Hi, and welcome to a deep dive into
Network. Assessments by easy console. This
is section, 2 Network assessment
methodology, and tools. In
this video will take a look at exploring Metasploit
using Kali Linux. So, without
further Ado, let's iPhone.
Currently, this is Kali Linux.
To start Metasploit, we can
use a simple command, which is msfconsole on it
answer. This will initiate Metasploit,
and shows a very fun and traveling.
So, let's give this a couple of seconds.
I'll check this out. We actually have a pretty cool Vana. Vana
after I sent that once more,
we can change a bond as many times as you want. But the
thing is is that it isn't actually a
few Banas which is constantly rotated or
recycle fun over. But it
means saying is take a look at this flight and
this is a community. Butchart. It contains a little
over 2,000 exploits. There's a
little over 1,000. Auxiliary mode. Use. There's a
little over 300 pulse exploits
there, some pillows and quarters and
even know operations and check this out.
It's even if these immorals probably wondering
what exactly is a Mario. Well, I'm
more used to put simply it just simply a
thing that kills mother spoils him additional functionality. So
for example, dl2147 exploit
models are there.
Point in this Pacific Village of metalloid, this exploit
more use amoras, which simply
allows us to literally have something or
actually take advantage of his security vulnerability.
There's 1143, auxiliary
more use at this exact point of this
recording. Now. One of
them are sports updates. But
currently with this
week. I'm going to spoil him using his 1143 auxiliary
mode. Use auxiliary Mall used
to be so we
can console at Sea, open port, School sports
running Services. We can even scan
to. Determine whether let's a Target is
vulnerable to political export before we
can exploit.
Daisy from the post more use which are
these 365 at this point
of recording?
The Porsche models are pretty
much opposed, explain more use. So let's
look at it. In this way. We use, auxiliary more
used to detect, whether it's system is life
on a network. I'm so sorry. Too much water.
Since. I was born real to specific security
vulnerabilities than once
he finds security vulnerability. We can use
a right to exploit model with a Metasploit to
take advantage of that security weakness.
Let's imagine that we are able to successfully take advantage
of his security weakness. Then we can
you suppor sexual motive to performs at
to perform additional actions to go
to exploit weekend, couple pollutes. So
probably wondering what anxieties of a load it. It's
pretty much after action. After
you're exposed to the system this evenin
coolers in quarters. I use to
help Evie, daddy, virus detection. There's
also no chips or better known as
New operations. No operations. More use
also helps our additional
data into writing our
own custom field. That is also a division models
which is additionally used to
reduce the risk of being detected.
Metasploit has come online this and that's
a cool thing. How do you use Metasploit? So we
can start by typing the health, and likes to
impress under?
This here is how to
use most Floyd. There's so many come outside.
We could use at so many things so we
can use a? To get a B
cycle. Come on. You can you see the change car?
Again directories? We could even see the
history. I want you to take some time and go through
some of these commands with no, I just
feel so familiar with the purpose of
these clients. Now to get you
started.
Let's take a look at something. What if
I want to see all dogs or remodels? I
can type show, auxiliary, or aux and
press tab answer had to
take a look at this whole dogs
that are models with amethyst. Floyd for example,
is associated number.
Desert type of model. In this case with
auxiliary. There's some additional information such
as server. Actually. Let's take
a look at this one. This is it is
doing some type of spoofing action. It is
doing some type of ARP spoofing
action, to be more specific is doing
Erp poisoning, which is pretty awesome.
How about we take a look at show exploits?
There's so many Expos. I said we can use
but searching through all of his
exploits are a little bit overwhelming and let's
actually
search for something specific.
So let's who searched on let's
switch for vsftpd answer,
not a
cool thing. Is this all the
search results and give us specifically what we
are looking for. So we can see that. There's a
specific exploit for eunuchs pee
system. That is related to the FTP servers that
is designed to create some type
of pack do in vsftpd 234. We
can see the disclosure date, we can
sit around objects for which in this case. It's excellent. We
have the description of the exploit.
So how do you use this exploit to
put simply, we can copy this sweater iclicker?
And you can see use on PC
anti-exploit, neem right
here at his answer. Now. I'm
not a method is simply after a
performance which will be in number associated
with exploit chicken say
use zero and press enter
on and it will give us the same result. Like so
now we can see that we
are now in Booking, this
particular exploit Sonora with
an exploit mood, what's next?
You can do shoe.
Info to get an idea of
the description and how to use this
exploit. So let's hit enter.
Onward. It's just give us so much information. So
you have the name. We have
the model. We have a platform architecture where
we need privileges or not license, the
wrong disclosure. We can
even see who created model and any
sort of additional information.
We can see the targets, we can
see what options are required to
actually get a small you looking. So, for example, there's
a part and was our host.
Currently it is not set up but
it is required on this here from
somebody says here, the target range cider
identifier or file with
syntax the airport,
which is a remote Port is already set
as default. 21 and this
is also required.
Down here. We actually have a better description
of what is moral does.
Let's say, for example, that you not to really interested about
the description. We can type of
options and hit enter on will get only the
related. Information. We need to know, for
example, the parlance of
our house, which needs to be set because required as
he has, but options are non-existent. So,
how could we set our hosts to
put some bleach? We can say set Dan, specify
doctor parmesan, team and dance, a
doctoral IP address to. For
example, let's see what I can to 16856. 101
and press enter. And now
we can see our house while you said to dis Pacific
Target. So, if I do options one,
more time, look at is our whose
value is actually kind of figured, you know,
The cool thing is that there's a Prelude on,
this is a balut set. So why
do we need a couple of pill with an exploit? Text?
Floyd is pretty much a tool that we are going to
use the break into our system after break into
the system, then to peel or will be used to
perform actions afterwards currently.
Would, this be lewd CMD
you next in Turok? There's nothing to
be said here. So what should
we do next? Well know that we set
up a reminder for exploit and the people who
does not require any configurations, we can simply type.
The word exploit and press enter
to launch. This exploit. Please keep in mind do
not to use this knowledge to attack any
systems like you do not own, or do you have legal permission
to do? So, it is illegal to
perform scanning on exploitation
on systems.
Outside of your network. Also tells you
do not have legal permission to do so.
This star system is a private system.
With a microphone activate voice to
this exploit should work. So, let's see, red answer,
3 to 1 at sea.
So it's doing something it, got
some type of Bona.
It spawned a back to
service that seems to be running on Route
and take a look at is we have gotten a
session. Another word. We got initial.
Part of this show is between
our Carlos machine and
Victor machine. So how do
you know what's going on? Well, let's
try something.
The target is definitely eunuchs pee
system, because this exploit only works
on a Target Unix system. So, if
I run, let's see a Unix base command, for
example, Unum Vista, she
could answer and this should execute
on the remote system. I'll look at it. It is
metasploitable, which is all
the victims as if I type. Let's
AARP
Dashie. I should get
a r p, cash flow and check this out, we
execute and commands a machine but
it's actually being removed. He
executed on the victim's system. How about
if I do? IPA ddr2 get
an IP address of a victim?
And this IP address, which is 192 168.
56. 1
one actually belongs of victim and
not all Carly machine.
Go to the mall, I could type it. Say
for example, I type exit was going
to happen. This means that I've closed my session.
Let's try something else in a tie back.
I know I'm boxed wine emails with window.
I'm going to search for let's say Port scanner.
Can you switch ports? Can I hit enter?
I'm currently I'm getting a list of all the
more you that contains the Kiwi port scan. So
for example, letter use, and that's
to auxiliary.
Flash scanner.
Port scan.
Let's to send Celeste.
We sent both can only Target.
That's type of options to see. Y'all are required parameters.
I'm here.
We already have most of these parameters that but
most importantly, we need to settle our
host. So let us reset the
ruse. We can you said G2 said, glue.
Also, you have to resend out who sending more.
Let's settle our, who's as most boys
rule, that's to 192 168. And of
course, IP address of all medals worth in
Washington. So, this is 56. 1:01,
had to answer and we
are missing something.
So that's type-r. Hoost, space. And
now it's actually set to verify type
of options. Hit enter and take
a look at it. It's no sweat.
So, we can use either one of
two commands to execute an axillary Memorial.
We can use exploit, which will work, but could
also use a run run along to work
on. Auxiliary more, you having complete
this with you. We have explored. Just a basic functions
of metal is Floyd, but it will take a little look
into getting some more Hands-On practice. Using might
exploit in section. 3-a. The
next video will take a look at a looney objectives for
Section 3, which is a practical side on
hands one with network assessment. I hope
this video house with a full water for you, and I
will see you in the next one.