-: Now you have enough information 2 2
to go ahead and try to gain access 3 3
to other systems. 4 4
To computers, servers, 5 5
web servers and stuff like that. 6 6
And in this section 7 7
we're gonna be talking about 8 8
gaining access to computer devices. 9 9
And what I mean by computer devices 10 10
is anything 11 11
and the reason behind this, 12 12
I wanna get this through, 13 13
I wanna get this idea through, 14 14
is that any electronic device you see 15 15
is a computer. 16 16
So a phone, a TV, 17 17
a laptop, a web server, 18 18
a website 19 19
a network, a router, 20 20
all of these things are computers. 21 21
All of them have an operating system 22 22
and they have programs installed 23 23
on these operating systems. 24 24
And usually, 25 25
in most cases, 26 26
these computers are used by a user. 27 27
So you have an operating system, 28 28
they have programs installed 29 29
on that operating system 30 30
and they have a user 31 31
who uses and configures this system. 32 32
So, I'm gonna be talking about 33 33
how you gain access to computers 34 34
in this example 35 35
and actual personal computers 36 36
so the name that people call it usually. 37 37
A computer, 38 38
so it's gonna be, 39 39
we're gonna have a target 40 40
of a Windows device 41 41
and we're gonna have a target 42 42
of a Linux device. 43 43
But the concept is always the same. 44 44
Getting access to computer devices 45 45
is always the same. 46 46
So you can apply the same concepts 47 47
if you are targeting a phone, 48 48
if you are targeting a tablet, 49 49
if you're targeting a web server 50 50
and we will be targeting 51 51
web servers as well. 52 52
But I will be talking about it 53 53
just like a normal computer. 54 54
This is very important to understand. 55 55
Every device you see 56 56
is a computer 57 57
and it works just like your personal computer. 58 58
So I can set up a web server 59 59
on my computer. 60 60
I can make it look like a website 61 61
and make it act as a website, 62 62
I can make it act as a TV 63 63
and I can make it act as anything I want 64 64
and literally TV's and all these things 65 65
are just simpler computers 66 66
with less complicated hardware in them. 67 67
So, we're gonna be talking about 68 68
attacking these devices 69 69
from two main parts 70 70
or from two main sides. 71 71
The first approach 72 72
that we're going to use 73 73
is the server side. 74 74
So in this side 75 75
it doesn't require any user interaction. 76 76
We're gonna have a computer 77 77
and we're gonna see how we can 78 78
gain access to that computer 79 79
without the need 80 80
for the user to do anything. 81 81
For the user who uses that computer 82 82
to do anything. 83 83
This mostly applies to web servers 84 84
and applications 85 85
and devices 86 86
that don't get used much by people. 87 87
So people basically configure them 88 88
and then they run automatically. 89 89
So, all we have is gonna be an IP address 90 90
and we're gonna see how we can test 91 91
the security 92 92
and gain access to that computer 93 93
based on that IP. 94 94
So, our main way of getting in 95 95
is gonna be the operating system 96 96
that that runs 97 97
and the applications installed 98 98
on that system. 99 99
The second approach that we're gonna try 100 100
is the client side attacks. 101 101
So this approach will require 102 102
the client or the person 103 103
who uses that computer 104 104
to do something. 105 105
To do something 106 106
that something could be 107 107
a number of things. 108 108
It could be installing an update, 109 109
it could be opening a picture, 110 110
it could be opening a Trojan, 111 111
so we're gonna learn 112 112
how to create a Trojan, 113 113
how to create Backdoors, 114 114
how to use social engineering 115 115
to make the target person 116 116
do something 117 117
and when they do that action, 118 118
we will gain access to their computer. 119 119
Information gatherings 120 120
can be crucial in this case 121 121
because we actually need to know 122 122
the person that we're targeting. 123 123
After all of that, 124 124
I'm gonna talk about 125 125
the post exploitation. 126 126
So what you could do 127 127
after you gain access to this computer, 128 128
regardless of the method 129 129
that you gained access to it. 130 130
So you could have used a server side exploit, 131 131
you could have used 132 132
a client side exploit 133 133
or you could have 134 134
just got physical access. 135 135
The person left their desk 136 136
and you got in. 137 137
So, we're gonna see how you could, 138 138
what can you do 139 139
once you have access to your target. 140 140
How you could further exploit that target 141 141
and increase your privileges 142 142
or target other computers in the same place.