So we're guessing this jury will be discussing about the pivoting towards the also will discuss a few
basics, that is as paneling and stocks.
And then we will discuss the proxy case.
So first, this is the scenario we have.
This is the attacker box and how the IP address 192 168 010.
OK, I can see a session before.
So I see CIPA does have the generic default and Windows seven box.
So this is also having 24 subnet.
OK, so 250 variables.
Uh, this is 20.
And he said, OK, that's fine.
So we have the connection from this attacker box to the phone box so you can ping from this box to this
box and this one to seven.
How second, the physical network character and that contains the range 126 are the IP, uh, 126 that
wanted to slash twenty four.
So this is how another adapter and it is connected to this, uh, something that is more than 30.
And here there is another machine that is spreadable and this has that IP address.
Fifty four.
So suppose you have compromised this with the sound machine and got the reversal so you can just uh
think that this is over.
But it's not.
You can if you want to pivot into this internal, uh, infrastructure, you need to see what other adapters
this computer is having.
So it has another network adapter that is connected to this network.
So that means there may be some more machines in this subnet.
So with this machine, you need to scan the center subnet for the light wash.
And after scanning, what you get is this list of IP addresses that are.
So you get the 50.
So one to one computer is 50.
So that means this Windows seven with this adapter has been connected to the network and this spreadable
also connected to this network.
So that means this machine can ping this machine.
OK, so you only be compromising this machine then only you can perform the Skansen attacks on these
matters without compromising this one.
You cannot actually, uh, uh, let me try this.
So without compromising this one, if you want to try to pin to this so you will not be able to see
because there is no route to this, uh, uh, IP address because it's subnet is, uh, uh, the two
to divorce.
So enamored of Sprite, uh, will see in upcoming.
We just, uh, we can add routes via this box with the sound box.
So we will be adding the road to this whole subnet, 126 dot one twenty four.
Why are the.
So then you can bring this attacker to.
So that's how you do it.
Uh, but today we will be discussing about this story.
Not think of this as a scenario.
Um, OK.
For uh this is nothing but, uh, it creates a tension between this machine and this machine.
So this, uh, securely, uh, transfers the data from this box to this box.
So this will be very helpful when you have a server, but you don't have a certificate.
So in that case, uh, if any user wants to log in, you can just create the, uh, this assistant and
then you can send the credentials independent.
So it will be very safe.
So that's what I want to discuss about the socks.
Socks stands for Secure Socket.
So it is, uh, protocol that supports this secure tunnel and taxis of passion for.
And version five.
So this version is very secure.
You can said the you know, the password to get access software is another indicator.
So you can just create spin up the tunnel and you can send the data, OK?
Now, what we're going to discuss is, uh, three types of put forward.
OK.
One is the local put forward.
Suppose this machine that is trying to access the web server on the witness box.
So generally.
Uh, it will, uh, it will.
Oh, stop the logging attempt from this book, because maybe this port maybe filled by some firewall
in the middle of this.
So if I'm trying to attempt from the portal, maybe it's blocking the port city better.
This is a firewall.
So know, what I can do is I can use this, as it were, to create a local port that is said to to do
to.
So this is a local port and I want to local put forward to this Windows seven box.
So whenever I do that, then I can send normally the Web page credentials to this port of my eye, this
IP address and this port.
So then, uh, this soxer would automatically send this packet to this portal.
So that's, uh, one way to bypass these firewalls.
So you need to first log into the message.
So you need to get the credentials.
So this year, this will be very useful in the crowd because the fireworks are continuously brocks the
fact that because no one from the public should characterize it also of observer or any other service.
So that's why this is very helpful when granting to the William Synagro.
So this is a local port authority.
So there will be some random portanova on our machine that will be connected to any machine, other
remote machine.
And whatever we package we send to this port, it will be far greater to this remote mission.
So that is the local port forwarding and you going to the symbol and the next one is a dynamic put forward.
So the difference between local and the dynamic is mortara are possible.
So in the local port, Ferreri, you can forward the packets coming to these two two, two, two, two,
three, one port so you can transfer transfer the package for the baggage from two to two to 280 of
the seven.
So only one port to one board, that is the local ports are already so dynamic port.
What you need to do is you can say to to to do to start.
So that means you can send for this package to any the port and the vendors are.
So by setting this you can scan the web server, Yuganskneftegaz, or you can do anything you want but
only applies to the TCBY, but you can scan the UDP ports.
So that is the dynamic put forward.
The only difference is you can put forward the packets from our machine to any other TV port in the
dynamic port.
So these are almost equal.
But the defense in this, uh, number of robots, uh, we can so the next one is a remote spot for every
so remote spot.
Ferreri is opposite to the Rover Woodforde.
So suppose he's the Windows seven box, OK?
And at the commission, I am running a Web server.
So normally this think of this as a client machine.
So I want to connect to this web server.
So I want to connect to this Web server and know how this whenever a client is connecting, I suppose,
said this is the client and this is what is connected to the attacker machine for the Web server and
then connecting it can obtain the IP address of this attacker machine.
So 192, 168, 02.
So this is my IP and it can be seen by this.
So this can be another attacker.
So if they know IP address, they can scan and they'll do some, uh, they can find the vulnerabilities.
So in order to hide my IP address, I know what I can do is I can send remote port forwarding to this
machine right here to this machine port Numerati.
So this is a remote port for all.
So that means instead of sending this packet to this attacker, the package should be sent to this.
Box Windows seven box.
OK, so whatever the package arrives at this Windows seven box at Potente, then they will be transformed,
automatically transferred to this our political machine.
So what this will do is it will take this I.P. address coronate in the browser and this packet will
be forwarded to this port and then it will send the packets again to this.
So that means your I.P. address is being withheld from the metastable.
So all they need to know is this.
I told you this matters, but we can never know the IP address unless they know they compromised this
machine.
So otherwise it will be very safe so that you use, uh, this is very helpful in hiding the IP address
and proxy and firewalls, et cetera.
So this is the basic and certainly.
So again.
Now, what we need to do is, uh, uh, we reset the dynamic for, uh, from this attacker box to this
Wintersun box, so using the first proxy, Chanes then will be able to scan this machine.
So let's go and do that.
So my current up.
So if you want to set the environment, ignore what your mission manager so you can predict premiums
when is called the next one and so it can be any three.
So.
Right, click on this.
Go to settings.
So you can see the character is so it is very on it tomorrow, OK, that's fine.
I have the IP address, I have config, so I have the IP address, 192 unstitched zero or not.
For the next one is Windows seven box Gregan settings.
And here I have one that is connected to my router and also I have another area that is custom young.
So you can choose any of this except this net.
So real need one and then.
In this third machine, I also have the William Net1, so that means a DVD on Box and these matters
where according to one network.
So that means these can to communicate to each other.
But these cannot Soccerex power on.
OK.
Meanwhile, how does my IP address.
So let me show you the proxy, Cain's.
So it's in their territory proxy for that configuration and did enter the password.
And if you go down so in the chain.
So you can add the proxy here, so sock's for one person roboroach nine zero four zero.
So this will set up sites for server on this nine 050 port.
OK, now you can direct traffic to this port and this will be a circuit.
This will follow the traffic from here to the machine you want to follow.
So already nine 050 port is working, so log in to my inbox.
And also in respectable.
So if you take pyper so you can see I have one, and that is one 26 one coordinate, right.
So now let's go to my witness box.
So, OK, open CMT Sordi, baby confect.
So you can see I have one adapter that is connected to my router, one zero three and also up to see
another one of these 128.
So that means I can be this one.
So we're going to bring this matter spreadable and hit enter and again see the ping backwards.
So let's try to ping, for this matter, metastable.
So you cannot speak because there is no rule.
So, again, no, what we need to do is I haven't installed this open as it so you can download and
install normally in the, uh, any companies, the computers, how there's such a normal range.
So that's why I can say it's a switch and binary code for saying it would be and use the four nine zero
five zero, which is already
running.
The server is running.
So it's typing the IP address.
So username, address, IP, address any data and type in the password.
So you can see we have successfully logged in now open the new terminal so you can go to the Web browser
and I know the port is it is open.
So that's a.
Let's open the Web browser.
So go to the settings preferences.
Proxy.
And choose the manner and Southwest, that is our Brocklehurst and Posterboard here, nine 050, make
sure that it is successful, otherwise it will ask for username, password and.
OK.
OK, now I need to use you can go to this website online to do.
On these matters where now you can tell so you can see now we can access this because all we have edited
our whole traffic to the proxy and niederer to traffic to these Windows seven box.
So this sound box.
Of course, you can connect to these matters.
So that's why we have some connection through this association.
That's why we got the results.
And if you want, you can build this one.
So this is one important method to set the proxy kind of proxy and click on talk and all of this so
you will not get to the desert.
Because you can use the proxy Jane's comment.
So proxy change come in and you can see Firefox and the IP address, so it will open this page in this
Firefox users and that will be the route to the proxy cards.
And now you can see, no matter what do and you can see here, there is a statue and you can see the
traffic is going from this nine zero five zero two and port city of murders.
The.
OK, so now you can control see.
And also you can.
To the can.
And you can test for samples for 21, maybe 22 and the IP address.
You can see he has successfully scanned are the ports and you can also do the Russians can take something
so you can do that and maybe can using this for oxygens.
So this is one method to putting into the infrastructure, using approximations.
OK, now let's explore this.
And I want to show you the remote port forwarding says this.
It's.
R capital R, So you noticed this very our IP address sorry, this window, Sevan's IP address here.
This is this one on line to do 168, 106, 108.
Karen, and you need this was where to put Richard O 666 colon and specify our IP address, that is
localhost colon, one, two, three, four.
So what this means I am forwarding this IP address and at this point, so suppose, uh, some traffic
is being sent to this exact spot of this lessoned machine, then the traffic will be redirected to my
localhost at the one, two, three, four.
It's similar to this, uh, remote Ruggie from metastable to attack that up in the civil service.
Similar one.
But this is the remote control.
So that's logging it or less on machine.
And now take the password.
So we are successfully locked in so you can set up the listener, so on the what we have given our other
parties, one, two, three, four, one, two, three, four.
And so we are listening in on the beautiful.
So not only is it no matter what we do, I will create the rehearsal and see and we and the IP address
I specifies these Windows seven, box 128 and the number 666, because that if you send the data to
this traffic to this port, then you will get this traffic at one, two, three, four.
OK, on ninety two.
128, six, six, six, six and up on execution, so upon going to execute this big bash and hit enter.
So you have got some connection reviews.
So I do know that everything.
OK, now let's see this.
Sort of 127 zero zero on that, where our idea of setting.
And now he can tell.
We are sitting on one, two, three, four.
So let's execute this.
OK.
I don't know why we are getting this connection.
The first.
So everything seems fine.
OK, OK, unless you give it a try once a proxy, Jane sees enough again executed, in my opinion,
again, the website in a Web browser.
So I don't know why this net is fading.
So you guys want to give it a try.
So that's horrible for this video.
I'll be using this literally.
So actually awesome to see using the like.