Original subtitles

Now let's repeat the same step and same attacks that we explain on the previous lectures.

But using meta sprite but before showing you how to do it let me just briefly about meters plot meters.

It's an exploitation framework and in a simple way the same process that we did on the previous lectures

getting's exploit searching for it online getting's exploit searching if any modification is needed

and so on.

We don't have to do that in me brought me at this point.

It's a programs that import all those vulnerability and exploit from the same sources from the same

web sites exploit D.B and security focus and so on.

And he reads them and he combines them and he just so it just ask you for input.

So if we are talking about our PC DICOM that would tried on Microsoft Windows before and instead of

open getting's exploit and compile it and then using as ex-pro to open a port and then using NC to connect

and all this complicated and this was a very easy one.

Some of the other exploit like Android Strae stage fright.

It was kind of complicated to do.

It was not that easy.

You have to go into the code and change and edit the video in a description showing you how hard is

it to get advantage of such exploits.

But what meter's plate can do for us.

It can import zorse exploit and we can read them and that he would ask for IDS exploit and accordingly

I need to have the victim IP.

So you're right it might be I need to have a victim port to write downs of the port so it will definitely

simplifies the process.

Now let's see how to do that.

And we can repeat the attack.

And while we are doing that.

I want you to compare what we are doing in this lecture with what we did on the first lecture on the

section boss our same topic which is using a vulnerability an exploit to compromised system System B

could be a Windows machine could be an Android device it could be a Linux machine concept applied.

So the knowledge that you are getting here how to get familiar with Meet the spring.

So I have a calendar next year and I have my victim machine in this exact same victim.

You can transmit exploit in different way.

You can write from application go to exploitation and you'll find the meter spreader as you can see.

Meters Brodies is here or you can open a terminal and type a message config or because the tool is very

important for penetration tester.

They put a shortcut here on this tool on the desktop.

So let's open it from here.

So we open the tool.

Sometimes it takes a few seconds until it load all the exploit.

So you just need to give it some time until you finish loading everything.

And we are waiting to get the MSF prompt.

So I'm looking for the MSF prompt command line where I can write different commands that we can use

now we're going to use some common that you going need to memorize but actually it's not about memorizing

the comment.

It's about the technique.

So let's see as you can see this is a prompt from where we are typing the comment and let's search for

ever an ability.

So if you need to use this tool I'm assuming that you already spent some time checking about your victim

so he knows the victim has.

Which operating system is it Windows.

Is it Android.

Is it Linux.

What port have what applications.

And we spoke about that in unmap So there is a different way for knowing the platform of the victim

and some gathering some information about the victim.

And then you start searching in public web like security focus or exploit D-B.

But my point is before using that tool you should have some information because what exactly will be

searching for in my case I already knows that the victim has Windows XP and I know that one of the exploits

that can be used for XP is the RBC Diccon.

So I have a piece of information.

My problem was I'm not very good working with public vulnerability and writing code and so on.

So this is the case so he will get you all the vulnerability related to that and even a search for this

specific one.

I think this is one which is the exploit windows are PC Diccon.

This is the ones that we are looking for.

OK let's just increase the screen so we will be using it then you can just select this one

and copy it.

So I'm searching for my exploit and I type besides a prompt to use this exploit.

So the first thing is research and types use this exploit and then you see that the prompt will change.

Xon now any exploit may need an input.

I mean I know that this is an effective explodes that can be used to hack system but he will not be

smart enough to know which system I need to to set the IP I need to set the port some input will be

needed from my site.

How can I know what input is needed.

Sometimes I only sometimes some other information like port or operating system but how can I know what

information is needed to be able to use this exploit to hack our victim.

You just type show options and show options.

We'll show you.

I'm sorry.

Show

options.

It will show you all the inputs that you need to add to be able to disagree and see how easy it is certainly

OK to be able to use this specific exploit.

This is the information needed and some information are mandatory and some information are optional.

So those two information are mandatory.

So our host and our board both of them has to be at but our board already have a venue.

So you may keep it or you may change it.

I would suggest to keep on the fly.

Well airport it's empty and it's quiet.

Now what is Airport is the target address the target IP address.

So I need to put here as a target IP address.

Fine.

So we can type.

How can we add the value you just typeset and you put the value that you want to our horse.

And don't forget that Linux are case sensitive.

Our host and then you put the IP IP of my victim let me double check one more time.

It's 1 9 2 1 6 8 8 1 2 2 1 1 4 so 1 9 2.

Sorry.

1 9 2 2 1 6 8 2 1 1 1 4.

And how can I use that phrase that has been assigned.

Sure option again and I can see now that my vulnerability has the required information my exploit has

required information all of them.

Or if you need to change your questions sit our hosen to replace.

And he's telling you that this was effective to Windows XP Windows 2000 Windows 2003 and so on.

Now how can I launch it.

I mean yeah it's fine now.

So ready to launch an attack effect.

You just need to type exploit exploit we'll launch static and let's see what would happen.

So I'm typing exploit

and Hildago and we got Zimet of politicization Mr. Pratt decision mean I have had this system.

I'm now on the system machine.

OK.

I have a full session.

So a full lecture about Metropolit decision and how it can be useful in the Android hacking section.

But right now once you get this method Patersons that's mean you are already connected to the victim.

How can it knows that or how can I use that.

OK I had to the system and one more time maybe I'm using Windows as a proof of concept but same concept

apply on Android to know how to use the comment or what comment can you type to gain information or

don't know fine just type.

You don't need to do anything.

And you will find all the commanders that you have some commands that will dump all the password on

your computer has done.

So if you just dump you'd get all the accounts and password on your computer.

Yes Curtis but later on we're going to see it's not a problem.

We have a Cummins that opens a webcam or opens the mike on the victim.

We have a command that kids can start.

It will capture everything he's writing.

It's like a key logger remote key logger.

We have our get this Cappelletti or what exactly is this Commines doing.

So what I'm saying is you just need to copy and paste that comment and see what will happen.

So if we get this copilot see

what is that exactly.

But I thought it would get us a snapshot or something.

We have we can like for instance system.

This would give you information about the victim.

Or you can shut down the machine.

Kopi and you type shudder.

So Metropolit assertion is very easy to just type the comment.

And I believe you can see some it will start shutting down.

Here you go start shutting down and eventually it will shut up.

So my point is made this point.

This is how easy it is.

It's very very easy you just need to search for variability and then see what option is needed and put

that option and that's it.

You don't need to change any code you don't need to know C or Perl or patient and so on.

So this is actually one of the best meta exploitation framework.

Now let's see.

Regarding the second lecture and this lecture in the section where we were talking about stagefright

if my victim was an Android device do I need to go through the same steps.

Do I need to get the exploitation file and start doing changes the same way we did on the previous lecture.

Actually the same concept you click on sirf Android or maybe you type steede the page.

Right.

And I'm giving this specific example because it's a very very effective exploit.

And during the Android hacking section I explained how to use this exploit but using meter's through

me to Spryte.

So let's see maybe I am mistyping it search for Android and you can see the amount of Android payloads

that you can find and exploit.

So if you search you'll be able to find stagefright you can have a separate lecture for that but the

scope or objectives of this ritual is to show you a different way for using different ability and exploit.

Even Iris I believe you will find some vulnerability related to iOS

so you can select any one of those.

You can start

testing them if you know how it works.

So it's not memorizing Zicam and it just knows the technique.