Original subtitles

Welcome to the section on scanning an enumeration.

So in this first episode we're going to focus on installing a vulnerable VM in that vulnerable VM is

called the key objects.

So I am on the Google machines.

I am here not in a VM.

This is on my windows machine.

So we're going to install a second VM and we're going to run Cally and the secondary VM together.

So go ahead and go to Google and I want you just to search for CAP tricks.

Level one should appear and we're looking for Volm hub right here at the top so Von hub is a great resource.

If we go to the home page really quick and we take a peek you can see that ball and hub just has a bunch

of different machines in here and these are all vulnerable machines.

You can actually download these and you can see the different levels on them.

Beginner to intermediate what kind of flags are available etc..

So it's really nice because every machine has a vulnerability and it's kind of like a puzzle you know

you want to want to download it.

You want to run it and try to break into it.

So these are really good and they have a lot of different practice ones.

There's good lists out there.

If you're planning on taking something like the OCP there's a list out there by a guy named Apache that

has OSTP to vulnerable black boxes and we can just google that as well.

Everything's on Google guys.

So we could say something like Von hub OSTP boxes something like that and batches first one right here

is this and you could see Catholics Level one is actually on the list.

So we are in the beginner friendly.

We're going to do a walkthrough first of this box and then we'll walk through some more machines and

just give you that repetition in and it will get better and better as we go.

So back to the story at hand.

We're going to be doing is we're going to be downloading this guy and then running it.

So if you see right here there is a download button or to go ahead and just click that download button

and click the right one.

It's going to have an option for us to directly download a mirror download and then a magnet download

if you are a torrent user.

So I'm going to click on this and access denied okay I'll click on the mirror.

This is why we have a mirror and then I'm going to hit save down here and go ahead and download this

and then meet me with your VM where open open a secondary VM where when yours is done.

So go ahead and pause and then come back.

All right.

So at this point we should have this VM we're running here and in the background.

I also have a secondary VM where so when I say secondary I've got Cally running here in the back.

Can see it and then I also have this VM workstation right here.

So what we also need to do is we need to locate the newly downloaded file and that is going to be a

rar file.

So go ahead and find that.

So I use a tool called seven zip.

You're more than welcome to use something like when RAR or whatever to open these.

And then I'm just going to extract this where I want it.

So go ahead and extract.

I'm just going to drag and drop it right now to the folder I'm putting it in.

And we should be good to go there.

So from that point once you're all extracted and pause if you need to go ahead and close out of your

seven zip here and then you're just going to go ahead and select open a virtual machine so it's like

that navigate to the folder that has key app tricks in it here.

Minus in my downloads folder I'm going to go ahead and click on key optics and that's going to set the

machine for us here.

And then what we're going to do is we're going to edit the machine settings and make sure that everything

is correct.

So we're going to give it a net setting instead of a bridge setting here and we can look at the memory.

Sixty four megabytes.

That's a little low.

I'm going to go ahead just give it a little bit more.

I'm going to give it like 256.

You don't need a lot for this because all we're doing is running it in the background.

But we do want to give it a little bit.

Just so I kind of boots.

Kind of quick.

So we'll go ahead and hit ok on that and now there's one more thing that we want to do.

I'm going to drag this over.

Go ahead and open up your folder with your key objects.

So it should look something like this.

We have this file folder in here we've got some configurations.

We've got the actual VM sitting right here.

There is this virtual machine configuration file here.

We're going to go ahead and just right click on that and select edit.

Now you can open with a you can choose another app and hit notepad.

If you don't have something like let's just go through this together we'll use Notepad because that's

very common.

So go ahead and use Notepad and say OK I'm going to drag it over and then all we're going to do is hit

control and F together and all we're going to do is search for bridged.

Now we're gonna go ahead and take the match case off and just hit find next and here we see under either

net zero network name equals bridge.

We're going to actually just go ahead and change that to net and they're going to head save and then

we're gonna come back into our machine.

I'm going to go ahead and just power it on and go ahead and select.

I copied it and now this I'll boot up.

It'll just take a minute here and then we should be brought to a screen where we are successfully loaded.

And another note is if you click in the machine you're going to notice that you might not be able to

move your mouse around and moving the mouse.

Now it's not working.

All you gotta do is hit control and ult together as it says to return your computer and then you come

back.

So if you ever have that issue control it will get you back out of that mode.

So here we go.

We are now at this screen is as welcome to capture it's level 1 penetration and assessment environment.

And then it gives us a log in prompt.

So from here we're actually not going to try to attack the log in.

We're going to take this off line and or we're going to minimize this.

I should say we're going to log into our Kelly Linux machine and we're gonna try to attack it.

So first step is we're going to scan it do a little bit of enumeration and then we'll do some attacking

and kind of go from there.

So that's it from this video.

Go ahead and minimize.

Log into your Kelly machine and then I will catch you over in the next video where we start talking

about and map.