Original subtitles

In this section we will be talking about exploitation.

And let me start by defining the objective of this section usually in hackings there is two different

mythology.

First one depend on the user error.

So for instance I create a malicious code and add to a PDA fine and send it to the victim and hope hoping

that he will open this file by email or whatever or I'm sending him an assignments or email with the

link and hoping that he would click on the link in all zoé.

And depending on his weak awareness or that he would do a mistake the second mythology is most effective

MATELJAN which is depending on the weakness of the system.

So I'm scanning the system I'm getting what operating system they are they have what the application

is running.

What ports are open what services are there.

And we saw earlier in previous lectures how to get such information using netcat news anchor and map

and so on and then start searching for weakness variability and start searching for an exploit which

is a program to Hexis system through this with an ability it's more effective.

And this is because we do not depend on any one mistake.

I do not wait for that user mistake or a user error that he will click on the link or not.

Now in this case regardless of use or how careful he is I will still be able to compromise the system.

So during the section we're going to see how to do that first.

In this letter I'm going to show you how complicated this was before.

And then I'm going to show you in a framework a very famous framework called Meta's pride which made

this process very very easy.

So the first lecture was will be just a proof of concept showing you how to do it or how we used to

do that before and it was complicated but don't get upset.

Next lecture will be much more easier because I'm going to introduce to you a new framework that made

sexploitation part very very easy without any prerequisite.

You don't need to know any programming language you don't need to know anything.

So first let's see how we use computers because if you don't see how hard it was you will not appreciate

this framework.

So.

In my case here I have two virtual machine as a hacker machine and the victim machine and assuming that

I did some research earlier I did get some information about the victim machine.

I know that he's running Windows XP and I know some application I know support and everything and then

using this information I start looking for weakness and there is a lot of ways for doing that.

But I'm going to point to some of the public Web sites so you can go to this Web site security folks

that come where you can search any product software or hardware it could be Microsoft it could be Linux

Unix Android anything.

And once you click it will show you all.

So in my case it was Microsoft to show me.

Also Microsoft products let me choose Windows XP so I'll choose Windows XP.

And let's go down.

And once they choose once XP it will show me all the vulnerability in Windows XP and it's Windows XP

has more than one release.

It will show me on the search Dropbox all the service back Ornelas.

So as you can see zos hours of inability or weakness in Windows XP we have around 11 pages and you will

find in any product even the news product that you can find Microsoft Windows 7 of 2012 Microsoft wins

10.

Any other product so using such public site as it is as a public site like for instance security tracker

or Disney's exploit DD so many websites will help you to exploit D-B dot com

or scrolls.

Not a problem but what I'm saying is as you can see you know those are Windows XP which is my vector

machine right now.

I will take one specific abilities that was very very common in which any Windows XP or Windows Server

2003 which is a dicom are PC.

So this is one of the built in such a Kirti focus if you check it will show you all the system or also

operating system effect it was such vulnerability.

It will give you a discussion which will be it will explain the effect of civil debate on the system.

But the most important point to exploit here.

It will give us the programs that you can use to compromise the system chooses the village.

But the problem was that most of the time those vulnerability was written in different language it could

be c it could be Rupi it could be passed on.

So let's see.

In our case I would think this one it was written in C and as you can see it's you know it's you know

some C language because sometimes maybe just one simple one you don't to move the financing but sometimes

you need to define the code by changing the IP of the victim or changing some information.

But let me show you how we used to like utilize this vulnerability in my case I already downloaded this

vulnerability in my hacker machine.

So getting back here.

Let me show you my computer in the C-Drive and it is full that you can exploit it to go.

And this was the vulnerability as you can see that I downloaded from the Web site.

The problem was you cannot use of a nobilities is where you have to combine them you're going to get

it and it becomes inexactitude.

Now this is not inside the scope of our cause.

I mean I don't want to waste time showing you how to compile a C program because maybe or finds a program

or exploit with a different language.

But I'm just showing you the process.

In general how would you say to me how we used to do that.

And then I'm going to compare that to the same attack but using the meta split which is much more easier

to answer.

So once I received one second byte is this law file to an exploit then I can launch it.

So let's go to the command line and let's go to the

C drive.

And I'm going to go to the same POS where I work on exploit.

This is the same POS where I kept the file exploit and then I just need to Tabes comment and it will

tell me how to use it so if I become

exploit then press enter it will tell me the proper way for using that is its of this common should

be DICOM exploit then the target IDs Zenza target IP.

I know the target IP because you know once you plan to compromise system you should get IP.

And I believe you should be aware how to get an IP.

But what is the target ID give you a list here with the target ID if you using Windows Server 2000 this

is a good idea.

In our case I think its a Windows server number five which is Windows XP Service box.

So now I need to repeat the comment and type the target audience number five and then the target.

Now how did I know that this is when Windows XP Service back zero.

If you get back to the unmap lecture where I explained how to

scan the system and know what operating system and no support opening and service and so on by the way

same concept apply on Android device.

You know this is a proof of concept concept on Windows.

But what we are trying to say.

You can search for a vulnerability for Android and for those that potentially.

So Aransas exploit he said okay fine the exploit was successful and he opened a port on the victim machine

for 444.

So now I think we have an open port a potties that has been opened remotely on the victim machine.

I just need to connect to it how to connect to a port remotely.

We explained that we have a very very useful tool called netcat so we can type netcat 1 9 2 1 6 8 8

1 1 1 4 and then space and support number 1 2 3 4.

And here we go.

We have been we are now on the vector machine and if we need to check if you type Now IP config youll

see that you are on the I'm sorry.

We can think

you witnesses that you are now.

This is a shell of a commission you can create to use or you can create a full that you can do whatever

you want.

Now my point from this lecture was just to show you that it was complicated and this is a very simple

expose some of them are so complicated that you need to open the file I need to change inside it and

then combine it.

It was not that easy.

It was very powerful but it is now according to that a very good framework called Middlesboro it has

been introduced to this many many framework but this was a free one where it was Fassett is a process

you don't need to know any language you don't need to any coding.

You just need to know what vulnerability you are looking for and he's taking care of everything.

So let's see how to repeat the same attack by using me meta exploit.