Now, in the next lectures, we're going to start talking about server side attacks, I'm going to teach
you what a server is and we're going to talk about that in details.
But before we jump into this, we need to have a computer or a machine that acts as a server so that
we can try to hack into it.
So similar to the way that we had a Windows machine to practice attacks that we can launch against normal
users.
We need to have another virtual machine that behaves like a server so that we can practice server side
attacks against it and see how we can hack into servers.
So the machine that we're going to use is called Mehta's Floatable, and it's a virtual machine that's
built on Linux and it contains a number of services that's typically used by servers.
It also contains a number of Web applications that act exactly like normal Web applications and use
the same technologies used by normal servers and normal Web applications.
So we're going to install this machine and then in the future, we're going to use it as a target to
learn how to hack into servers and how to hack into websites.
You can download this from the following link.
Now, I've also included this link in the resources of this lecture.
If you click on this link, you'll get this page and all you have to do is simply click on download
to download it.
I've already done that to save time.
So if I go to my downloaded directory in here, you will see that I have a zip archive in here called
Mehta's Floatable too.
And we know that this is an archive, a zip archive, because we can see the icon and you can see the
file type.
So in order to UNCOMPRESS, this as we seen before, we have to first double click it to access it.
We're going to right click and copy.
We're going to go back one directory and pasted here.
On Linux, you'll have to right click it and click on Extract here and on Mac OS, you're going to have
to double click it to Uncompress it.
We're going to give it some time to uncompressed the contents of this file.
And once this process is over, you'll see that you'll have a new directory in here with the contents
of this virtual machine to too important in VMware.
We're going to double click VMware to open it and we're going to click on Open a Virtual Machine.
We're going to navigate to the location where we downloaded this virtual machine.
So it's in my downloads.
It's called Mehta's Floatable to dash Linux and the Undefiled that we can double click is this file
called Mehta's Portable.
We're going to open it.
And perfect, as you can see, VMware added it there for us.
You can click on edit virtual machine settings to edit its settings.
The main thing you wanna make sure is that it's connected to the network, as you can see in here,
the same network that all of the other virtual machines are connected to.
Once you're sure with that, we're going to click on Start to start it.
We're going to say I copied it.
This pop up is asking us if we want to install the VMware tools for this machine.
This is not necessary at all, especially for this machine.
So we're going to click on Remind Me later.
And perfect, as you can see, this machine is installed now and ready to be used.
Now it's asking us to log in.
So the default username is MSF admin.
And the default password is the same MSF admin as well, but you'll notice one type in the password,
you will not see the characters on screen.
This is normal.
It's a security feature to prevent people beside you from seeing the password.
So simply type MSF admin and hit enter and you should be allowed to log in.
And that's pretty much it.
Right now we have this virtual machine installed inside our own main operating system within our hiking
club, and we're going to use it as a target to practice a number of attacks.
Don't be intimidated by the way this machine looks.
We're actually not going to be using it much.
We're only going to be using it as a target, and you'll know what I mean as we go through the course.
So for now, our job is done.
We managed to install a vulnerable server as a virtual machine so we can test server side attacks and
other attacks in the next lectures and discourse.