So what is in this video?
We are going to talk about this massive concert and this is where we use the metal spread so much because
we are using we can use the expressions of terrorist and other models as well.
So I need to take this massive concert and the concert will start up.
It takes some time.
So as you can see, there is a banner of attack and you can see the medals by the Russian Federation
and there are two thousand nine X-Rite currently as of 2020 as a decision making and one zero nine six
artillery modules and 343 post expedition modules and 562 payloads and foreign correspondents and seven
Invision modules.
So you can use all of this.
First, I want to verify whether my database has been corrupted using DV and, of course, status.
And there we go, we go back to help to see what I would recommend.
We can take this from a council, can see this is a massive fight greater than this, prompting asking
for comments.
They can see there are so many comments over here can just display the banner, change the color and
character, hold an excerpt and get the output and the plugin.
And we can use this loads with a particular plugin if you want to load the president manually.
And you can also use the under command to unload this plugin console and you can set some variables
and so on, we can do almost all of the stuff.
And this is going to be the basic and in the future we use in any other sections if we use matters,
but then we will see see all these comments.
So first of all, first I want to show you banner, which displays the banner when we saw a sign for
the symbol, and that is one banner and this is one banner.
And I love this year.
And if we take the banner again, we get the different banner a different time.
So these banners are already preloaded.
All right.
First we need we can search through this, exploit Bertelsen, etc. To do that, we need to search and
we need to do the search query.
So first, before that, we see the helpage of this search and search options, keywords you so we can
do the same options and we can see the according to the particular keywords.
You can do more just to say other than my decision by this order and not data regarding the particular
picture and particularly the description, you can also do this.
You're using the sea.
So let me search for a bad blue.
This is a Web server and we can decide on some pre exploits.
And if you see such bad blue, we got this to exploit exploit windows.
It should be bad blue explorer.
And so these are Ranko Grid and description.
We have got the description here and you can see the first index is zero for this awful and one for
this pastor.
So we can also search for such APIs equals to exploit.
So bad blood.
So it's similar to this because these two are experts and we are schooled in the expert category only,
so now type that type auxiliary or.
Think it's auxillary, agree that says can.
I read support.
So it's auxiliary, so you can see we get all the scanners with the pertinent.
There we go and we can see police can there are so many production models they can use in the descendants
of conservancies since canticles can get an extra.
So we can search through these categories with this search option, consent, search payloads and a
binder endoscopically.
The turbine.
OK, OK, but you can see the there you can see are the ballots with so let me say TCP.
So you can we got the various, uh, platforms by DP and also various, uh, functionality of this point,
anticipate, uh, Peller and see the payroll in Python in our language, in ruga language and windows,
and in the same way we can take reverse underscored people to check the DP.
Yes, there you go.
You can see there are a lot of DP modules.
So we can also go through this, uh, search, uh, to get multiple values are to get their desired
very detailed values so I can say search exploits.
We will need to put the group before this, such a group for Bear Blue.
And you can see there is an exploit, uh, expert with the bad will pass through and you can also see
approval from so we can also see the.
Such for such an auxiliary.
And grep for a.
So this group is very nice, if you want to if you don't know exactly the name, but you want to, uh,
say the name will be in somewhere of this, uh, full part can see the Potkin acts in TGP, Xmas, etc.,
so.
So much for that, and in order to use this model, you need to say use and you need to mention the
number of this model, let's say one.
And you can also, uh, copy this value and you can put it in here.
And if you enter now, you can see the prompt need to exploit and the window should be blue pastel.
And it means that we are using this exploit right now.
So you can show options.
There are some options for these exploits.
We can set these options like remote Holston localhost, etc. So as you can see, there are some few
options for this, but we expect our hosts.
We need to set this target.
That means our target computer must turn this bad software and our port is 80 because it's a Web server.
And as a result, we can also, uh, we can set out we can also on these options because you can see
it.
Yes.
So you need to.
Compulsories said these options before running the exploit.
You did not set this recordists options that I expect will not run.
OK, now I will go to go back from this expert to normal MSFC prompt.
You need to take the back so you can see the problem has been changed.
Now if I search for that again, now let me uh use using the no use one and I can see the same expert
we are using now.
And one more comment is sure targets.
It will show this exploit will show you the target uh which is capable of exploiting those targets,
can see exploited targets and this expert can work in these two targets.
That is worth two points are universal.
OK, it's very important to know that target because sometimes these exploits can work on different
operating systems.
And if you don't know, you can just take the short targets to know about this, uh, target and let
me show these options.
So options.
So in order to set this are, uh, variable, you need to set our horse.
Let's 192 the.
So we are we are not performing the actual expected.
No, I'm just showing the syntax so you can see this set our house, this IP address.
And if I make the show up again and as you can see, the value of our host countries diverters, we
have said in this comment and to answer, these are hosts, I want to create this aHUS where you need
to answer our host.
Now, if you like the show options, again, you can see the value has been removed.
OK, now there is another option that you said, gee, do you forget what it means when you are multiple,
when you're working with the same host, multiple time, multiple exploits, you need to set this aHUS
for every expert.
So in that case, it is timeless.
I so you can say it said Gee, said you global.
And if you say so, I will.
So no.
Now my house will be set, so I know what I'll do is I'll go back and I will use one if I do the show
options again.
Now my house is also set.
That means you are setting global with our house value to this IP address.
So you need to exploit that uses this.
Our house value will have this value of this IP address.
So let's said, gee, one set back this our house.
So if I showed options, you can see that Rosemary has been removed.
So if you are working with one one computer and if you want to do the multiple exploits, then this
lady is very much helpful.
And I want to show another comment that is uncommon, so this run command actually runs the exploit.
So in this case, we do not cedarhurst that we failed, but in later years we said these are holes and
we do a.
And then I would expect, will we, uh, run successfully?
Then we will get a reversal to us and to see the sessions, that means a session will be created when
this person or the expert has been run successfully.
And to you, you do sessions begin sessions, minister, minister for just restart those sessions.
You can see there is no accusations.
In some cases there will be accusations whenever our expert has been successful run.
In that case, we need to secessions sessions minus I interact with.
There will be a number with this.
I need to type one.
So in very session I didn't for one, because there is no accusations.
If there are accusations, you can interact with using sessions minus one one or the idea of the session.
So we can interact with these sessions and we can also kill using the Chirikova, so we will discuss
all these comments when exploding, we got expert and getting ready.
So I got the back.
So I think that's about the basics of the sort of.
And also, if you want, you can also try these comments that are connected to a database you can see
on TV underscoring map.
So we can run the comment by using the TV on the screen, but the difference between that and not going
to happen is that this will be automatically stirred in this postgresql.
And we will come to those comments in the next year or two about that, and now we can also create a
workspace like one workspace for one computer and another workspace for another computer.
We can also check out post comment to see are the hosts that in my past been stored in a database.
So since we do not scan any computer, we have no choice.
You can also say once this will keep track of this hostname and their respective vulnerabilities.
So don't worry about this out of these comments once if you practice of for some time and you get used
to.
So that's of this massive concert basically goes in the next few days, we'll do some practical scanning
and an operation and then exploding and then we understand this intense.