Hello, everyone.
In this lecture, we are going to look at very simple explain which is pectore, we are going to choosing
this because we are going to look at Frem will call a split made a split is an expert development and
execution tool.
So first, look at how we can find exploit again, using the same method that we have already been we
have and map a scan as we know we are going to go on each board and Google then.
So looking for a Sprite, we will go to Google and search here we BP, Effy, and we'll give you the
this was known to explode.
I think we as a.
And B, b, b to door to door.
So this is the.
Explain that we want.
And as you can see, that the result came from the website, Repitch seven.
OK, that seven is a company that makes the black.
So that's why we are choosing this particular exploit now, using the exploit, we are going to exploit
the service that I have and will tell us that two or three or four was enough.
BP has a better command execution so we can basically execute command on a target computer.
And if it has this program installed and using the end map, we can see that this program is so which
means that we can execute on on the target machine.
So plate is made Boroughbridge seven.
It's to use a framework that contains a large number of exploits.
It allows us to exploit when abilities or create our own exploits.
The command on mitzvot are very simple.
So now let's open the closet first and open the dominant window.
Let's make it zoom, so the commander I'm going to tell you, is first for opening, we are going to
use emissive console.
OK.
So what it will do, it will simply it is used to in the Middle East program and then we are having.
So what does help?
Help is nothing.
But using this command, we can get information about the command and description of how we can use
them.
OK, so next we have so, so, so this command sort of level explains we can sort of level auxiliary
and the available payloads.
So the next one we have is yours.
So this command is used to use something that we have.
So for example, we should exploit and we pick up a certain extent that we want to use.
So then we use this particular command and we try to exploit name to run it.
OK, so then we have set.
So this command is used to set a specific option for exploit.
For example, if we want to set the port of Target and we set the port and then we enter the value of
the port that we want to it OK, now we are having explained so at the end, once we finish this configuration,
we can expect to execute that particular exploit.
OK, so now is it is it OK?
So we went on simply and map and when we Google the name of service, which is very FPP to door to door
for exploit, we can see that this service has a bad command execution because this is on Redbridge
seven.
So the vulnerabilities exploit using the desperate and the module name that we are going to be using
is like exploit Unix like exploit.
Exploit the Unix.
And F.T. for FPP, OK?
And we re as if bpp dot know in this case, we are going to use DOT.
OK, so this is two or three, OK, now this is back to.
So this is the that we are going to use what I'm going to do here is I'm going to cooperate capitulation
in the cities at.
But.
So this is the expert that we are going to use now, we will go to a console and we are going to run
a massive console and hit enter.
So it will take some time.
A huge framework's it's going to take some time.
And what we are going to do here is we are going to simply.
Copy and paste that particular exploit here.
OK, so we have to wait till the.
Completion of all this process, and after some time, you'll be able to use this aspect frameworks,
which is the I think 90 percent or 95 percent hackers use Menez because this is a very huge framework
and very important and it has lots of payload experts inside it.
So, as you can see, that is starting the flight framework.
OK, so we have to wait.
Using it is very simple.
So, as you can see that we are inside it and now what we're going to do is I'm going to use because
I want to use this particular exploit, so I'm going to based it.
So this is a hospital bed to that we want to execute.
OK.
Now, the next thing that, as you can see, this is suing.
So something is wrong here.
So we have to read Chick X, right?
OK, use exploit the spelling is correct.
OK, so what we did here is we don't need to add this.
We need to add does not enter.
OK, so as you can see that we are inside this particular X, so then we are going to use.
So come on to sort of since that we need to set.
So as we know that Suzanne.
Come on.
That we can use in a number of cases.
So in this case, we will use so often to see all the options that we can change from this particular
exploit.
We are going to type Soryu.
So options.
And so after hitting enter, we can see that the second option, which is.
OK, so we can see the second option is that service is running on and it's already been set on 21.
OK, so now if we go back to any map and we will see that our target FTB server, our client is running
on Potente now, we only need to change the outpost, which you can see here.
This is the outpost.
OK, so you can only do this outpost and that is the IP address of the machine.
So we will use it and then we will put the option.
OK, so how we can do this, we can just simply type typeset.
Our host.
Everything should be in capital.
So this is the IP address.
OK, so now into.
So often pressing into you can see that just simply types, so options.
As you can see, that we have successfully set out to this particular IP address.
OK, so this is how you can set it so everything is ready.
OK, everything is ready.
OK, let me see it again.
Everything is ready.
So now we are going to execute a spokesman.
OK, so right here.
OK, so we can see that it was running successful and how we can execute our computer.
We will simply type it here.
OK, so as you can see that we are getting.
Now I want to know the username, so what I'm going to type you name.
Hyphen and horrendous, as you can see, that this is a user name now I just want to Ellison see all
the files and everything now operating, as you can see that we are having these many files inside.
And now I want to see in ways that we can claim on.
So I'm going to be the blue beat and hidden inside.
So this is, as you can see, that this was a very simple use of makerspace.
So in the future, we will use it for more at once.
So this is how you can get inside using the exploit to exploit the FGB.
So this is all for this picture.