Vulnerable to exploitation, using desperate.
Now we'll discover and prove that this discovers probabilities in the previous laps are exploitable
and will exploit multiple types of probabilities to reach the same goal, full control on target machine.
So let's go back to the.
Report generated by NASA's.
And we have here several possibilities.
To.
Let's go.
See?
Which detail, of course, the the report.
So it offers some information, some description about the point where our ability.
And also, sometimes it includes.
And I need that you can research more about on this one with CNN's Juan.
So a veritable.
It gives you more information.
And it also offers KVI number that we already talked about in.
The previous leaders.
So here you can search even more about the probability and you can search for some exploits based on
this idea.
So you can find more information about this.
It says this network exploitable.
You don't require any authentication in order to exploit this.
And so on, and sometimes it offers information if there is an exploit for this or not, and for this
it does.
Let's see it, it's shown here, otherwise we will one only find it so what we need is the vid.
Then we go to exploit de.
Dr. Carl.
And we search.
For the Heidi.
And there is an exploit available, it will be shown here.
Yes, there is.
And here it is, and we have a script that we can use in order to.
To get control over it, and it comes with some information of how to be used and forty six point,
you have to download the SS keys.
And to try them, actually, what this variability means is that that it uses some wiki's.
And this are that you have to download to is actually some charity case that you will try.
Like this, using the script, using the keys that you have downloaded on the target machine, the user
and the port.
In this age range and threats.
OK, this will take a while, so let's go to another.
Winnability you have you can try this one by your own.
Let's go to another of our ability to see.
Watch where I'm with you here.
We actually have a lot of variabilities, but.
Let's choose another one.
I remember that it was on the.
Server discovered, let's go back to Nessus can.
Target.
The.
Science teacher.
So it says, if Tippie.
And it use the machine tools free for.
To.
Let's find a I'm ready for this one.
Can we we we can use Google or we can use.
It's going to be directly.
It's practiced a little bit.
What we already have learned.
And, Paula, there is an exploit for this FTB server.
And actually, there are few.
Let's go with this one.
And let's let's exploit this time.
And see what happens.
OK, this is the.
The true that we will use these can be accessed directly from metastable.
So.
It's clear this and let's open it and use it, as you already know from the previous video.
It will take a little bit to load all the plugins.
You have a step by step.
Description of how to exploit.
The specific probability on a test.
But he can just try to exploit another victim as well as you as you saw.
The one from S.H., OK, it's clear this.
And let's make it a little bigger, so let's search for an exploit.
Or the.
Databases not connected problem.
Do take a little bit longer, but he's all right.
Let's make.
OK, it says it found.
Exploit.
Ford VPP version two point three point four and says better command is exactly what we found on dbu.
So let's use it.
Use.
This one.
Let's show some info.
So.
Options for now.
Let's hit the remote cost.
He's one seven to one.
Six was six on 30.
Then you remember the remote 40 feet, 21.
Now, let's show what Veloz.
Are compatible.
And there is only one so sick payload.
The unique scene there at.
Share options again to see if he's OK.
It won't cost.
Now, let's expert.
Ummed.
Seems we have a shared constitution, one opens.
And it doesn't show anything but.
We can just make those comments, so if, for instance, and we see we are on the target machine and
we are locked down, looked on as a as so very simple because.
It was a public accessible exploit and it worked like nice.
So let's find out more information about this machine.
What version of Linux does it run?
Let's see some friends here, maybe we can see the.
Shardul farms.
Where the.
The password or our store?
Or.
This file can see the users and we can create a new user here.
But it's not very interactive, this this show, so we can just use this to download some Beşiktaş and
use another friend or so to.
Later.
Connect to this target machine, or we can just.
Change the password and into a secich.
But this is enough for for this point.