So welcome to the second video where we are going to solve questions from 11 to 20.
So question number 11 is an FTP site is hosted on a machine in a network.
Crack the FTP credentials to obtain the file flagged or txt available on the FTP server and enter the
content in the file as the answer.
Okay.
So first of all, we have to find out what the IP address is.
Simply you have scanned all the IP address on the subnet and there you have scanned even the open and
closed ports.
So there you will have to find the port, which is port 21 open, that is the port for FTP.
Then you have to use this tool because we don't have any username and password given.
So we are going to use Hydra hyphen capital L.
Now here we are going to put the directory like we are going to put the place where the username file
is.
So for example, in my case it was in the word list.
So I have used this command.
And then for the password, the password was also in the word list folder.
So I have used this command and then you have to put FTP.
Colon, then slash, slash and then the IP address.
So in this case, we have used ten .1. 10.10.
So in your case, it might be something else.
But instead of this question, if a question comes where you have all been already given the user name,
for example, here we will use hyphen, small L and then the user name and then hyphen capital P, then
we can use the like password list.
So if you are using Hydra in the same directory where the password list is stored, then you don't have
to put the whole directory like you don't have to put home attacker desktop tool word list.
You can directly put password, dot txt or whatever the name of the file is, but if you are in some
other directory using hydra and your password is in some other directory, then you have to use this.
Then you will use the simply FTP and then the IP and then hit enter.
After that you will get the like username and password for FTP.
You can log in on FTP.
I have already told you how to log in and then you will use get flag dot txt to get the file.
So the next is an employee named John encrypted a sensitive legal contract and took a backup of it.
He then deleted the encrypted file but forgot to delete the original one.
So he has stored the document on the desktop of his office computer.
John approached you to remotely access his workplace computer, delete the file and provide the documents.
Document number that starts with F and.
And this is the number.
So the computer's name is server 2019 and the login credentials are username is John and password is
this.
So simply use RDP to log in.
Remember, you simply do the Nmap scan of the subnet and there you have to find that which IP is running
server 2019 like service.
And after you find out the IP, click on that IP and then do the RDP login.
You have been always given the username and password.
So the most important thing in practical exam is finding the IP address.
And you can do that by simply scanning the subnet.
So scanning the subnet is the first thing.
Then you can copy the results into a notepad or you can even export it to the notepad to the dot txt
file using a command which I have mentioned in the GitHub repository.
Then after you log in to the RDP, everything is simple.
You simply have to view the file in the desktop.
There you will have this number.
You have to directly put this thing inside the TXT file.
This number is written, so just skip f slash n and just copy this number and paste it in the answer
tab.
Question number 13 Is your Katie an ethical hacker working for a movie production company?
So while you were testing the website movie scope.com for vulnerabilities, you came across an SQL injection
vulnerability and the cookie information is stored in a TXT file in the document folder of the ethical
Hacker to machine use the SQL RDS attack method to capture the session link.
Determine the contact number of Katie associated with the website.
So first of all, let me tell you the difference between SQL injection attack and SQL RDS.
So the basic difference between both of these is SQL injection attack is where you manually do the attack
and SQL D triple is where you do the SQL injection attack using automated tool, for example, SQL map.
So they are indirectly telling you to do SQL to use SQL map to directly dump the database and get Katie's
number.
But I already mentioned in the SQL injection section that it is going to be a bit complicated if you
have not used SQL map and if you still want to use SQL map and you have been a pro player in the SQL
map, you have been using it for quite a while, then you can simply use the command which I have shown
in the GitHub repository to get the like to dump the database and get Katie's number.
But if you want to go to the easy method, which by which you can find Katie's number within seconds,
then use the method which I shown you in the SQL injection video where you simply bypass the authentication
using hyphen or not hyphen, using comma, inverted comma, or one equal to one, then hyphen hyphen
after bypassing the authentication, then go to view profile and then use using the vulnerability called
ID or simply change the number ID number and then you will find Katie's mobile number.
The next part of this.
So next question is as part of his job, Raven A.
Network security specialist was tasked with analyzing a packet capture file called Dos, or Pcap, which
was stored in the document folder of the ethical hacker machine.
So he was instructed to determine if any credentials associated with the website industry.com were recorded
in plaintext.
After examining the file, Raven discovered that the site traffic was traversing in plain text and found
a username and password record.
So you have to find out the credentials that were found in the captured file.
Simply watch the wireless section and if you have watched it, then you know how to solve it.
Just go to where the filter area is, then paste this method and hit.
Okay.
You will find the place where like you will find the credentials.
The next is an ethical hacker working for a movie production company.
You have been tasked with testing the website called Movie scope.com for vulnerabilities.
After conducting your test, you discover that the website is vulnerable to SQL injection attack.
So determine the type of Http method that poses the highest risks to the website.
So you can you can you decide to use the Owasp Zap tool.
This tool will help you identify the and exploit the SQL injection vulnerability to determine which
Http method poses the highest risk to the website.
Remember I already mentioned earlier that you will get two questions regarding the SQL injection.
Like regarding SQL injections, you will always get two questions.
So the first question was where we have to find Katie's phone number.
And the second question is this one I already mentioned in the SQL Zap video that how you can find out
the method that is get or post method.
So the answer here would be post method.
If you are still facing some doubt, then go and watch the video.
You will get everything cleared.
On number 16.
We have after scanning the network, you and ethical hacker find out that some host are alive.
Identify the number of hosts that are alive.
So this question should have been on number one, because at first, when we are scanning the whole
subnet, we will find out that how many hosts are alive.
So you don't need to do ESP or P or A because these scans, because these scans scans are aggressive
and they take a lot of time.
So simply use a hyphen Sion because Sion won't deep scan it simply it will tell if the host is alive
or not.
So after scanning the whole subnet within seconds you will get the answer that how many hosts are up,
whether it is two host 5 or 6 host seven hosts that are up, you will get the answer.
Then coming on to the next one, you are working as an ethical hacker in a company where an employee
has stolen trade secrets and encrypted them using Veracrypt.
So the Veracrypt volume file name called Secret is saved in the ethical hacker.
One machine.
The password to the file was discovered in one of the employees email during an investigation.
Your task is to decrypt the file using the password test and identify the secret code.
Contain it.
Simply go and watch the Veracrypt video.
Everything has been explained in detail.
Even I gave you a scenario question that how you can solve it.
The next is question number 18.
As an ethical hacker working with a bank.
Your task is to decrypt a cipher called Chris, ask for account or hex stored in a document folder of
the ethical hacker machine.
The file was encrypted by an attacker who stole a customer's account number from the bank database using
crypto.
So your goal is to determine the account number by decrypting the file.
And you can.
There was also a hint that is the use 14 as the key value under the key length.
So first of all, open crypto, you know how to do that.
Go on to here and then you will open this file that is CRI account number dot exe, which has been opened
here.
After that click on encrypt decrypt, go to symmetric mode and then click on arc4 because it is showing
that it is a arc4 encryption.
So when you click on Arc4 this pop up, fill up, this pop up will come up.
So the value would be here originally it would be zero zero.
So just change this to 14 because it is showing that the key value is 14, it can be 18, it can be
20, it can be 24 according to the question.
So whatever the value is, just put it here and then click on decrypt, you will get the value.
Simple.
19, an asset management company has just discovered that one of their stockbrokers has secretly obtained
sensitive account information using an application from the company.
The stockbroker has saved this information on the SD card of his Android mobile phone, and the company
fears that he might sell the information to their competitors.
So as an ethical hacker, you have been hired to retrieve the deed, retrieve and delete the file from
the stockbrokers mobile phone.
Provide the account number present in the file only.
Note that only numerical values should be provided in the answer field.
Simply watch the Hacking Android section where I have mentioned how to use ADB.
First you need to like there you won't be given another simulator nog simulator.
You will just simply have to scan the Nmap subnet.
After scanning that you have, you have to find out where five five, five five port is open, whichever
IPS.
5555 port is open.
That means that IP is the android like that contains the Android machine.
So connect use ADB connect and that the particular IP address then colon and then the port 5555 after
you are connected type ADB shell and then you browse into the SD card and then simply read the file
which contains the secret information.
Then the last question.
A vicious attacker has exploited a vulnerability in a machine on a corporate network and encoded the
IP address of the target machine.
The encoded file was discovered by a vigilant database administrator during a routine audit of the database.
The encoded data is located in the file called Encoded Data dot txt On the desktop of the Ethical Hacker
machine, your task as an ethical hacker is to decode the file, extract the IP address of the compromised
machine.
The security of the entire corporate network depends on your success, so hint as a hint, the password
to retrieve that file is called shadow one, two, three.
Go and watch the text encoder video which I have mentioned in the cryptography section.
Simply watch it there.
I have explained how to solve this question and it is very simple.
So all in all, the exam is completed and you have scored 20 out of 20.
So what I wanted to say is and these are exactly the questions that come in exam No, I'm not saying
that these are 100 like these are.
Questions that might come.
Instead, I'm saying these are the questions.
That will definitely come.
So these 20 types of questions are always in the practical exam, and I bet that these are the questions
which will come in your exam too.
There might be some changes, like they will change the IP address or they might change the person's
name, but these type of scenario questions always come in the exam.
So if you have solved these 20 questions, that means you are going to ace the exam.
So be confident in yourself and all the best for your exam.