In this video, you will learn how to set up a test lab environment
to safely learn buffer overflow attacks.
I hope you're excited as me.
So let's dive on in.
To get started. We will need to set up a Windows which
will machine to run our tax on.
So a simple place to get a Windows operating
system we can head over to Microsoft evaluation
center where Microsoft will
give us, of course a trial version of Windows 10.
To download a trial version of Windows 10 simply click
on Windows.
then select Windows 10 in the price like so
next select download ISO in
the price
Once you select this there's a format you
need to follow simply completed details within the
form and then you will be provided with a download link in
sure that you download a Windows 10 Enterprise 64-bit
version.
Simply open the virtualbox manager and let's
create a new virtual machine. This virtual machine
will be running or Windows 10 operating system.
simply click on new
and if you're in guided mode,
which would look like this.
simply click on export mode
Let's set a name. Let's set this to be Windows 10.
in the price like so
next select the type ensure it
is set to Microsoft Windows.
Set a version to be Windows 10.
64-bit
Once you do this, you can simply adjust the
amount of memory that you are located. Which one machine.
Four gigs of RAM is fine or even 2 gigs of
ramen sign.
I will simply bomb this up to let's say 1496 simply
because I have a lot of RAM available.
But if you do not two gigs of
RAM is fine or even one gig.
When you're ready simply click on create new.
Next we can leave the virtual hard
disk file as 50 gigs as default.
We can set this to vhd Virtual hard
disk. I'll ensure the storage on the physical
hard disk is set to dynamically allocated.
simply click on create
next select the virtual machine
select settings like so
next select storage
click on this CD icon
that says MD
next click on the other CD icon across
here and simply choose option to select
a disk file.
Navigate to the directory of where you
store the iso image of the Windows 10 operating system.
next click on open
Great.
Lastly, let's click on settings.
and let's change the settings to internal Network
like so
and let's use a drop-down and select our pen
test net like so great.
Last but not least. Let's click on Advanced and let's
set promiscuous mode to allow all.
and now click on Okie
once already click on start to power on the
virtual machine and let's begin the installation process.
next click on the next button
select install now
and let's wait for the wizard to appear.
simply accept the license agreement and click on x
choose option custom install Windows only advanced
select the virtual hard disk and click on next.
Notification process will begin and
this will take a few minutes to complete.
Create so it's time to set up our Windows
10 virtual machine.
Simply select your region and click. Yes.
Select your keyboard layout and select. Yes.
Let's skip this step.
For the network settings simply select the option. I
do not have internet.
This option will allow us to set up a local user account.
Select the option continue with limited setup.
Now enter your name.
click next
let's create a password.
Let's click next now. We need to re-enter our
password once more.
to confirm All Passes accurate click next
we need to set up some security questions.
We can simply uncheck all of these boxes.
and then select accept
simply click not now.
So the setup process is completed, but there's a few things
we need to do. If you notice the display
isn't scaling to your monitor.
To fix this issue. We need to install the virtualbox additional
tools simply click on devices.
and select the option input guess
additional CD image like so
once you do that open the file manager within the
virtual machine select this PC.
And now you can see the virtualbox guess
additional virtual series looted
simply double click to access the files on
its contents.
and you want to install the virtualbox windows Edition
AMD 64
double click to start installation process
click on yes to accept
click on next
next one small
and I'll click on install.
In short option is set to reboot null and click
on finish.
This will reboot the virtual machine and it will load the
additional gas features for us.
To log in we need to use a control all delete feature,
but unfortunately in this wheelchair machine
if we press control all delete, it will be affecting our
whole operating system.
To in full control all delete simply select input keyboard.
And select option that says insert control all
delete.
Now enter your password for
your user account and press enter.
So now that we have logged into all Windows 10 virtual machine
the display still not scaling. Let's resolve this
problem.
the result this problem simply click on view and toggle
with auto resize gas
display like so
once you do that from this point onwards the
virtual machine display will scale to fit
your monitors display.
Let's power down all virtual machine. Let's create
a snapshot of it.
The curator snapshot simply select
these three icons click snapshot and
click.
Create we have a snapshot that we can reveal to at
any point in time if something goes wrong.
However, we need to install a few things on our Windows 10 virtual
machine before we could get started testing out
both overflows.
simply click on settings
and let's change the network settings to bridge adapter.
The reason being we want to access the
internet through our Windows 10 virtual machine to download
our resources directly.
Now, let's power on our Windows 10 virtual machine.
Login, I will check to see if this internet connectivity.
to login simply select input keyboard
control all delete
Great. Let's open the windows command prompt.
by simply click on the Windows icon and typing CMD
and let's ping.
www.google.com like
so
Currently we can see it resolves the hostname to an
IP address. So therefore DNS is working and it
was able to Ping the public IP address of www.google.com.
We need to applications on this Windows 10 virtual machine.
Let's click on internet Edge the web brows on
Windows 10.
And let's head over to google.com.
like so
firstly we need to download the immunity.
debugger tool
this tool will help us to identify if our
P load is written to the registers within
the operating system.
Next we are going to click on this URL.
simply select the option to download latest immunity debugger
3
and simply complete this form.
Once you complete a form click the download link and
it will allow you to download the latest version
of immunity debugger.
Once immunity debuggers downloaded we then
need to download a vulnerable application.
Let's switch vuln silver
like so
and will be testing our buffer will
flow on this vulnerable silver that will
be running on all Windows 10 virtual machine.
Simply select the link that says the gray corner
like so
next we can scroll down.
and simply click the download link at the GitHub repository
like so
currently we can see these are all the files that we need.
However to download the entire zip folder simply
click on code.
and select download zip like so
great.
Now that all files are downloaded. Let's install immunity debugger.
Open File Explorer.
simply head over to downloads
and here you can see there is immunity debugger simply
double click to begin the installation process.
Click on yes.
Next click on yes as well because it is
dependent on python 2.7.1.
simply click on
accept click on next
click on install to begin the installation process.
Once it's completed click on close.
to install python
the installation will begin automatically.
simply select next
select next Once More
next again
Let's wait for the installation to complete.
finally click on finish
excellent
if we double click on immunity debugger.
It will provide us with multiple windows. So great.
We have immunity debugger running. Let's close
it.
and now
let's download a special python script
that will need to use it immunity debugger to
find Bad characters in the future video.
simply open your web browser like so
let's head over to Google.
next let us search for
Mona
immunity debugger like so
and you'll see this Repository.
That says Korean repository for
Mona py simply click it.
If you scroll down we can see there's a
monarch.py script.
Let's download it.
simply click it like so
next we can see the contents of the monitor that py script
notice that is written for python version
2.7.
however to download it let's click on row like so
and next we can simply right click.
and select sivas
and this will allow us to save the Mona python
script like so let's see it.
Great, so the script is saved.
Let's head over to our downloads directory.
And here you can see the Mona python script
is downloaded.
Let's copy next. Let's head
over to this PC.
our local C drive
next into our program files x86
let's enter immunity ink like
so
Next let's double click on immunity debugger
then into py commands.
Let's right click and simply. Peace.
simply click continue to provide
administrator privileges
And great. We have the mono python
script available. Excellent.
Let's head over back to this PC.
Let's click on local disk like so
Let's create a new folder simply right click select new
and follow.
Let's call this folder Mona.
This folder will be used to generate a
set of pod characters that will help us to
create all efficient peel loot any later
video.
To complete our setup for our lab.
Let's head over to
settings.
Next let's click on update and security
like so next. Let's
click on Windows security.
As you can see there's virus on track
protection and next is a who's firewall.
Let's click on virus on track protection.
To ensure that immunity debugger works well
together with the vulnerable server. We need
to disable our thread protection system.
Simply click on modded settings which is stated
on the virus on tread protection settings.
and simply disable real-time protection
Click yes to continue and great.
Let's click back.
Let's click on firewall on network protection.
And currently we can see the doomed firewall Zone
the private Network firewall Zone and also
the public network firewall is on.
To the series firewalls. Let's close this window.
Let's close the auto window as well.
And this time let's open a control panel.
We can change the view from category to large icons.
Let's select Windows Defender Firewall.
Now that you have selected a Windows Defender Firewall option.
Let's click on TuneIn Windows
C Fender firewall on or off.
Currently we can see both the private and a public
network settings as an evil. Simply choose turn
off for both devices like so and click
on OK
great.
Now that our Windows 10 machine is set
up and ready.
Let's power down our virtual machine like so
let's click
on settings. So, please ensure you selected
a Windows 10 virtual machine click on
settings.
Click on network and let's change the network adapter
to internal Network Penthouse net
and ensure that adapter is
it is set on promise here smooth to allow
all simply click on Okie.
Let's create a snapshot of this virtual machine.
Great.
During the course of this video you have learned how
to configure it tests environment for safely learning
buffer overflow attacks.
In the next video, you will learn how to perform various spiking and
fuzzing techniques. I hope this video has
been informative for you and I will see you in the next one.