computer.
So he said Okay analysis complete now you can right click on the computer and you can find the new menu
which is attacks or if I click on the host posted I'll find you on attack.
And as you can see from the scans that he did and the search he found that all those exploit all just
program can be used to hack the system not necessarily that all of them would work but you can keep
trying.
So as you can see it saves you a lot of effort.
I mean we used to do that on the previous lecture manually.
So what I need to do is just to go to one by one and click on it.
So let's take this one first.
Click on it and he will show you some details.
This should be exploited to this machines for the sport and so on unless you need to put some input
here.
I mean in this case all of the information is the needed is that nothing is needed from your side.
So you can just type launch it is a computer get compromised by this exploit.
You're going to see a red frame showing up.
There you go.
So I was able to compromise the computer using our imitation.
So as you can see this is an easier way for doing it.
And when it comes to demonstration we do a demonstration for a client or something.
This actually could be very effective.
And if you remember from our previous lecture you can right click and you can go to the method printer
and you can do whatever you want.
You can search the file you can opens a can.
You can copy find download for whatever you want.
So it's quite easy and quite effective as well.