All right let's get to exploiting.
So the first exploit we're going to learn about are called Colonel exploits.
So here is a quick overview of what a colonel exploit is.
So what is a colonel.
Well a colonel is a computer program that controls everything in the system.
And if you see my source of the top.
Am I quoting wikipedia.
Yes I am.
I'm that confident in Wikipedia.
So it is a computer program.
OK.
And it facilitates the interactions between hardware and software components that you see here in the
little graph.
We have the colonel which lives in between the applications and it feeds interaction between the CPA
memory devices.
It is a translator.
OK.
So think about it as a translator.
Look at this next picture.
This is more related to Windows so you can see here is the Colonel.
Here is the user interaction.
Here's the Windows API etc..
We have our operating system colonel here all the way down to the hardware.
So the kernel itself is converting these input output requests from software OK into instruction sets.
So it's putting them into these instruction sets and it's interacting in between these two objects.
OK.
So it's important that it's an important feature right of.
Of the operating system.
It is the core of the operating system.
And at the core we can exploit so that's what we're gonna be taking advantage of is an exploitation
of a kernel.
Now when you recall we were looking at CIS info and CIS info was telling us Hey what's the build of
this operating system.
What are we on what version what operating system are we on etc..
We want to know that because there are certain kernel exploits related to specific builds.
So whatever the build was at that time there are kernel exploits available for it to give you an idea
as to how many kernel exploits there have been.
There is a get hub out there and I will provide this as well as a resource that's called Windows kernel
exploits hand.
Let me just kind of scroll through all right so you can see that we have 2017 2018 but it starts with
0 3 all the way down to M.S. 17 in 0 1 0 was one of the very very big ones.
So it has all the links here for all the different kernel exploits.
There's a lot right.
There's absolutely a lie.
And if we take advantage of this if we own the kernel we own the system.
So that's what we're trying to do.
If a regular user can perform this kernel exploit and get successfully get the exploit while then guess
what we are now the system.
And that's what's going to happen here.
So we're going to take advantage of a well known kernel exploit and we're going to utilize that to elevate
our privileges on the system.
So in the next video we'll take a look at the Metis play method and then after that we'll do the manual
method.
So I'll catch you over in the next video.