Now we are going to have more advanced look at my desk and we are going to see how to use it to exploit
the winnability that exist in the service.
It is a code execution venerability that will give us full access to the computer target.
Now, going back to over the resulting map, we are going to do the same thing that we did before we
copy the service name and see whether it has anyone ability or not.
OK, so now we will look at the number one three nine, which has a service and three dots, just like
the previous video section.
We are going to go to Google and search for.
OK, first of all, let me open a browser and hear.
It will take some time actually opening it first time.
OK, so now we are having here this particular browser.
So what I'm going to do here is I'm going to type Google dot com and so I've been looking into you.
You'll see this Google search engine.
So now I'm going to search some.
Three ex.
X-Rite and Jitender.
So what happened here is we will see that there are a number of reasons, but we are interested in rapid
seven, OK, rapid seven.
OK, so number seven is a company that makes them a desperate family.
So that's why we choose this particular exploit their service, choosing this particular exploit.
Okay.
Did you do this one at seven?
Sumba.
OK, that's all we have to do in this particular.
Website.
OK, so this is the next flight that we have here.
OK, so the next thing that I want to do it is I'm going to simply open our terminal window.
So first to what the next thing that I'm going to do here is I'm going to simply look.
It is not working properly, actually, so it is creating some problem.
OK, so next to them, we just good this, OK, so opening this Domhnall window.
And let's see what I'm doing to do this and when to zoom it off, assuming it, I'm going to type a
massive console and hutting and.
So what it will do, it will simply open up a framework for us with the help that we can perform this
particular attack, so it will take some time because it is a huge framework, as I have told you earlier,
that it is a huge framework.
So the command idea going to you simply, we are going to type, use, exploit multi sumba, use a map.
So this is the name of this particular exploit so that we are going to use.
OK.
So as you can see, that is starting to Desplat framework console.
It will take some time.
You have to wait till the completion of this.
And as you can see, that we successfully completed this particular process.
Now what I'm going to do is I'm going to use, use, exploit.
Marty.
Sumba.
Use a map.
OK, is this script now hit enter so often and I can see that we are inside it.
OK, so we are currently or no no put it up in default.
CMT focus.
So currently I'm OK.
We are inside this.
So this thing that I'm going to do, I'm going to do so options.
And besides, you can see that this is swing us the opposite.
OK, so what we are going to do here is we are going to simply set something, OK, so we are going
to set something that is as you can see, this is the holster, okay.
Which is always disembody.
So I'm going to select those host, which is the IP address of Target.
So what are the IP does I need to see what is the IP address of Target.
So this is the targeted machine that.
We are having is it does this suspend to gift and so this is IP address now again, sort of since as
you can see that dot, which is being said now, it's time, as you can see, for disconnect now at
Hostess's IP address as well as Iapetus of Aromasin.
So what I'm going to do is I'm going to see.
Some payloads also, so why we need Volodia, so in the proceeding we do, we need a bad dude that was
already installed on their target computer.
So all we had to do was connect to the backboard and then we could run analytics on that particular
operating system on or on that particular system.
But in this video, the computer does not have a backbone.
So it has a normal program that has a command ability and buffer overflow.
So the program does not have any code that allows us to run Linux.
Come on.
So it has a certain flow that will let us on a small piece of code.
And these small piece of coal is called a payload.
OK, so what we need to do is to create a pilot and then run it on to the computer using the winnability
that we found and the PS4 and the piece of code will allow us to do is it's a different thing.
OK, so there are various types of people.
So we will look at in the future and that might lead us to do is come on and we can run the field also.
So before running it, I need to figure out each and everything is correct or not.
OK, El Al host is now Boat No.
Alpert is correct and both.
OK, I think everything is working fine, so I'm going to just type so payload.
And soft.
And as you can find that we are having these many payloads, well, when you scroll it up, you will
see these computers that we have here.
So now the fellows are the small piece of code that will be executed on a target computer once the winnability
has been exploited.
When we exploit the vulnerability, the code that we are going to pick will be executed.
Now, depending on the type of payload we choose, the payload will do something that is useful to us
so we can see that all the payloads come online.
So they let us run our command on that computer.
So there are two types of first.
One is buying payload and the second one is robust payload.
So if we talk about buying payload, so they open the port on the target computer and then we connect
to that particular port, but.
Let's talk about reverse payload, reverse payload is opposed to the payload, they open the port in
our machine and then disconnect from the target computer.
So this payload is useful because this allows us to bypass firewalls, firewalls, filter any connection
going to that attack machine.
And but if the target machine connect to us and we don't have a firewall, then we will be able to bypass
the firewall.
OK, is this correct?
Now, what I'm going to do here is to set the payload.
So for setting the payload, I'm going to use said.
Pillared.
Is this correct?
Now, Commander?
I'm going to use order that I'm going to use ACMD Unix.
Retrievals.
Nutcake.
OK, this is the payload, not enter, so operating, and as you can see, that we have successfully
selected the payload.
OK, so the next thing that I'm going to do is so.
Options.
So getting it done now, let's see what we are having here is.
OK.
Let me scroll it up.
Marty Sambor, if motivation is discouraged, is going to Dysport, no.
And this is the host of mine and this is Albert.
Okay, I think everything is looking very fine.
So the next thing that I'm going to do is I'm going to simply.
User like.
Said, First of all, I need to search the airport, which is fight, fight, fight, fight.
OK, now again, so.
Options here so that you can see that we have successfully set our host.
Airport closed airport.
OK, now what I'm going to do is and I'm just simply going to exploit this period.
It enter so often hitting enter, as you can see, that the next thing that I'm going to do is I'm going
to sue the current Wilkening directly.
Now, we are currently inside the route now.
It will tell us the Idy.
So this is the ID and I want to know your name.
So this is a second we exploit anyone ability.
So this as a user name, and now I want to see how many files inside does so indirectly.
So these are the files that we have inside it.
So this is how you can find winnability using Zend map.
So the basic process here is you open the map and the target IP address and all of the IP address,
you will find there are some open ports.
OK, so after seeing some open borders, you just Google them and learn about them and see how many,
what kind of exploits and what kind of pillars of.
And after taking all this information, you can exploit that particular vulnerability or what what kind
of credibility it contains inside it.
I'm talking about ports, OK?
So this is how we can exploit all kinds of unknowability.
So this is all for this lecture.
So what in this lecture?