So now we're in the part of a course where we're going to utilize a different platform.
This platform is called try hack me.
Now this Web site is becoming one of my favorite Web sites to use and I'll kind of show you why they
have all different sorts of rooms and actually a lot of these rooms are geared towards beginners and
are free on top of it.
So there's a lot of free access here but I do recommend spending the extra ten dollars a month just
to get that VIP because it really really is worth it.
But you can come in here.
You just click on one of these boxes or you can go buy different sort of learning pass like they have
in OCP learning path.
They have a very basic beginner learning path.
You can click on activities and kind of look through here and just see if you want to learn Linux or
you want to learn the basics of any map or just some of these little things are really nice.
You can also click in some of these and just deploy your own virtual machine you'll need to have to
have a Linux machine like this if you don't have the space for it.
So it's super nice.
Now the reason that I really really like this platform is you can create your own vote vulnerable machines.
And that's exactly what I've done here.
So I've created this Windows print SCA arena and you just come in here and if you click on the first
task it gives you your tasks that you need to do so you can see this room will teach you a variety of
Windows privilege escalation tactics including kernel exploits deal hijacking service exploits etc..
Now this is completely based on this LP workshop.
So if you go to the get hub on this page I'll even link this in the resources.
This is not mine whatsoever.
I did install this on an ISO I did put all the tools on there and I have modified some of this just
to make sure that it actually works.
So I'm gone through and improved it but this is not my script not my box whatsoever.
But this user is kind enough to allow us to utilize this for free as a free license for anybody who
wants to do this if you want to come in here and build your own lab out and have it locally you absolutely
can.
But the very nice thing here is that all you have to do is click deploy and I'm going to make this completely
free.
So I have the option to make this a subscription base or free base.
This is gonna be completely free.
All you have to do is hit deploy and then make sure you're connected to your access tab.
So you click on access.
The only reason I'm not going to do that is because it's going to display your public IP.
So I'm just going to for just tell you you go to access download your open VPN connection file and log
in via the open VPN.
And then once you're deployed you come in here and you just get connected to the machine.
So all I want you to do at this point is I want you to come in here open new terminal and it might take
a minute for the pain to come through.
So check your check your I.P. address and just give it a good paying and wait.
So that comes through.
And while we're waiting on this I'm going to go ahead just make this a little bit smaller or we wait
for that to show up.
You could see that you're going to come through here and this is going to go in the order of the class
so auto runs going to be a first one we're going to do.
Here you go it's going to say hey here's what we're gonna do in Windows.
Here's how we're gonna detect it.
Here's how we're going to exploit it in Cally Linux and here's how we're going to pull it off and then
once we pull it off quarters and say hey we're done here.
Go ahead and click complete.
So this goes all the way through.
There's even going to be some little bonus in here where we've got kernel exploits and hot potato and
password mining that you guys are going to do on your own.
But we're going to cover step by step not just what you see here but the reasoning why it actually happens.
So go ahead and let your machine boot up.
It could take one to three minutes hit pause get connected to this point and then I'll show you how
to get captured the machine and then we'll move on to the next section where we actually start walking
through this OK.
And you can see now that I'm getting pings back.
So at this point what I want you to do is I just want you to connect to this machine.
So the way we're going to connect to this machine is we're just going to say something along the lines
of our desktop which should be built into your Kelly machine and we'll say the IP address which is going
to be turned out ten thirty eight forty four I'm going to copy it here.
Your IP will be different and we'll be different every time you terminate and restart this machine.
And then I'm going to do a G.
The G tells us what size we want to run this at.
If you don't put the G in here it's going to run very very small so I'm going to go ahead and see Dash
Ninety five percent and it's going to boot up this nice sized our desktop.
You're going to come in here in your user name is going to be user your password is going to be lowercase
password 3 2 1 and then you're going to log in.
And once you log in you will be the low level user.
Only thing to point out is on your desktop here is a tools folder.
This is going to have all the tools you need for this course.
So there'll be a couple of tricks we're going to have to transfer files back and forth.
Other than that everything you need is right here.
You can actually see that power ups in here and Sherlock's in here.
So these are a couple of things you talked about like hot potatoes in here.
So some of these things should be familiar to you and the rest of these we're going to run and you're
going to get more familiarized with are more familiar with as we go.
So once you're logged in.
Go ahead and meet me over in the next video as we start to talk about registry exploits.