Original subtitles

1 1

Now you have enough information 2

2

to go ahead and try to gain access 3

3

to other systems. 4

4

To computers, servers, 5

5

web servers and stuff like that. 6

6

And in this section 7

7

we're gonna be talking about 8

8

gaining access to computer devices. 9

9

And what I mean by computer devices 10

10

is anything 11

11

and the reason behind this, 12

12

I wanna get this through, 13

13

I wanna get this idea through, 14

14

is that any electronic device you see 15

15

is a computer. 16

16

So a phone, a TV, 17

17

a laptop, a web server, 18

18

a website 19

19

a network, a router, 20

20

all of these things are computers. 21

21

All of them have an operating system 22

22

and they have programs installed 23

23

on these operating systems. 24

24

And usually, 25

25

in most cases, 26

26

these computers are used by a user. 27

27

So you have an operating system, 28

28

they have programs installed 29

29

on that operating system 30

30

and they have a user 31

31

who uses and configures this system. 32

32

So, I'm gonna be talking about 33

33

how you gain access to computers 34

34

in this example 35

35

and actual personal computers 36

36

so the name that people call it usually. 37

37

A computer, 38

38

so it's gonna be, 39

39

we're gonna have a target 40

40

of a Windows device 41

41

and we're gonna have a target 42

42

of a Linux device. 43

43

But the concept is always the same. 44

44

Getting access to computer devices 45

45

is always the same. 46

46

So you can apply the same concepts 47

47

if you are targeting a phone, 48

48

if you are targeting a tablet, 49

49

if you're targeting a web server 50

50

and we will be targeting 51

51

web servers as well. 52

52

But I will be talking about it 53

53

just like a normal computer. 54

54

This is very important to understand. 55

55

Every device you see 56

56

is a computer 57

57

and it works just like your personal computer. 58

58

So I can set up a web server 59

59

on my computer. 60

60

I can make it look like a website 61

61

and make it act as a website, 62

62

I can make it act as a TV 63

63

and I can make it act as anything I want 64

64

and literally TV's and all these things 65

65

are just simpler computers 66

66

with less complicated hardware in them. 67

67

So, we're gonna be talking about 68

68

attacking these devices 69

69

from two main parts 70

70

or from two main sides. 71

71

The first approach 72

72

that we're going to use 73

73

is the server side. 74

74

So in this side 75

75

it doesn't require any user interaction. 76

76

We're gonna have a computer 77

77

and we're gonna see how we can 78

78

gain access to that computer 79

79

without the need 80

80

for the user to do anything. 81

81

For the user who uses that computer 82

82

to do anything. 83

83

This mostly applies to web servers 84

84

and applications 85

85

and devices 86

86

that don't get used much by people. 87

87

So people basically configure them 88

88

and then they run automatically. 89

89

So, all we have is gonna be an IP address 90

90

and we're gonna see how we can test 91

91

the security 92

92

and gain access to that computer 93

93

based on that IP. 94

94

So, our main way of getting in 95

95

is gonna be the operating system 96

96

that that runs 97

97

and the applications installed 98

98

on that system. 99

99

The second approach that we're gonna try 100

100

is the client side attacks. 101

101

So this approach will require 102

102

the client or the person 103

103

who uses that computer 104

104

to do something. 105

105

To do something 106

106

that something could be 107

107

a number of things. 108

108

It could be installing an update, 109

109

it could be opening a picture, 110

110

it could be opening a Trojan, 111

111

so we're gonna learn 112

112

how to create a Trojan, 113

113

how to create Backdoors, 114

114

how to use social engineering 115

115

to make the target person 116

116

do something 117

117

and when they do that action, 118

118

we will gain access to their computer. 119

119

Information gatherings 120

120

can be crucial in this case 121

121

because we actually need to know 122

122

the person that we're targeting. 123

123

After all of that, 124

124

I'm gonna talk about 125

125

the post exploitation. 126

126

So what you could do 127

127

after you gain access to this computer, 128

128

regardless of the method 129

129

that you gained access to it. 130

130

So you could have used a server side exploit, 131

131

you could have used 132

132

a client side exploit 133

133

or you could have 134

134

just got physical access. 135

135

The person left their desk 136

136

and you got in. 137

137

So, we're gonna see how you could, 138

138

what can you do 139

139

once you have access to your target. 140

140

How you could further exploit that target 141

141

and increase your privileges 142

142

or target other computers in the same place.