Now you have enough information to go ahead and try to gain access to other systems to computers servers
web servers and stuff like that.
And in this section we're going to be talking about gaining access to computer devices and what I mean
by computer devices is anything.
And the reason behind this I want it.
I want to get this through I want to get this idea through is that any electronic device device you
see is a computer so a phone a TV a laptop a web server a Web site and Network Rail to all of these
things are computers all of them have an operating system and they have programs installed on these
operating systems.
And usually in most cases these computers are used by a user.
So we have an operating system they have programs installed on that operating system and they have a
user who uses on and configured this system.
So I'm going to be talking about how you gain access to computers and this example an actual personal
computer so the names that people call it usually a computer.
So it's gonna be we're going to have a target of a Windows device and we're gonna have a target of a
Linux device but the concept is always the same.
Getting access to computer devices is always the same so you can apply the same concepts if you are
targeting a phone.
If you're talking to a target in a tablet if you're targeting a web server and we will be targeting
web servers as well.
But I will be talking about it just like a normal computer.
This is very important to understand.
Every device you see is a computer and it works just like your personal computer.
So I can set up a web server on my computer I can make it look like a Web site and act as a Web site.
I can make it act as a TV and I can make it act as anything I want and literally TV is and all these
things are just simpler computers with less complicated hardware in them so we're going to be talking
about attacking these devices from two main parts or from two main sites.
The first approach that we're going to use is the server side.
So and this site it doesn't require any user interaction we're going to have a computer and we're going
to see how we can gain access to that computer without the need for the user to do anything for the
user who uses that computer to do anything.
This mostly applies to web servers and app applications and devices that don't get used much by people
so people basically configured them and then they run automatically.
So all we have is gonna be an IP address and we're going to see how we can test the security and gain
access to that computer based on that IP.
So our main way of getting getting in is going to be the operating system that that target runs and
the applications installed on that system.
The second approach that we're going to try is the client side attacks.
So this approach will require the client or the person who uses that computer to do something to do
something that something could be a number of things that could be installing an update.
It could be off in the picture.
It could be open a Trojan.
So we're going to learn how to create a Trojan how to create back doors how to use social engineering
to make the target person do something and when they do that action we will gain access to their computer
information gathering is going to be crucial in this case because we actually need to know the person
that we're targeting after all of that.
I'm gonna talk about the post exploitation so what you could do after you gain access to this computer
regardless of the method that you gained access to it so you could have used a server side exploit you
could have used client side exploit or you could have just got a physical access the person left their
desk and you got in.
So we're going to see how you could what can you do.
Once you have access to your target how you could further exploit that target and increase your privileges
or target other computers in the same place.