All right, so here we are, in fact, the box VIP edition, if you haven't signed up for the VIP plan,
make sure you go ahead and do that now.
Or if you're like me and you just like to go through all the videos first and then go back and sign
up.
That's cool, too.
And I know how you feel.
Anyway, once you sign up for VIP logging, I'm going to show you now how you can get started.
So in the past, and this is relatively new in the past, you would have to go to VMware, right?
So let me show you something.
What we used to have to do.
I go to VMware workstation.
Right?
Actually, first before that, I'd have to go to my colleague and, you know, go to downloads and then
download this, install the right way for this three point seven gigabyte file to download.
And then I'd have to load it into the anywhere.
Right now, let's see if we can look at the pain right there up in the VMware, and then you have to
like install it, you know, make sure your system's beefy enough to handle all the system requirements.
I mean, it was a huge pain in the butt no more.
This is really, really awesome.
So you can actually get started with zero on prem infrastructure.
You don't need to install anything on your computer.
It's all done through the Web.
Let me show you what I mean.
You are going to hack the box upper right corner.
You click connection settings, go here and you have two options.
Open VPN.
That's the oggi way of doing things like the original gangster way of connecting to a machine.
This is the new way poun box.
All right.
Let me show you how awesome this is.
Po box.
And you can see right now my instance is offline.
So let me go out connect first.
You need to select a location this close to you.
So I am in the United States and you can see I have twenty five milliseconds of latency, which is not
too bad.
If it's red that means it's kind of kind of slow.
I'm going to connect to the Indian servers in India because, yeah, I'm going to have some delays.
Nine states is looking good.
And then what I do is I click the VPN access.
I'm not on a free lap.
I'm on the VIP lap.
The free lap will only get you the most current retired machines.
I think it's like the last two, but the VIP will give you all the retired machines.
OK, so then we go out and select the server and I go a VIP here.
There's a lot of them.
Let's go and click.
Click the first one.
The reason I pause there is because I wasn't sure that little blue number to the right of each, each
server they met like, you know, 11, 11, 12.
I'm not really sure what that means.
If anybody knows, please, you know, let me know in the in the comments or the chat.
But anyway, we've got what we need and we could start talking about post-box.
I can't even talk straight because I'm so excited about this.
So look what happens.
You can see it's actually starting up the instance.
Right.
And it's about to get bonkers.
Guys, wait a few seconds and watch lowed.
That is amazing, you can actually see a thumbnail view of pomoc boxier, took just a few seconds to
set up right now and I can do is I can scroll down.
I can either.
This is cool.
So I can actually open up as a stage terminal where I can just open the desktop.
If I click open and desktop open, the new window at the box is starting bam in my browser.
I now have access to everything I need.
Right, so I can go up here.
I can run the Linux version of Paracha, which is pretty badass.
I can launch bash, I can watch the blind text.
Everything you need is here, almost everything.
And I'll tell you why I said almost in a moment.
But I want you to see, you know, here I am, right.
I've got my IP address.
You know, if I do Cyro update DB, I can update the local DB and then I can start searching for stuff.
I can also just start browsing, browsing around.
But I've got bloodhound.
I've got all the tools I could possibly need to do my Pentax work.
I mean, look at this.
I mean, this is crazy.
Some of you guys are probably more familiar with callisthenics.
I am too.
I really like Kalay.
But this is kind of you know, this is an emerging contesting OS that I think many people are starting
to move to.
Just go and close this out and let me show you something cool here.
So if I search so I say locate one piece.
This is one of the privilege escalation tools we're going to use in this course.
If I say locate our up, that did not work.
Let's see.
Locate power up top.
Yes, one zero.
Locate power up that one.
Where is power?
I know power up is installed in this box because I just looked at it a moment ago, I think it's actually
in power show mafia.
OK, Mafia.
Interesting.
So one thing we could do to find the things that are missing is we can just go to, you know, Firefox's.
We can open up a browser just like a, you know, just like at your own machine.
And we can just go and start looking for stuff so I can go to, like, you know, Google dot com and
I can search for power up.
I need to specify GitHub or I'm going to get a bunch of stuff that I don't really care about.
And of course, I want the latest version.
So I go to power up here and it's in this PowerPoint.
That's what this PowerPoint pseudo located power exploits.
There we go.
And now if I wrap this up, I don't see it, but where is it?
Privacy.
Oh, that's why.
So what do you have to do is do a case insensitive search and it works.
That's what the dashi does.
And it was literally looking for a lowercase P, and that's why I didn't find it.
I've got power up here and if guys don't believe me, I can just.
Right click that.
Got a copy cat paste that puppy in there and you can see there it is.
There's a script right there that's power up.
So we have almost everything we need.
The only two scripts we need now are Watson and Seppelt.
So these scripts aren't actually included because you have to compile it from source.
So if I go Google, Watson, GitHub.
Yes, Watson, see, what you actually get is a SLN and this is a solution file and this is made for
Visual Studio, so when we get to this portion of the course, I'll show you how you can compile this
from source and the same for seatbelt.
As a solution.
So we're going to go from source and generally it's a good idea to do that.
You know, you can try to look for like a prerelease.
There's no releases published for seatbelt and there's none for and it might be one for Watson.
Looks like there is.
You can download it, but usually you want to compile it yourself that way, you know, you're not compiling
malware because you can actually look at the code yourself.
That's really all I want to show you in this lesson, guys.
You know, in the next lecture, we are actually going to get into our first our first purpose, escalation.
So I'm going to show you how you can start up your VM and we're going to start escalating our privileges
using clear text credentials, which sounds kind of lame and may not be the most exciting, but it happens
all the time in real life.
Pinto's engagements.
So I will see you guys in the next lecture.