All language subtitles for Do Not Download Free Videos! Watch How Hackers Access Your Computer With VLC Exploit (Cybersecurity)

hi and welcome back to another episode

on how to hack cell today we're gonna

discuss about using executable against

the practical application in this case

to be specific it's on VLC so there are

many common bar ability exposure that

allow us to actually take advantage of

those executables launching into an

application for example on an operating

system and for today's tutorial we are

going to target Windows 10 and once you

have the user clicking under the foul

executing it on VLC and then you have

the operating system on Windows 10

immediately to begin shell to Cal Linux

and you can do a lot more things from

there you are able to launch different

kind of attacks you are able to look for

sensitive data download those

information upload into an existing

server as well and many other different

things once you have access into its

shell so without further ado let us kick

start on today's tutorial

so on a write on the screen I have kala

Linux running and on the Left Sun screen

I have a Windows 10 64 bit running so

like I mentioned earlier today's

tutorial is to target Windows 10 machine

which has a VLC media player so we're

gonna go ahead and launch a terminal on

Kali Linux solve here we can zoom in a

little make the font size a little

bigger so you can see it clearly and we

can go in and enter ifconfig so that we

know the IP address of the attacking

machine so in this case we have the

attacking machine running on the IP

address of 1 I 2 1 6 8 1 1 0 so we can

go ahead and launch MSF console so that

we can find out where is the exploit and

how can we exploit it fully into the

target machine so once you're launching

MSF console while we're doing that and

we're starting up the Metasploit

framework console

let's open up Internet Explorer so on

the Internet Explorer we're gonna

download a file later on so here you can

search for VLC so we can look at all the

vulnerabilities that is associated with

VLC software so in this case we are

going to use number tree which is a

exploit windows file format MKV so it's

a MKV use after freeze and what we can

do right now is that we have X we have

identified the exploit we will be using

so we can go ahead and enter use exploit

Windows file format VLC mkb so this is

exactly the naming that we have over

here in order to utilize the exploit so

we can enter show options to see what

are the parameters that we have to

access into so we can set the alehouse

which is the attacking machine as 1 I 2

1 6 8 . 1.10 so once you've done that

you can again do a double check to see

whether you go to Al host right whether

you go to L port right so do take note

of these two items and one more thing I

wanted to really pay attention to is the

payload option so in this case you'll be

using a Windows x64 shell reverse TCP so

that will give us a reverse connection

back into the windows

machine so essentially allowing us to

bypass any standard windows firewall in

the environment so moving forward what

we can do is we can actually go ahead

and exploit to generate default so once

you hit exploit it would actually

generate the file over here

so what we can see is we have the files

stored on route MSF for local followed

by part 1 and part 2 so we're gonna go

ahead and open the novel terminal and

then likewise we are going to go

directly into the folder so we go to

route dot MSF dot EMS 4 and then we can

do LS we can go to the local again and

then we do LS and we can see all the

files that we have generated so in my

case I've generated a number of files

again it could be KB and and of course

we're gonna showcase on uwt as well and

we can do LS dash L you realize that the

pot one-fall is significantly larger

than the pot to fall and if we see over

here we actually have more than a

gigabyte of file size so you've gotta

take awhile for you or for the victim

machine to download those files so it's

really important that you could use some

kind of compression technology so you

could copy those false so into a web

server and host it over there so what

i've done is i've actually copied the

very initial file that i generated

earlier so once we go into the VAR WCML

we can do LS dash L so here we can see

we have two false that are available

that we have generated earlier and once

you have that you can actually check

your Apache server status so here we can

see then we have the server it's

disabled and of course we want to check

some configurations before we actually

initiate the Apache server so what you

can do is you can actually do a cat etc'

followed by Apache 2 followed by pasar

configuration so here we see that we

have the webserver listening on 8001

so once we have the necessary

information we can go ahead and start

the service so service Apache - followed

by start so this will start up the

Apache web server and once you have it

running you want to do a double check to

make sure that you have the web service

running

so here we see that the server is

running and we are hosting those false

so what we can do is we can go back into

the Metasploit and look at different

ways for us to stop the listener so what

you can do is go ahead and enter exploit

multi handler so this would start the

multi handler and then we have the set

of payload so remember the payload then

we were discussing about that we have to

take note it's a Windows x64 followed by

shell followed by reverse TCP so once we

have said that we got to look at the

options so we click show options so in

this case we have to fill in the elf

host and we already have the L pot

specified which is the exact same as the

payload that we made earlier so go ahead

and enter the L holes of one eighty to

one sixty eight dot one dot one zero so

this is the attacking machine which is

the IP address of the Kali Linux so now

with this in mind we can go ahead and

enter exploit so that we have our

listener so we have the reverse TCP

Handler running right now on port four

four four four so we can go ahead and go

into the Windows 10 operating system and

you can go to 192 168 1 or 1 0 followed

by the port of 8001 so over here you can

go to the eww teapot one it so it's part

two you can compress them into a single

file and then from there on

once it is uncompressed the user can

access it and immediately will see all

those details so moving forward we can

actually go into dolls page we can open

up the folder so I already have the file

downloaded so it just it will take a

while for the file to download

completely into the target machine and

once you have the file the user will

open it with a VLC media player so once

you click that no I'm not gonna send a

report so we can open up the fall we see

we have the eww teapot 1 MK be running

so in this case if you see on the right

side we actually have two bytes and over

sending the stage come on she'll open

and over here we have a shell directly

into the system so you reenter for

example a simple command like dir we

would see all of the files available

within the system so

we can see the dot dot city dot dot and

then we can go into of course the

desktop which is a neighbor that we are

really interested in so if I do a dir we

can see there in two users to do a dir

again we can see the into the user which

is the current user on the desktop right

now so if I was to minimize everything

so here we have the desktop running and

then we can do a dir and then this time

around we go to go access into the

desktop and then we're gonna go further

into our attack attempt so over here

we're really gain access into the

environment and what we can do is we can

actually very quickly deal with echo you

have been hacked and then followed by

this and then we will pump it out into a

file called hat dot txt so once you do

that on the left side on the left side

screen you can see that we have a hacked

ext available already created because of

the command coming from the right side

so if you enter hang txt this would open

up the file and then we realize that the

system has been completely compromised

and from here we recognize that we have

already been hacked so there you're

saying it how quickly we could actually

gain access in the system once the user

downloads file executed file will be

able to gain direct access into the

system to a vulnerability within the

application and in this case the

tutorial was on Windows 10 running on a

VLC application so likewise that you

have seen from many other different

tutorials it could be from Mac or Excel

that I mentioned earlier or from PDF

files the attack vectors are plenty and

there many different ways for you to

hijack the system including phishing

email so there are really many many ways

of you gaining access in the enterprise

so the next question I have for you for

you to think back after today's tutorial

is what can you do as an enterprise to

defend against those different kind of

cyber threats if it's a phishing email

it's a compromise directly into your

service it's a compromise on your

end-user machines which may have

critical data residing there as well so

with so many different kind of attack

vectors how do you build a layered

defense against many of this different

potential areas for

potential risk that could come into your

critical data so there is something for

your thing about and I hope you learned

something valuable today and today's

tutorial and if you like what you've

just watched feel free to subscribe and

leave a comment below so that I can do

whatever I could to respond to any of

your questions and thank you so much for

watching again