Original subtitles

Now if you are not very good in writing Centex and writing and memorizing this comment and you like

me to say except you'd rather use meters play it in a graphical way meters plus it has a new interface

called Armytage So during this lecture and maybe next lecture I'm going to show you how to use a meta

sprite in a graphical interface to be able to do that.

First we have the same scenario here we have a Linux machine which will be our Heckert machine.

Another victim machine victim machine could be on this machine could be an android machine could be

an iOS whatever platform.

So as a victim machine here it's 1 1 4 IP.

Now let me show you how to use Armytage if you just admitted you can find it.

I can hear or you can type Armytage But if you just run Armytage it will the first time without initiating

is the service needed it will not try.

It will not stop.

So if you run Armytage this way

he will ask you to connect and then you're going to start to run Armytage but actually it won't not

run.

Let's see.

So he's asking you this you keep the default setting and you click on Connect but then you click on

yes you're going to notice that

the

he will keep trying to open but he will not.

What you need to do first to be able to use Armytage you need to write down to to command.

This will start a service needed for Armytage called the post sequence.

And then you need to start a MSF database so you need to store the database service that is needed for

this application.

So as you can see Google keep trying but it will not be running.

So what we need to do is we need to open first term.

Actually what happened is they already started before.

But let me close it and tried to comment one more time because before starting this lecture I already

initiated the service.

So you need to open a terminal here.

And you need to write down services

post are the sequined

start

this truly post

again said services.

Says

you just need to check is post

Issaquah

excellent And then second comment is m s f d been initiated.

So if you transept the first time actually is first time you need to use Armide you have to come in.

But in my case when I launched it word because it was already configured before so once you write down

those comments that you set to go so close 30 million let's open Armytage one more time Armytage is

Zemaitis ploy.

Graphical interface.

So we're going to open and we're going to click on Connect

and we'll click on is good default you don't have to change anything.

And once it's done let's see how we can utilize it.

It's a very handy tool and very advanced tool.

So it open a graphical interface.

Now I know that I'm looking for an exploit called R B C D.

And as you can see this is the exploit right now.

You just move everything to be able to start from the beginning.

Host removalist and he have host remove host

OK.

Now this is the vulnerabilities that I knows that my victim has this vulnerability and can be exploited.

I'm going to double click on it and it will show me the information which is input and it will show

you what is missing.

Remember when we did that in Mr. Spryte and we type your option.

This is like show option.

So showing me whatever what is remaining is our host which is the remote or so I need to go here and

I need to type the IP of my victim 1 9 2 1 6 8 2 2 1 1 4 and then click on launch and give a few seconds

or maybe a.

He can try to exploit it and if it has been exploited you'll see a computer whiz right frame showing.

Exactly.

See this means that he found a computer and he compromised computer.

Now you have admitted intersession on it right away.

You don't have the live show option or exploit and or metropolitan.

That's it.

It's exploited since it has a set frame.

And if you right click on it you can do whatever you want so you have to make that part of history.

You go for instance.

Let's go to.

When it interact Explorer.

OK.

And you can ask him to shows or find for instance browse fight and it will show everything down here

so you can see where all the victims find you can rightly convincing download it or upload something

or change the past.

You can see that he drives the drive.

So if you put her Princeton see you can see all the folder you can delete you can do whatever you want.

So it's a very very nice tool and much more easier to use than.

But I would suggest that you get familiar with both of them.

Same concept apply for Android.

I mean if you look for an Android device so you can type Android

and it will show you all Android vulnerability but be aware that some of the exploit can be launched

remotely and some of the exploit you have to send to the victim something and he have to click on it

to be able to access like an anchor or something.

So it depends about the type of an expert.

But again the scope of the second is to get you familiar with the different vulnerability exploitation

more like metal plate or Armytage or these kinds of tools.

It's not about doing that.

That could be done in a separate section.

Right now you just need to be familiar with such to next lecture.

We're going to take another Armytage attack.

But in this case we will do an automated process.

Let me show you how.