Lesson 57 : Jack The Ripper Video Lecture | Ethical Hacking using Kali Linux (in English) - Software Development

hey guys welcome to the next tutorial of
ethical hacking and penetration testing
we are Kali Linux so in the previous
tutorial I taught you how we can go
ahead and get in the system and get the
hash passwords for our windows 7 thing
so as you can see when I ran the haslam
database I have already received the
password I did not even need to go ahead
and crack that so I'll go ahead and show
you this once more if you want but this
how it works likely and as I told you
that it gave me out the hash password
but over here I'd also give me out the
exact password that was ABCD a third one
to three so if you are not able to go
ahead and get this password if you had
some tough password which has multiple
characters and everything the need to go
ahead and run the auxilary aux il ary
run auxillary slash analyze and /jt are
I believe it crash underscore fast run
auxiliary analyze first let me just
check if I have a slash analyze /jt
are underscore crack underscore fast and
if you are able to run this you need to
go ahead and run this command or you can
also go ahead and type use over here but
I don't believe that you would need to
use that because when see when you go
ahead and use the hash per thing you
already easily go ahead and get the
password for that as I have got over
here so that's how you can go ahead and
use this and once you have this password
you can simply go ahead and connects to
that using the remote desktop or
whichever you want so but that's not it
there are many other things that you can
go ahead and do let's say for example I
have this test one file and I have these
two things over here and I wanted to run
these two as let's say these two
commands netstat and CMD so I can go and
to run those files over here let's see
where we are exactly
I am in system 32 so I'll just go down
and get back to let's see where I am
okay I'm still in Windows and I am in C
Drive right now so I'll just go to users
and let's check we have the test users
I'll go to test user and I'll go to
desktop perfect and now I want to go
ahead and run this test on file so let's
go ahead and check if I can do that
resource space and so I need to go ahead
and give the test files as a sub text 1
0 txt so okay no such file 3 txt oh let
me check just one okay okay
I'm sorry for that I it's not the file
that we have stored over here solve that
and if you wanted to go ahead and run
any specific commands from our computer
that I had over here then I can go ahead
and do that so let me check the local
working the directory I'm ESET so let me
check I can just go ahead and create a
new script over here and I can go ahead
and run that for this computer so that
is one way of doing that
let me check I have not yet tried that
except till now so let's check test txt
and I'll just good and let's say CMD and
net stat these are two commands that I
want to run let's see if I can run them
it is just test ok perfect as you can
see I ran all of these commands just by
which I had written over here and I was
mistaken it was not over here it was
over here so if you want to go ahead and
get into the system quickly do what you
want to do and get out then you can go
to already create a list of commands
that you want to do and you can go ahead
and run that through the meterpreter
prompt so cm did not work because I
wanted an e it was a need to go and
install I can only run what is there
inside
one prompt so that the reason he did not
run next ad ran perfectly and if I go
and let's say I write IP config and I'll
save it if I go ahead and run the
resource again I'll get the IP config
file so and if I want to go ahead and
read that directory so let me check I
can't eat - go ahead I'll just go ahead
and okay pack perfect now over here if I
were to go down I have this ABC file
this is an awesome file and if I need to
go ahead and run that I can just go
ahead and type let me first check where
I am
I'm desktop so I can just type cat and I
can type over here
ABC - tht as you can see I have this is
an awesome file and a anytime number of
time you can done you will see whatever
is there in this directory perfect now
okay so next thing that I would like to
do is I need to go ahead upload or
something from my computer into that
computer so this something that you
would have you would want to do at the
very start and not something like from
over here so when I am doing right now
after getting the system you would not
want to do that so the first thing that
I would like to do is to search for my
payload East that is over here payload
dot exe I'll just let me check I am
still SCT so I want to upload slash user
share a CT and pillar dot exe and now I
want to state where I want to go ahead
and run that or upload that so I'll have
to type the specific places name so I
need to go ahead and insert that so I
need to go and type let's say hey wait
I'm already there so I no need to
perfect I can straight away go ahead and
do this so I will just I see : and let's
say I want to go ahead and just need to
go ahead and insert this later on first
I need to insert the route where I want
to go and the name of the file would be
like
I have to copy it into the C Drive let's
say I want to copy it on the test user
that is the desktop over here so I'll
type users I'll just copy it I'll just
copy from over here and paste it over
here and I can go ahead and see you this
test user desktop and the name of the
file would be let's say I want to copy
to the desktop but I want it to be you
know I already have a pillar on desktop
so I'll just copy it into C fine so the
name would be let's say for example
payload period exe and I want to know
where it is exactly so I'll type slash
user all let me check if I could just go
ahead and type later dot exe okay come
on no such follow to a three-c speedo
dot exe that will be the file name okay
sorry are actually it should have been
the exactly the opposite the payload
should be over here and the seat eyes
should be over here
okay puppet uploaded so let's go ahead
and check the C Drive right now as you
can see I have the payload file so
similarly can go ahead and just simply
copy it to the startup drive of Windows
and it will run just perfectly fine if
you want to then check value walk we are
working right now so you can just type
get WD I will show you where you are
right now if you want to check which
local directory are you in in the
Catalina so you can type get l ee that
scale local working directory if you
want to change the local working here
directories file then you can go and
type LCD for our remote you need to type
CD
II again mkdir MV you know and of this
most of these things are the same except
that if you want to go ahead and put
forward or forward a local port or
remote service and you need to type b
ort f WD to code and put forward
anything if you want to go ahead and
view and modify the routing table then
you can go ahead and type route and you
will see all the routing tables over
here so port forward would be again be
the same thing and zero total local
ports forwarded because I am not
required anything to that you want to
steal token of something you can just go
ahead and type steal underscore token
and it will go ahead and try to steal
the token of specific PID that I need to
go ahead and insert that I can later go
ahead and use that to create an
impersonation token if I go ahead and
type suspend it will straight away go
ahead and delete or is all it will
straight away go ahead and suspend the
our remote computer get race is what I
have told you previously I can also go
ahead and get the username of the
current session but I've been get UID
and I am system right now as you can see
if I was previously the administrator I
would be shown as the administrator now
these are fine but there are still other
things that you would want to know like
killing the process you need to just
type Q to get the list of running
process you can just type PS or get PID
to get the current process identifier or
reboot to go ahead and remove the
localhost but what if you want to go
ahead and edit the register file we can
do that as well you just need to type
our eg and that is the registry and with
your value that you want to go ahead and
edit or enumerate you can still do that
from over here now if you want to check
since how many time the computer is
still on you can just go and type idle
time and you can see it since 2 or 26
minutes the user has been idle that
means he has not done anything if I go
ahead and do something like over here
and I have just clicked and if I go
ahead and type the idle time it's just 2
seconds because that means the computer
did something and went away again the PS
person came now there are few other
things that I would like to teach you
such as going ahead and getting a screen
shot using the key logger or inserting
the key logger in the person's computer
that would be it for this tutorial in
the next tutorial I will teach you how
you can go ahead and insert a temporary
key logger as well as a permanent key
logger and on how you can go and write a
key logger in Python and insert that
into your targets computer and then go
ahead and gain all the information that
you need about related to whether it be
a Windows password or any his VMware's
password either it be a Gmail Facebook
or any of his important accounts
password or a login credentials anything
so that would be for this tutorial