Original subtitles

1

All right you must be itching to get hacking.

2

So let's get hacking for this section.

3

We're going to be using a target code methods.

4

This is a specially designed V.M. that has more holes than a Swiss cheese and we're going to be targeting

5

this VM using the tools and techniques that we learned in this course and in the previous courses to

6

hack it in as many ways as possible.

7

You will be provided with a link to download the VM or you can just Google it that's what matters what

8

to build to and once you download it here's how you get it started.

9

I'm going to be using the Amwell here.

10

You can also use Virtual Box for the purpose of this video.

11

I'm going to be showing you how to run it on Wii and.

12

These are the files that I have downloaded and extracted.

13

You'll see a number of files here.

14

The one that I want is the file that ends with dot the X..

15

All I have to do is to double click on this file and it will automatically load in vi and when.

16

And as you can see here it's open.

17

The next thing I do is I click power of this machine on.

18

You get a small warning sign that says that this virtual machine has been moved or copied.

19

If you don't know what has happened to it just choose I've copied it and this is what I'm going to choose.

20

And that's it.

21

It's as simple as this.

22

This gets out at the Splitsvilla machine up and running.

23

I'll be fast forwarding the video here.

24

Once the machine finishes loading you'll see this beautiful banner that says make us portable too.

25

And you are presented with a logon prompts.

26

Now as you can see here there's a warning sign that says never exposed this VM to an untrusted network.

27

And this is a very fair warning because like I said this is a vulnerable VM.

28

It is designed to be hacked if you're going to be exposing it to an and trusted network.

29

For example if you're going to be publishing on the Internet or you're going to be using it at work

30

then there's a very good chance that it's going to get hacked.

31

This is why we use it in a virtual environment to keep it contained and to keep it away from prying

32

eyes.

33

So now I'm going to switch to my Callimachi and I'm going to assume that I know nothing about my target

34

and I'm going to start with the very first thing that I need to do which is discover the machines around

35

me on the network and figure out what the IP address of this time is.

36

If you remember from the hacking for beginners course one of the essential things that we said we needed

37

to get hacking is the IP address of the target.

38

Without that there isn't much we can do.

39

And the first tool that I'm going to be introducing to here is not discover this is a tool that we use

40

to discover what hosts are life on a network range.

41

So I'm just going to run that discovery minus H for help.

42

And as you can see the minus option here it specifies that age that I want to scan.

43

So even though this is a completely new tool to you you can now immediately recognize the format of

44

the tool usage.

45

It's very similar to previous comments that we've seen.

46

It's the name of the tool or the name of the program minus age or minus or minus whatever which is the

47

option that we want to present that to now the question is what is that age that I want to scan.

48

I'm going to assume that my target is within the same range of my category VM.

49

So we're both on the same network.

50

And for me to figure out what the range that I am on is I use one of the commands that we've already

51

seen which is the I f config and as you can see here my IP address is 1 9 2 1 6 8 1 9 0 1 4 4 which

52

means that the range that I want to discover is 1 and 2 1 6 8 1 9 0 8 0 all the way to do firefight

53

so I'm going to introduce this to my net discover tool and I'm going to say net discovered minus our

54

range.

55

And then 1 and 2 1 6 8 1 9 0 got 1 4 4 slash 24 slash 24 means stand the entire range from zero to do

56

by 5.

57

I could have also said 1 and 2 1 6 8 8 1 9 0 8 0.

58

As you can see here.

59

So I made a slight mistake and I put 1 4 by the tool accepted it anyway.

60

And as you can see here the tool that a very quick scan and it turns the results that are five different

61

machines on my network got 1 2 1 3 7 8 1 4 5 and 2 5 4.

62

Given that my Kalli IP address is 1 9 2 1 6 8 1 9 1 4 4.

63

It is safe to assume that the at the supportable target machine is they got 1 4 5 IP address because

64

I know that I started my Callimachi first and then I started them at this voidable machine.

65

And naturally the Amway gave me an IP address which is that dot 1:44.

66

And then it gave them at the Sweetapple machine the next IP address which is they got one for five.

67

And as you can see here the tool also tells us the make or the vendor off the machine that I'm targeting.

68

And here it's highlighted as we M-word.

69

So I know this is a virtual machine Now obviously I can't cheat a little bit here and I can go and double

70

check from the prompt we can see that the log in details here are MSF admen MSF admin so I can use those

71

to log into the machine.

72

And I can run the command again.

73

And here we go here's the IP address 1 and 2 1 6 8 1 9 1 4 5.

74

So to me this is going to be the IP address that I'm going to be targeting the next videos to you.

75

Obviously it's going to be something different.

76

So go ahead download them at the spot of the machine and get it up and running.

77

Figure out what the IP address is and then let's get hacking.