1 00:00:10,430 --> 00:00:17,000 Welcome to a new lecture in the penetration testing lab now, in the last lecture, we saw how to download 2 00:00:17,000 --> 00:00:20,600 and install demitasse floatable machine in the virtual box. 3 00:00:21,230 --> 00:00:27,620 But as I said, the it is also required that you should download and install DeVita in your Karlee Linux. 4 00:00:28,160 --> 00:00:31,940 So I did agree, David, that is down. 5 00:00:31,940 --> 00:00:38,450 Vulnerable to Web application is a very useful Web application, which is intended with a lot of vulnerabilities 6 00:00:39,050 --> 00:00:43,640 so that it can serve as a great application for the beginners to practice hacking. 7 00:00:44,750 --> 00:00:52,100 Now, you know that hacking a target without a permission is illegal and many organizations do not create 8 00:00:52,100 --> 00:00:57,170 such websites that can be hacked, that because that may lead to other consequences as well. 9 00:00:57,620 --> 00:01:02,900 So David Obey is used for practicing ethical hacking within the boundaries of the law. 10 00:01:03,440 --> 00:01:11,180 Now, if you go through books and if you read books, you can see that whenever you read something, 11 00:01:11,180 --> 00:01:17,460 it is really important that you practice that only reading will not get you through the end. 12 00:01:17,720 --> 00:01:18,650 You have to practice. 13 00:01:19,040 --> 00:01:24,370 And that is why the downloadable Web application is a great source of practicing ethical hacking. 14 00:01:25,100 --> 00:01:31,560 In the last lecture, we saw how to download and install it as portable and in that the DVDs, it was 15 00:01:31,580 --> 00:01:32,380 already present. 16 00:01:32,810 --> 00:01:38,470 But in this lecture I will show you how to download and install the DVDs in your Karley machine. 17 00:01:38,870 --> 00:01:44,300 So without wasting any much time, log into a cardio machine and let us get started. 18 00:01:47,050 --> 00:01:53,290 So as you can see right now, I in my candy machine, I have logged into my killing machine to download 19 00:01:53,290 --> 00:02:00,880 and install or desirably, what we have to do is first go to your home directly or you can go to your 20 00:02:00,880 --> 00:02:01,960 mom folder's. 21 00:02:02,870 --> 00:02:09,410 And then you have to create an applications folder where you can create and download and install different 22 00:02:09,410 --> 00:02:15,080 applications so that it will become easier for you to actually, you know, navigate through your browser. 23 00:02:15,620 --> 00:02:18,230 So it's asking me to stop documents, downloads. 24 00:02:18,230 --> 00:02:20,070 I will create open folder. 25 00:02:20,570 --> 00:02:28,280 Now, here, what I will do other places is that these are the places that I will create a new folder 26 00:02:28,280 --> 00:02:29,450 here calling. 27 00:02:29,450 --> 00:02:35,060 It has applications in which I will be installing the future applications for this course. 28 00:02:36,020 --> 00:02:38,210 So now this is the applications of all. 29 00:02:39,110 --> 00:02:42,650 Now, what have to do is we have to go to the terminal. 30 00:02:43,850 --> 00:02:48,200 So click this icon, which stands for the terminal. 31 00:02:50,730 --> 00:02:59,490 After this now, since we have already created the applications folder and we will see how to go to 32 00:02:59,490 --> 00:03:06,720 the basic commands, I will show you just a basic command click list here unless it stands for list 33 00:03:06,720 --> 00:03:08,940 everything in the current directory. 34 00:03:09,720 --> 00:03:14,590 As you can see, we have created the applications folder and it has appeared here. 35 00:03:15,300 --> 00:03:22,500 Now, if you want to go inside that folder, you have to write change the current directly to applications 36 00:03:22,500 --> 00:03:23,070 directly. 37 00:03:23,520 --> 00:03:24,690 So how do we do that? 38 00:03:24,720 --> 00:03:32,520 We just write a simple small command by typing code that is change directory and then type the name 39 00:03:32,520 --> 00:03:36,570 of the folder in which you want to go in a folder here. 40 00:03:37,660 --> 00:03:39,760 Is commonly known as a director. 41 00:03:40,280 --> 00:03:43,870 So try to change applications and click into. 42 00:03:44,290 --> 00:03:51,310 So right now you can see after the and the scorecard you can see that we have an application right now 43 00:03:51,310 --> 00:03:53,150 where inside the applications folder. 44 00:03:53,680 --> 00:03:55,080 So now leave it here. 45 00:03:57,070 --> 00:04:02,350 So right now, you have created the applications folder, but for this purpose, I have this lecture 46 00:04:02,350 --> 00:04:08,440 I won't be installing buried in the applications folder because since the readability runs on the local 47 00:04:08,440 --> 00:04:11,030 server, we need to install it in a different direction. 48 00:04:12,190 --> 00:04:22,960 So go to Akali and, you know, just close this again, open a new terminal and then I could slash that 49 00:04:23,590 --> 00:04:26,920 slash w w w slash XHTML. 50 00:04:28,830 --> 00:04:35,550 Now, the w w w e mails are directly in which most of the locals are applications are installed, you 51 00:04:35,550 --> 00:04:42,480 can if you are a web developer or if you know how to run Apache's on your Windows machine, uh, some 52 00:04:42,480 --> 00:04:44,870 of you might be aware of this directory. 53 00:04:45,660 --> 00:04:53,230 Now, what you have to do next, you have to go to Mozilla, Firefox, login type Firefox and enter 54 00:04:53,470 --> 00:04:53,790 it in. 55 00:04:53,790 --> 00:04:55,080 It will open a browser for you. 56 00:04:55,500 --> 00:05:01,800 And now what you have to go is to go to the W dot Google dot com. 57 00:05:04,760 --> 00:05:14,480 And in here, you have to type divi w e and get good stands for getups, so basically we'll be downloading 58 00:05:14,900 --> 00:05:17,010 BBWAA from the guitar directly. 59 00:05:17,600 --> 00:05:21,490 So this is the first Web site that you see Article Hecate. 60 00:05:21,530 --> 00:05:24,590 VW is a website from which will be downloading. 61 00:05:24,590 --> 00:05:25,300 So click here. 62 00:05:26,330 --> 00:05:28,220 And just copy the usual. 63 00:05:29,610 --> 00:05:30,840 And just leave it here. 64 00:05:31,920 --> 00:05:32,410 That's it. 65 00:05:32,640 --> 00:05:40,440 Your job is done and now then you come in this directory, whatever type is pseudo, that means you 66 00:05:40,440 --> 00:05:41,760 stand for super user. 67 00:05:42,840 --> 00:05:43,440 Get. 68 00:05:45,660 --> 00:05:52,230 Clone cologne means you're going to download it from that source and end the end of the world without 69 00:05:52,230 --> 00:05:57,870 any space, you have to type that GeoEye to get and then hit enter. 70 00:05:59,100 --> 00:06:03,890 So it is saying we trust that will receive, as usual, a lecture from the local system administrator. 71 00:06:04,350 --> 00:06:09,780 It usually boils down to those things and blah, blah, blah, and will ask the password for your machine. 72 00:06:10,170 --> 00:06:18,300 So give you a password and hit enter and it will start cloning the downloadable application done. 73 00:06:18,720 --> 00:06:26,050 So we have installed a device that we have downloaded and installed in that directory now to check it, 74 00:06:26,070 --> 00:06:28,380 just type alerts to list everything. 75 00:06:29,040 --> 00:06:29,910 And there you go. 76 00:06:29,910 --> 00:06:41,820 We can see W.E. Now to navigate to the VW right side, the VW and hit enter and again to see the contents 77 00:06:42,030 --> 00:06:43,460 click, uh, type. 78 00:06:43,470 --> 00:06:47,910 Unless now these are all the contents in the DV w a directly. 79 00:06:48,750 --> 00:06:55,200 Now if you can see there's a file called uh BHB Info Dot. 80 00:06:55,920 --> 00:07:05,550 These are all the files for DV w e and now we have to go into the config directly into all these names 81 00:07:05,550 --> 00:07:10,070 which are blue in color are the folders in the main floor. 82 00:07:10,560 --> 00:07:12,210 So how to navigate to this folder. 83 00:07:12,210 --> 00:07:14,700 Just write code config. 84 00:07:16,290 --> 00:07:17,370 And then Alice. 85 00:07:18,240 --> 00:07:25,980 Now, you can see there are two different files configured in 08, BHP now, but before configured configuring 86 00:07:25,980 --> 00:07:30,260 anything, you have to first give permissions to the division of the file. 87 00:07:30,270 --> 00:07:34,260 So I have to go to step back to the original HTML directly. 88 00:07:34,560 --> 00:07:35,480 How to do that. 89 00:07:36,990 --> 00:07:40,720 That will take you one step back to give it away. 90 00:07:41,820 --> 00:07:51,860 And if you do again KDDI spacing, it will go to each team to assign permissions to this or follow. 91 00:07:51,930 --> 00:07:59,400 What we have to do is you have to type pseudo C a much more dash capital R. 92 00:08:00,630 --> 00:08:04,470 And seven, do not worry, we're not getting all these commands. 93 00:08:04,500 --> 00:08:09,480 We are going to learn all these commands in the next basic commands video. 94 00:08:09,930 --> 00:08:18,670 So are seven, seven seven and then type the V w e press tab and then hit enter. 95 00:08:19,740 --> 00:08:28,620 Now, the permissions of super have been assigned to our next job is to go inside vehicle. 96 00:08:28,980 --> 00:08:38,160 So we will again go to the v w e then let's then go to config file. 97 00:08:38,160 --> 00:08:39,380 So see the. 98 00:08:41,880 --> 00:08:52,930 Config and hit Ellis, now you can see there is one file config, dot agency, dot, BHP, dot DST now 99 00:08:53,040 --> 00:08:53,420 here. 100 00:08:54,750 --> 00:08:57,480 What we have to do is we are going to configure this file. 101 00:08:57,780 --> 00:09:00,510 We are going to make some changes into these files. 102 00:09:00,510 --> 00:09:07,590 But there are some mis configurations and sometimes students configure the file in the entire file gets 103 00:09:07,590 --> 00:09:08,110 corrupted. 104 00:09:08,490 --> 00:09:12,020 So for the better purposes, we are going to create a copy of this file. 105 00:09:12,030 --> 00:09:13,740 So how to create a copy of this file? 106 00:09:14,010 --> 00:09:21,600 So type copy then the original files name that is Config Dot I and see. 107 00:09:22,730 --> 00:09:33,500 Not BHP, DOT, DST and SpaceX, the name of the new file, so I will give the same name, but I won't 108 00:09:33,500 --> 00:09:42,650 write the Doctor Distaso config, not BHP, not Oh Contiki not ANC. 109 00:09:43,830 --> 00:09:50,790 Not BHP, and then he turned and who else will have the new conflict in Iraq, BHP? 110 00:09:53,220 --> 00:10:00,090 Now, are you are you the next thing is we have to open this file type Nano, which is an editor in 111 00:10:00,090 --> 00:10:08,840 Cali Nano config dot R and C, dot BHP and hit enter. 112 00:10:09,870 --> 00:10:16,080 So here you can see that there is a lot of information and I will I'm not going into details, but I 113 00:10:16,080 --> 00:10:17,520 will just show you what you have to do. 114 00:10:17,940 --> 00:10:24,390 Come down to the DBI user, uh, divi w, e and R your password. 115 00:10:24,960 --> 00:10:27,900 So I will change the user name to admin. 116 00:10:29,580 --> 00:10:34,010 I will change the password to password. 117 00:10:34,560 --> 00:10:39,420 Make sure you remember these things because these are the more important things if you want to, can 118 00:10:39,420 --> 00:10:40,650 also change the IP address. 119 00:10:41,220 --> 00:10:46,860 But I will keep this IP address because this is the default IP address for a school databases. 120 00:10:47,220 --> 00:10:49,650 So make sure you take out a screenshot. 121 00:10:54,070 --> 00:10:59,030 So I have changed the default username and password now to save this file. 122 00:10:59,050 --> 00:11:08,170 What you have to do is you have to hit control and all it will ask you file name to write contact or 123 00:11:08,170 --> 00:11:17,020 to be after pressing control, just hit enter and it will give you wrote 47 lines and then to exit this 124 00:11:17,020 --> 00:11:19,420 file press control X. 125 00:11:19,930 --> 00:11:22,830 So we have configured the file successfully. 126 00:11:22,840 --> 00:11:25,370 We have changed the username and password. 127 00:11:25,900 --> 00:11:29,320 Now let us clear the screen. 128 00:11:29,320 --> 00:11:29,540 So. 129 00:11:29,560 --> 00:11:30,880 All right, clear. 130 00:11:32,560 --> 00:11:34,920 And I would like to return to my home. 131 00:11:35,340 --> 00:11:38,270 That is to the root of the server. 132 00:11:38,320 --> 00:11:43,230 Now what we have to do, we have configured our DPW file. 133 00:11:43,240 --> 00:11:46,920 Now the next job is to configure the MySQL database. 134 00:11:46,930 --> 00:11:52,300 So before you do that, we have to start the MySQL service through the start to ask the service just 135 00:11:52,300 --> 00:11:53,110 type pseudo. 136 00:11:54,580 --> 00:12:05,230 Service might as well start up and it will start the service if you do not try to do it, will generally 137 00:12:05,230 --> 00:12:05,950 give an error. 138 00:12:05,950 --> 00:12:07,270 That command are not found. 139 00:12:07,870 --> 00:12:09,960 Right now, we have found we have started the service. 140 00:12:10,390 --> 00:12:13,960 Now, what we have to do is you have to configure the MySQL database. 141 00:12:14,290 --> 00:12:23,650 So take the command my Ezekial Dash You route and USPI and hit enter. 142 00:12:24,340 --> 00:12:30,310 It will ask for password, but since we have not configured the password, I will hit enter and it will 143 00:12:30,310 --> 00:12:33,330 say access is denied for the route user. 144 00:12:33,850 --> 00:12:35,860 So I have to do is write sudo. 145 00:12:38,800 --> 00:12:42,610 Then hit enter again, password, and there you go. 146 00:12:43,360 --> 00:12:48,100 So now what we have to do is we are going to add a user into the MySQL database. 147 00:12:48,400 --> 00:12:50,830 So please closely observe the video. 148 00:12:51,040 --> 00:12:55,720 Do not jump between your installation and this video. 149 00:12:55,720 --> 00:12:59,160 First, see the video completely so that you can get a clear idea. 150 00:12:59,720 --> 00:13:01,770 So what you have to type is you have to type. 151 00:13:02,200 --> 00:13:08,830 Now, since there is no user created for MySQL database, our first job is to create a new user so that 152 00:13:09,130 --> 00:13:14,950 that user can access the digital serve to that type create. 153 00:13:18,070 --> 00:13:25,430 User and in the semicolon, what you have to write, the username that you had configured in the conflict, 154 00:13:25,690 --> 00:13:28,190 I wrote BHB in that file. 155 00:13:28,300 --> 00:13:31,480 My username was admin and my password was password. 156 00:13:31,870 --> 00:13:39,670 So I will write in single code admin, single codes, closed aderet, single code and IP address. 157 00:13:39,670 --> 00:13:42,730 That is one twenty seven point zero point one. 158 00:13:45,230 --> 00:13:46,460 Identified. 159 00:13:49,000 --> 00:13:59,770 Buy in single Colen, the password of the file configured semicolon and hit enter query, okay, zero 160 00:14:01,090 --> 00:14:01,620 attempted. 161 00:14:02,410 --> 00:14:06,880 Then again, the next step is that we have to grant the permissions to the user. 162 00:14:07,180 --> 00:14:09,820 So type grant. 163 00:14:11,940 --> 00:14:13,050 Privileges. 164 00:14:15,070 --> 00:14:17,710 To the same thing again. 165 00:14:18,800 --> 00:14:20,190 Single admin. 166 00:14:20,210 --> 00:14:25,580 But you have to grant all privileges, so I grant all privileges. 167 00:14:26,670 --> 00:14:40,410 Oh, now on this database, so grant all privileges on DV w a dot star, which means on the entire database 168 00:14:40,410 --> 00:14:41,610 of DV w e. 169 00:14:43,140 --> 00:14:45,870 Two single coats, admin. 170 00:14:47,160 --> 00:14:51,630 At the rate one twenty seven point zero point one. 171 00:14:53,330 --> 00:14:56,870 Identified by. 172 00:14:59,970 --> 00:15:02,250 Password and then hit Enter. 173 00:15:02,760 --> 00:15:08,850 OK, a novel exit the database where typing exit let is clear the screen. 174 00:15:09,450 --> 00:15:11,740 Now we have configured the DVD player. 175 00:15:12,180 --> 00:15:14,580 We are also configured the MySQL database. 176 00:15:15,150 --> 00:15:17,380 Our next job is to configure the server. 177 00:15:17,940 --> 00:15:20,130 So what we have to write is we have to go. 178 00:15:20,370 --> 00:15:22,920 We have to first start the Apache server, so. 179 00:15:24,070 --> 00:15:24,850 Pseudo. 180 00:15:30,460 --> 00:15:33,940 So we have to type pseudo service. 181 00:15:38,440 --> 00:15:40,030 About to. 182 00:15:41,400 --> 00:15:46,890 Start, which will start the apology service of your coffee machine, next step is that you have to 183 00:15:46,890 --> 00:15:56,340 navigate the following directory, slash Etsy, slash BHP, slash seven point three. 184 00:15:56,340 --> 00:16:02,580 Now, this May virgin may be fine, but it is generally present in our machine party too. 185 00:16:02,580 --> 00:16:06,030 And slash they will go then click ellis'. 186 00:16:06,480 --> 00:16:11,160 You will find a file called as BHP Ironi. 187 00:16:11,580 --> 00:16:14,340 So your job is to you know, install. 188 00:16:15,640 --> 00:16:16,240 This. 189 00:16:21,680 --> 00:16:28,480 So what we have to do is you have to open this BHP file to type pseudo, so it gave me an error that 190 00:16:28,490 --> 00:16:30,600 it is unable to locate the packages did. 191 00:16:30,650 --> 00:16:38,860 So I lose nine of those Rangitoto Nano, BHP, Diana, and they have successfully opened it. 192 00:16:39,320 --> 00:16:44,690 Now, what we have to do is you have to press control if to find something, but let's not press control 193 00:16:44,690 --> 00:16:49,850 of just navigate down and you may find two different. 194 00:16:51,600 --> 00:16:51,820 Oh. 195 00:16:52,080 --> 00:17:00,290 What else would you scroll down so you have to scroll down to your allow, you are open, allow your 196 00:17:00,290 --> 00:17:02,760 also allow you are open. 197 00:17:02,760 --> 00:17:09,810 What you have to do is you have to turn both the values on your own, then have to save this file. 198 00:17:10,230 --> 00:17:12,960 Now we have to save this file plus control or 199 00:17:15,720 --> 00:17:21,540 it will ask you file name to write and then hit enter it successfully wrote in files and press control 200 00:17:21,540 --> 00:17:22,300 X to exit. 201 00:17:22,830 --> 00:17:24,540 Now everything is done again. 202 00:17:24,630 --> 00:17:28,180 Start the service pseudo patisseries to start. 203 00:17:29,700 --> 00:17:30,750 So this has been started. 204 00:17:30,750 --> 00:17:32,940 Now minimize your terminal. 205 00:17:33,240 --> 00:17:42,660 Go to Karley, open a new tab type or the address one twenty seven point zero point one and hit enter. 206 00:17:42,670 --> 00:17:44,040 You will get a page of apology. 207 00:17:44,040 --> 00:17:52,920 Devean default after 127 slash divi w e slash and you will get the set of page.