Hey everybody.
Welcome to the final video of the Midas point a mini module.
So this video will me going over the hands on assignment that I want you guys to do.
So the project for this is to find a Windows XP 32 bit XP Service Pack 3 iso image.
So there's plenty online that can be taunted or any other variation of this.
What I'm not telling you to do is grab a license key or anything just get the image.
Use the free trial that comes with it.
Don't go grabbing license keys.
That's unethical.
You're not supposed to do that.
Yada yada yada.
You guys know the drill.
Just use the 30 or 60 day free trial.
That should be more than fine.
Or go ahead and go on eBay and buy an actual license key with with the Siddiqui in ISO that comes with
it.
You never know when a Windows machines will come in handy or Windows XP machine especially for testing
go to exploit development stuff so it might be worth actually spending out of 40 50 bucks whatever it
is to just go buy one.
I want you to build a new virtual box VM with this image install it go through the whole install process
get everything up and running then I want you to find that that's the SAC SSA.
Exploit that we've been working with go to exploit D.B. and then you'll see a vulnerable software download
link.
It should be a zip file or rar file.
Go ahead and download that to your Windows machine and then install this at and configure it to run
on port twenty two.
And the reason here is that it doesn't run on port twenty two by default.
So if you just run it as is and install it then run it directly you will find that it does not actually
have the port open.
So when you try to export port twenty two or you do and map you're not going to find twenty two or twenty
one open.
So go ahead and configure that when you load up the system administrative panel you'll see a button
called configure it should be pretty straightforward from there that I want you to exploit the system
with a split and gain a maturity show and test all of those features out that we talked about in the
interpreter is video.
I want you guys to get familiar with Metis point get familiar with the process from start to finish.
But what I also want you to do is this is a Windows XP Service Pack 3 unpacked system on a fresh image.
Now let that sink in for one second.
Windows XP in general is pretty vulnerable so that there are more exploits than just the one that we
are going to download and install for this act.
So you can actually with Midas point exploit this machine directly right now.
So what I want you guys to do on top of that is actually take that extra step and exploit the machine
with this with a sack over port 22 but also exploit it completely without the software running and take
it a whole different direction.
Go ahead and show a screenshot of that of your interpreter shell and the type of exploit you used on
the Facebook group so we can all see which which way you guys got it.