‫Instructor: Hi.
‫Within this section we are going to solve a CTF together.
‫So CTF stands for Capture the Flag.
‫It's kind of a challenge.
‫It's built to be hacked.
‫And we're gonna hack in using some
‫of the techniques that we have learned previously
‫during the course.
‫And we are going to just capture the flag,
‫reveal the vulnerabilities, and in order to do that
‫I found a very good ctf, which is called Insecure Banking.
‫And as you can see, I forked it on GitHub.
‫So this is not written by me.
‫This is an open source Android insecure app challenge.
‫Okay?
‫And even it has a user guide
‫and it gives some instructions about the usage.
‫Of course, you don't have to read all of them
‫you don't have to read at all
‫because I'm going to show you exactly how to install it.
‫And I will share this GitHub address so
‫that you can come over here and download it
‫and then run it on your emulator to hack it.
‫I'm going to show you how to do that exactly step by step.
‫It will involve installing new software.
‫It actually involves a server and actually pretend server
‫that you will run on your local host.
‫And it'll simulate a real server where we get the data
‫and display the data in our app.
‫So it actually follows a real life pattern when we
‫where we have a server and when we get the data
‫and where we post the data to that server.
‫So it's a really good example to practice all
‫the things that we have learned so far.
‫And I'm doing the CTF on Android so that everyone
‫can practice what we have been learning so far.
‫Okay, you don't have to have a MacBook in order to do this.
‫And as you can see on the left hand side,
‫I have my server running on my local host.
‫And on the right hand side I have my emulator.
‫And this is a little bit different than our regular emulator
‫that we have seen in our Andriod studio.
‫Maybe you have realized that
‫this is called Genymotion, okay?
‫Or some people prefer to call it Genymotion.
‫So this is a different emulator.
‫This is an external emulator, but CTF instructs us
‫suggests us to install this emulator so that we
‫can use the VirtualBox capabilities, okay?
‫Genymotion actually runs with inside of VirtualBox.
‫Since we already have VirtualBox for this course
‫it will be pretty easy for us to install this and run this.
‫Okay?
‫And also this will teach you how to work
‫with Genymotion so that if you
‫ever need that in your under development life
‫or in your hacking life, it will be a good practice for you.
‫So what we are gonna do
‫we are going to try and hack into this application.
‫And actually let me show you the VirtualBox.
‫Okay?
‫So as you can see, Google Pixel Tree
‫which is this emulator is running all right now.
‫And if we come to these settings and to the network tab
‫we will see the related settings over here
‫that I have mentioned before.
‫So this will allow us to get the data from the server
‫which is the local home server and display it over here.
‫I'm gonna show you how to do that, don't worry.
‫But this is the thing that we are going to be hacking
‫during this section, and this is a great opportunity for us.
‫So we're gonna stop here, and within the next lecure
‫I'm going to share you the link
‫actually can find the link in the resources of this lecture.
‫And then I will show you how to install it.
‫And I then I will show you how to run it
‫and then how to hack it together.
‫So let's meet in the new lecture.