Original subtitles

Now on a part two hour scan results are done and we can tell because you've got a nice checkmark here

that says complete.

So we're going to click into our scan results and looking at the overview we can see here that we've

got five critical 38 high fifty nine mediums ten loaves and sixty seven informational so we're gonna

click on the vulnerabilities here and let me make this bigger.

So we're gonna do is we're gonna take a peek at this and this new version of NASA's actually starts

grouping these together.

Let's go ahead and hit settings and disabled groups.

And that'll show us by severity.

So look what's coming back up Open SSL unsupported check it out.

Zero point nine point six b one point one point zero Id say according to banner the motor is running

Open SSL and it doesn't tell us much about it.

We'd actually have to do a little bit of research click into this.

See why it's such a bad thing.

But this is absolutely out of date.

OK so if we're making a screenshot here we're going to say hey this is out of date.

We see this install version.

It's recommended to patch to this version.

So if you're taking notes you can go ahead and add that into your notes for your vulnerabilities.

This is insufficient patching come back through here.

It says even open SSA it has remote privilege escalation.

It's got remote overflows so it looks like you could possibly perform an overflow against as the.

So if you did some research and you were able to find a vulnerability with that that's cool and we come

through here and you see the Apache has denial service cross-eyed scripting again Apache looks like

insufficient patching and mod SSL shows up Open SSL shows up and I mean we just got vulnerability after

vulnerability so we would write a lot of these up and depending on the assessment and how the assessment

was going depends on the severity that we're going to write up now if we find remote code execution

we get a lot of access to a client and a client just lights up like a Christmas tree when it comes time

to reviewing your scans then a lot of these you know we might report on a lot of these and we might

not report on a lot of lows or a lot of the mediums but if we're in the opposite situation where you

know we aren't finding a lot but there's still stuff to report then we might report on like Hey Open

SSL is you know it's out of you know it's out of date and then we go to the next page and we find a

low and maybe there's like OK there's there's something in here that's related to SSL till s this one

is an unsupported cipher we might report that as well just depending on the potential in how many vulnerabilities

that there actually are.

So as of right now it looks like this box is pretty critical but what we also do as penetration testers

is we take all the results in front of us and what we'll do is we'll come in and we'll download this

nexus file we'll take that nexus file and there's tools out there to convert a nexus file into an Excel

document and it makes it nice and pretty and we'll hand it over to the client as well.

And in the report it'll say hey look we've covered some of the vulnerabilities.

There's no way for us to touch all of them because this is a time assessment we focused on the low hanging

fruit.

We focus on what we could.

So please do go look at your NSA scan results in all the information that we provide to you because

it's super important.

So again if we have a client like this where we're going to have remote code execution we're gonna have

a lot of vulnerabilities then these things just start to stack up.

And this is what an essence result looks like.

You can click into these you can get more information and possibly even you know details on how to exploit

it and how to solve it as well.

So there's useful links in here.

A lot of the times in this you know they give you information but you should always go out and verify

never trust your vulnerability scanner just because it says hey we detected it.

You should go out and look and find it just like we had that screenshot from before with the Apache

service version.

We know this exists.

We wouldn't provide a screenshot of the output of nexus we would go provide a screenshot that says hey

we actually proved that we know it's there and you're out of date.

So hopefully that gives you an idea of what we're doing with Nexus and why we're using it and how it

could be an advantage to us.

Sometimes we're so overwhelmed with everything around us that we might miss some vulnerabilities and

it's nice to just have a scanner detect a lot of vulnerabilities just for us and it gives us something

to look through something to verify.

Double check etc. It's just an extra layer of vulnerability assessment for us.

It's a friend in the game.

So I own two programs as a pen tester.

Two programs that I pay for NASA's license is one burp sweet Pro is the other.

This one is twenty four one hundred dollars a month.

Very expensive.

Absolutely worth it.

Pro is 400 dollars.

We'll get into that later but absolutely worth it as well.

So that's it for this section now we're going to move on to exploitation.

Really start to get into the fun stuff.

Talk about some different exploitation techniques you're going to see and then we'll do a bunch of box

walkthrough and get it into exploit development.

And it's about to get so fun.

This is the fun part of the course.

Up until this point it's just been scanning and admiration learning about the process.

And it's been nine hours of course material so far almost eight hours of course material just to get

to this point.

That's how important I think that information gathering and scanning enumeration are.

Along with the foundations and the materials you need to know all that before you can just start exploding

machines.

So now we're there.

Congratulations.

Pat yourself on the back.

We're almost halfway through the exploitation part of this course.

So once we get to the middle of the course Capstone I think it would be really fun and exciting.

So that's it.

End of spiel.

I'll see over in the next section when we start learning.

Exploitation.