This content is an introductory segment of a comprehensive ethical hacking course, focusing on foundational knowledge and practical setup for aspiring penetration testers. It covers essential cybersecurity concepts, tool installation, and basic Linux commands necessary for the course.
Mind Map
Expand करने के लिए click करें
पूरा interactive mind map देखने के लिए click करें
hello and welcome to this 15 hour
edition of the Practical ethical hacking
course my name is Heath Adams and I'm
going to be your instructor for the
entirety of this course okay quick edit
so you might be looking at the YouTube
video and seeing that it's only seven
plus hours that is because YouTube
recently implemented a rule that we can
no longer have videos over 12 hours so I
had to split this into two parts I had
to add this edit in and go back and
re-render everything so this is
officially part one and we'll go through
part one and then I'll have a link in
the description below for part two so
without further Ado let's Jump Right In
A really quick who am I again my name is
Heath Adams and I am the CEO of TCM
security we are a cyber security
consulting firm and an educational
institution on a day-to-day basis we
primarily focus on what's called ethical
hacking that is where companies hire us
to try to hack into them to find
vulnerabilities and let them know of any
security issues they may have before the
bad people find those on their own that
could be breaking into a network a web
application wireless network mobile
applications thick client applications
Etc I can even be breaking into a
building which is called physical pen
testing there's a lot of different types
of hacking out there we're going to
cover quite a bit of that in this course
now hacking is such an interesting field
because you don't have to necessarily
come from an I.T background I'm actually
a former accountant and I just fell in
love with hacking and I know people from
all different walks of life we have
somebody that works for us that used to
be a mayor I've seen doctors I've seen
pharmacists I've seen all different
kinds of weird backgrounds come into
ethical hacking so if you're watching
this and you really don't have an I.T
background a formal one that's okay as
long as you have some basic computer
knowledge some basic networking
knowledge that's all you really need to
succeed in this course we're going to
hold your hand the entire way through
and make sure that you get and
understand everything that's presented
in front of you in terms of the
qualifications I've listed my hacker
certifications that's not all the
certifications but those are the ones
that are relevant maybe make me an
expert whatever I've also listed my
social media if you want to follow me on
LinkedIn or follow the company on
Twitter follow me on YouTube I would
love if you just hit subscribe right now
before we even get started or you want
to wait till the end that's perfectly
fine as well we're making our way to a
million subscribers and you could be a
part of that and I would absolutely love
it if you did
we also have some sites we have our
Consulting site which is just
tcm-tech.com we've got the academy which
I'll show you here in a second we also
have certifications site now before we
dive into things you might say to
yourself this course seems familiar and
that's because it might be last year we
released a ethical hacking course in 12
hours this year it's up to 15 hours last
year that total of you has got 3 million
views in 11 months which is great it
hasn't even been a full year yet and we
taught quite a bit of lessons in here
you can see all the different lessons we
taught in here so you might say hey
what's the difference between this
12-hour course and the 15-hour course
while there's quite a few differences
three hours to be exact but even with
the three hours of time difference we
went through a lot of this in for
example in the Kali Linux section that's
been completely redone the python
section has been completely redone so a
lot of these videos and tools and ideas
have been brought in into 2023
methodologies so not only are there
three hours more but a lot of the videos
and content have been recreated for 2023
specifically to make sure that this is
up to date and fresh so you're getting a
brand new courses this is the latest and greatest
greatest
now this course is actually an extension
of a 25 hour it's pretty close to 27
hours now of materials that is on our
TCM Security Academy website and this is
the only time I'm going to try to sell
you on anything throughout the entirety
of this 15 hours so I just ask for one
minute of your time
this course takes the first half the 15
hours takes the first half of what's in
here if we scroll down to the curriculum
we actually have all the first half here
you'll see this if you actually came to
the website it's the exact same thing
you're getting in this course this goes
all the way through the Capstone and the
buffer overflows here and that is a
great stopping point we'll go to the
Capstone we'll go through it it's a
great Midway point to test your skills
if you get through the Midway point and
you say hey I really like this I want to
get the rest of the course we have even
more stuff in here we have active
directory which is one of my favorite
things to pen test against and I would
say it's the best part of the entire
course we teach that we cover quite a
bit of this all this is on active
directory right here we cover more post
exploitation we cover web app pen
testing application pen testing we get
into a little bit of Wireless testing
and legal documents and all that fun
stuff so the 15 hours that's here it's a
great great resource it gets you started
if you love it you love our instruction
you want more this course is 29.99 all
of our courses in fact on the academy if
we go over here they're all 29.99 so if
you're interested we have an all access
pass that gives you access to everything
we've got courses on Linux python we've
got courses on privilege escalation osin
external pen testing all different kinds
of stuff in here if you're interested in
that I just encourage you to check out
the website you don't have to buy
anything this is completely 100 free if
you just want to stick with the 15 hours
last but not least this course does lead
to what is a certification we have a
certification called the pmpt it's the
Practical Network penetration testing
certification I'll link it down in the
description below it's a one-of-a-kind
certification you go through you try to
hack an organization you write a report
you present a debrief and the good thing
about this is it gets you job ready for
the field so if you can get through this
certification you actually go look for
the pmpt on LinkedIn or indeed you're
going to find this on job postings so
this course 15 hours of this is part of
a 50 hour curriculum that we have and so
if you feel that hey I really am
interested in this field and maybe I
want a certification consider looking at
the pmpt as well and that's really it
we're gonna end here salesmanships over
please enjoy this 15 hours if you do
please like comment subscribe all that
fun YouTube stuff let's go ahead and
jump right into this course I'm so
excited to teach you in this 2023 day Edition
all right I hate PowerPoints but I love
this template I don't know what's so
cool about it it's all the colors I
think so welcome to a day in the life of
an ethical hacker 2022 edition let's
talk about a pen tester's day to day and
I'm going to highlight this at a very
high level so what we do is we roll out
of bed hopefully we wake up in the
morning and we kick off our day and now
our day can be performing an assessment
and we're going to talk about the
different assessment types that are out
there it could be writing a report it
could be giving a debrief or a
collection of the three when we perform
an assessment we're talking about
different types of pen testing or
ethical hacking and we're going to cover
the most common types we'll talk about
some other types as well once we perform
our assessment we need to write a report
we deliver a report to our client that
report then gets digested and eventually
we give them a debrief if they want one
and we talk about our findings and so
we'll cover this whole process from
start to finish let's talk about the
different types of Assessments that we
could perform as an ethical hacker now
the first type of assessment I want to
talk about is what is called an external
network pen test and one of the
questions that we ask people when we're
doing phone screens and baselines on
interviews is we say hey can you tell me
what an external pen test is versus an
internal pen test and honestly I would
say at least half the people get the
answer wrong so make sure you're paying
attention and you take notes because
this may come up on an interview now an
external pen test is probably the most
common type of pen test that we perform
if you just got hired as a penetration
tester and you're brand new to the
industry it's likely they're going to
start you out doing external network pen
tests these pen tests are the most
straightforward and something that a
junior could take on and work through
and build up some experience and or
confidence as they go through their
process so an external pen test is
looking at an organization's security
from the outside this could to be us
trying to hack in from our mom's
basement or from another country or
whatever it might be whatever scenario
plays out in your head that's what it
could be you're trying to hack in from
the outside the methodology for external
pen tests focuses heavily on what's
called open source intelligence
gathering or oh send we're trying to
gather as much Intel and data about an
organization who are their employees
what is their email format have they
ever been involved in a breach can we
find out what passwords were in those
breaches can we collect data and then
use it against that organization to
reach a login panel or breach the VPN or
get into an area where we otherwise
would not be allowed into now why do we
focus so much on open source
intelligence well because this is an
external assessment you have to think
about the internet as a whole there are
Bots scanning the internet 24 7. if you
don't believe me try putting up an SSH
server or something similar and leave it
up for 24 hours and see how many login
attempts you get on that server it's a
lot Bots are scanning all the time so
what does that mean for us well that
means that if we do vulnerability
scanning and we find something that is
incredibly dangerous
well somebody's probably already found
that as well so the chances of us
finding something like remote code
execution where we can land on a machine
externally without doing a lot of work
it's pretty low usually organizations
have their external networks buttoned up
from a patching perspective so what
we're really looking at is the Intel
that we can gather where are the login
panels who are the users and how can we
use that against the organization now
this is the most common type of pen test
that organizations do in my opinion for
two reasons the main reason is that a
lot of compliance organizations dictate
that an external network pen test must
be performed annually that is not true
for the rest of the pen test though some
compliance organizations might dictate
other pen tests the external is by far
the most common the other side of this
is external pen tests tend to be a
little bit cheaper than the rest of the
assessments depending on the size and
scope of the engagement and a lot of
organizations like to dip their toes in
the water before going and doing more
assessments with a security firm so they
might test you out and say hey let's do
an external pen test we'll see how it
goes we like you we'll hire you for more
stuff so between those two reasons we
see a lot of external network pen tests
more so than anything else in my opinion
now these pen tests tend to last around
32 to 40 hours on average though if you
have a very large engagement that can go
a lot longer or if you have a very small
company and you're looking at one IP
address or five IP addresses and 10
employees it's probably not going to
take you 32 hours to do that pen test
maybe somewhere in the 8 to 16 hour
range we then tend to add another 8 to
16 hours for report writing and we'll
touch base on report writing towards the
end of this video so moving on is what
is called an internal Network pen test
this is assessing an organization's
security from the inside of the network
this means that we somehow breached the
perimeter perhaps we sent a phishing
email and somebody opened our email
clicked on our link and now we're inside
the network or maybe we broke into the
building and left a dropbox behind
whatever scenario in your head you want
to play as well you can do that what we
do on our end is we typically send a
laptop out to the client the client
plugs that laptop in and we are able to
remote into that laptop and perform a
network assessment as if we were sitting
inside the office this is why a lot of
work nowadays is remote because we don't
have to be on site anymore to do
internal pen tests now the methodology
for an internal penetration test focuses
heavily on active directory now if you
don't know what active directory attacks
are you absolutely need to learn those
in order to be a successful internal
penetration tester and it's one of those
things that a majority of the
organizations that are out there use so
I believe the statement that I read once
was 95 or 99 don't quote me on this by
the way of the Fortune 500 companies use
active directory in their environments
and I honestly think that this number is
way closer to 99 than anything else
every single internal pen test I've ever
done with the exception of one client
one very small client has always been on
active directory so you need to
understand active directory methodology
in order to perform an internal Network
pen test these typically last 32 to 40
hours though they can run a lot longer
again depending on the size and the
scope they don't typically run shorter
though I have seen them run 16 to 24
hours if the network is very small but
there is a checklist that we have to run
through that is usually in the 32 to 40
hour range and just like external pen
tests we tack on another 8 to 16 hours
for report writing now the third type of
assessment I wanted to talk about is a
web application pen test this is
probably the second most common I wanted
to group the external and the internal
pen test together but you have to think
about networks nowadays versus web
applications there are websites
everywhere there are more websites than
there are networks if we're just
counting websites to business networks
there probably are more web sites to
home networks as well though I'm not
entirely sure of that I would argue that
the answer is probably way more websites
than home networks so with that there's
a lot of attack surface that's out there
so organizations will come to us and
they'll say hey we need a web
application pen test this can be
dictated Again by compliance perhaps
stakeholders want to see this or maybe
the client is very interested in the
security of the application and wants to
make sure that it is very secure before
they launch their application now the
methodology focuses heavily on web-based
attacks obviously and the owas testing
guidelines so oauth stands for the open
web application security project you've
never heard of it Google it it's a great
resource they have testing guidelines
for not just web application but mobile
as well they have how to test how to
defend how to prevent all kinds of great
things and we follow their testing
guidelines pretty exclusively if you're
ever going to be a pen tester and you
want a pen test against web apps you you
for sure need to know what the owas top
10 attacks are because you will be asked
those in an interview now these
engagements last typically 32 to 40
hours and that is pretty much the
minimum we have a very thorough
checklist that we have to go through
when we're doing a web app pen test and
I would say it pushes closer to 40 hours
than anything else unless it were a very
very small and specific web application
they're almost always in the 32 to 40
hour range with another 8 to 16 hours
for report writing another Common
Assessment that we are asked to perform
as pen testers is what's known as a
wireless pen test or a wireless network
pen test and we're assessing an
organization's wireless network security
so the methodology will vary depending
on what type of wireless network is
being used for example if they're using
a guest Network we might log on to the
guest Network and test segmentation can
a guest access internal resources or is
the network properly segmented if
they're using a pre-share key which is
what's common in most household and we
might test that pre-share key for
password strength and see how strong the
pre-shared key is and how strong the
password is if they're using
enterprise-based network then we open
ourselves up to a variety of new attacks
as well so our methodology really
changes depending on what is being used
now Wireless pen testing is fairly
straightforward you can look up the
methodology online find blog posts about
it you just need a wireless network
adapter that you can honestly pick up
for 30 to 50 dollars at most and I'll
leave a link in the description below to
my favorite wireless network adapter but
you can just pick one that is compatible
with your machine and that will work and
do packet injection it's honestly where
a lot of hackers start this is where I
got my start before I ever learned about
real pen testing or anything I went and
bought a cheap wireless adapter and I
started just hacking my own network and
some devices that I had laying around at
the house and I learned how to hack
wireless pretty quick so it's one of
those things that kind of gets you
excited it and gets you into the hacking
mindset and kind of teaches you some of
the wireless assessments that are out
there and I think it's pretty fun as
well now these typically last about four
to eight hours per SSID so if we're
testing two ssids we're probably looking
in the 8 to 16 hour range and then
typically another two to four hours for
report writing all right the last thing
I want to touch on in terms of
Assessments that we do quite a bit are
physical pen tests and social
engineering assessments so when we're
doing a physical pen test we're
assessing an organization's physical security
security
and our methodology is going to depend
on the tasks and goals that are at hand
that are given to us by the client so if
we're doing a physical pen test we are
going on site and we're trying to break
into the building that can be through
cloning badges that can be through
social engineering that can be through
picking locks there's a lot of different
scenarios that are at hand there now
that methodology again depends on what
we're up against and it also depends on
the client's goal the client might say
hey we want to see if you can just even
get in the building or they might say
hey I want you to get in the building
and find our server closet and take a
picture of yourself in our server closet
we want to see if you can make it there
so there's typically some goal behind
why you're breaking into a building but
it is legal breaking and entering and
it's pretty fun and pretty exciting if
that's your jam and there's a lot of
social engineering involved in that so
it's very very fun engagement to do the
other side of this is pure social
engineering and what I mean by that is
doing something like a phishing campaign
against an organization and we might
actually do a phishing campaign in
combination with an external pen test so
we might combine those together though
often they're left apart we might do
something like a fishing campaign where
we call people and we say hey I'm from
I.T can you give me your password or I
just sent you a code to your account can
you give me the code that I just sent
you we might do a smishing campaign
where we send text messages and see if
anybody responds back to us there's a
lot of different social engineering
that's out there and we have different
campaigns that we can run in different
engagements depending again on the
client's need now the great thing about
this is social engineering and physical
pen testing offer a lot of learning
opportunities and training opportunities
for example when we do physical pen
tests we wear cameras on our hip and we
record everything that we do not just
for our liability but also for teaching
end users at the end of the day we'll
cut that video have a Lessons Learned
here's the good things they did here's
the bad things they did and they can
walk away with a way to improve moving
forward the weakest element of any
organization is going to be the human
you can have a great environment great
policy security everything set up and
all it takes is one really nice person
to hold the door open for you and that
can lead to catastrophic events so
social engineering again is a very
important part of security and it's one
of my favorite things to assess when I'm
doing this type of work now again these
can last anywhere from 16 to 40 hours
maybe even more depending on the
engagement that you're on plus another
four to eight hours for report writing
again maybe more depending on the scope
of the engagement that you're working
now these aren't the only assessments
there are other assessments that we
might perform as a pen tester these tend
to get a little bit more specialized and
you might have to take additional
training in order to learn this type of
stuff but these are things that we
perform at work and you may end up
performing as well so we have mobile
penetration testing it's a lot like web
application penetration testing in the
sense that you're testing against an
application except it's on a mobile
device so iOS or Android and then
there's specific methodology and
techniques related to those operating
systems you may have iot or Internet of
Things penetration testing and somebody
might send you something like one time
we got sent over a pressure cooker that
was a wireless pressure cooker and they
wanted it pen tested so we had a lot of
fun doing that there's red team
engagements which are kind of sort of
like pen testing but not really what I
say pen testing I think of banging at
the front door where red teaming is
trying to sneak in in whatever creative
way you can so a red team engagement
might say hey we want you to hack our
company you've got a month or six months
or a year and we don't want to hear you
we don't want to see you we don't want
to know about it just let us know if you
can hack into us in these types of
engagements the methodology can be
anything depending on what is allowed in
scope usually it's pretty open in the
scope I've heard a red team sending
people to the client location and they
might even live there for a little bit
they might befriend some of the
employees try to become buddy buddy
learn some internal Secrets maybe get a
password slip them a thumb drive they
might do all kinds of social engineering
engagements it's very very custom and
unique to the client and Depends again
on the scope which is usually pretty
wide and what they can and can't do so
red team engagements are pretty awesome
but they're also incredibly stealthy
where pen testing is very time Limited
in the sense that we might only have a
weak engagement we're going to know the
IP addresses we're going to know our
scope and we're going to have a set
defined limitation in front of us where
red team doesn't have that as much now a
purple team engagement is something that
you might do tabletop exercises and
things like that where you as a red
teamer or being offensive and working
with a blue team or defensive you work
together and that makes purple and in
that sense you might tabletop and say
hey I just ran this attack do you see me
in your network I just ran this other
attack do you see me and you try to
establish a Baseline and you can see Hey
where's the detection at where is the
detection weak and how can we improve
detection mechanisms within the network
it's usually a bit of a more mature
process an organization that's never
gone through a pen test before likely
isn't just going to jump right into a
purple team engagement but it is
something that more mature organizations
do in order to improve their baselines
and improve their detection mechanisms
internally now I've covered just a
handful of the different types of pen
testing engagements that you can work on
there's car hacking there's airplane
hacking there's scada hacking there's
all kinds of really cool stuff out there
that you can do I discovered the most
common items but you can absolutely
specialize if that's something that
you're interested in now with all the
fun of getting to do assessment work
there comes the downside of report
writing and debriefing I actually enjoy
doing both and in order to be a
successful consultant you really need to
be a three-headed person in a sense you
have to be really good at technical
abilities you have to be really good at
report writing and communicating
effectively not just to a technical
audience but to a non-technical audience
and you also have to be good with
presentation skills in the sense that
you need to present your findings to a
technical and non-technical audience so
with report writing we typically deliver
a report within a week after the
engagement now that report should be
high level and Technical so we have
what's called an executive summary for
non-technical people think about a CEO
who might not be a technical person if
they're going to read the report it
should still be Crystal Clear what the
issues were and how they should be fixed
and that's what the executive summary is
now we have a technical findings section
and that's for the people doing the work
maybe the security engineer the network
engineer or the web app developer
depending on who you're working with it
can digest the findings they can say hey
here's what they found here's what tools
they use here's how they were able to do
it and here are the recommendations for
remediation now recommendations should
be incredibly clear you should have high
level recommendations like hey patch
this and you should have technical
recommendations as well that says hey go
to this website here's how you would
install this patch etc etc so depending
on your audience you want to make sure
that you're communicating effectively to
both of them and for a lot of new pen
testers this can be an incredible
struggle it's one of those things that
you write a report you get beat up on it
in the QA process and you just get
better over time and it's just something
that is kind of passed down and you
learn as you go so don't be worried if
you're not great at report writing just
make sure that you understand that if
you're going to do this job you will
have to write reports and you will have
to get better at it as you go last but
not least is the debrief process now a
debrief walks your clients through your
report findings and again this should be
non-technical and Technical as well you
may be sitting in a room with a CEO and
a network engineer you might be sitting
in front of all technical people you
might be sitting in front of all c-level
non-technical people so you need to make
sure that when you are presenting your
findings that you can explain it at a
high level and a technical level as well
I've seen many people struggle with this
all right I've had I've been in one
situation I remember that I was in a
debrief with a co-worker of mine this
was years ago and he was very much
struggling to communicate he was giving
very technical in-depth details about
what he was Finding and the CEO kept
stopping him and saying I don't
understand what you're saying so we had
to do a little bit of translation
because he really wasn't great at the
debrief process yet he was still fairly
new and it's one of those things that if
you're going to be an effective
consultant you need to be able to do both
both
now the debrief is important because it
also gives the opportunity for your
client to ask any questions about the
findings that you have and address any
concerns as well so maybe there's a
finding that they want to challenge or
they want more information on it gives
them the opportunity to do that because
when we give them the initial report the
report is a draft after the debrief or
if they choose to not have a debrief we
finalize that report so the debrief is
the last opportunity the client has to
understand what you're presenting to
them and to ask any questions or address
any concerns so it's a very very
important process alright hopefully that
was informative for you if you're
looking to become a pen tester you
should know at a high level what these
different types of assessments are and
you should know what you're getting
yourself into because a lot of people
think oh it's fun and games I just get
to go hack things and yes that's a lot
of the job but a lot of the job is also
doing report writing and doing debriefs
in front of our clients so if you're not
strong with report writing or if you're
not strong with your presentation skill
cells you may have some time on The
Struggle Bus before you get decent at it
alright so make sure that you know
coming into that that those are things
that you're going to have to be doing
and that you're comfortable doing those
so before we begin in this course and we
really start to dive in it's important
to cover one of the topics that I'm
going to harp on the most which is
effective no keeping if you're going to
be successful in your career and you're
going to be successful in this course
you really need to take good notes now
in this first video I'm going to show
you what my notebook kind of looks like
not only for my personal notebook but as
a notebook for an assessment and how I
might take notes for an assessment and
then I'll also show you some note
keeping applications that I prefer or
I've heard students prefer in the second
video we're going to cover how to
install one of the applications and
another cool application used for taking
screenshots so let's take a look at my
notebook first
so here is my notebook and actually
let's click over here so this is my
notebook and you can see it's really
long it's got all kinds of stuff in here
and it's just something that I build
upon this one in particular is actually
only geared towards active directory so
I have a few different notebooks this
one is active directory and it's
actually a few different courses that
I've taken in the past that I've kind of
put together and then just for
assessment work etc I just kind of have
a little cheat sheet here so I wanted to
show you this one in particular because
these were built off of courses and
you're going to be working through a
course so kind of just get an idea of
how maybe to structure it so here you
can see I structured it and I've got
different modules here where okay module
one might have had this email macro
fundamentals module two two here has all
these different uh components to them
right and we have we have our notes then
we have child notes and even sub
children to those child notes and I'll
show you how to create that here in a
second but let's say for example
enumeration which is one of the most
important things that you're going to
cover in hacking and we take a look at
enumeration you don't have to understand
what any of this means here but you
could see if I want to look at a domain
and I want to get the current domain
that I'm on here's the command I run and
here is a picture of what it looks like
and here's what comes back when you run
that command that's great that's what I
want to see and I have a whole list of
commands for all these in here right so
if I'm confused on a assessment and I
want to go and
find a command that I'm not sure of I
can go to my little cheat sheet here now
again this is really long so you have to
create your notes the way it really
helps you for a course I think it's good
to write it all out step by step like
this and then go back and make a cheat
sheet I don't need this pictures anymore
I've been doing this for a while so
maybe I just say hey get current domain
is get net domain and then I say hey
okay get object of another domain here's
an example of it I don't need the
pictures because it makes it really long
but as an example and over time you
learn with the pictures as well at least
so let's build from that
here is an example of an actual
assessment that I did for a client and
you can see how I did this now I did an
external internal and web application
assessment for this client and these
were the findings now I'm only going to
show you what is Master obfuscated
already or doesn't reveal client
information but as you can see here one
example is on the internal they had
something called SMB signing disabled
you don't need to worry about it but
here in my picture I've got a nice
picture the picture has highlighted it
says Hey message shining disable that
signifies SMB signings disabled and it
has the IP address so we identified the
machine and we give proof of concept
that this SMB signing is disabled here
another example
ms-17010 these are both internal
exploits that you're going to encounter
in this course here's one I check this
machine it says hey this Target's not
patched now this is one I didn't exploit
but it shows that it's actually
vulnerable to this attack so these are a
couple screenshots that I'll put now
your notes could be different than mine
how I organize is I take a screenshot I
put it in here and then I make sure that
I have at least the IP address and the
screenshot for reference because I'll
remember it but if you need to go in
here and take detailed notes that's
absolutely fine as well you always want
good notes for your assessments because
you never know if a client's going to
come back in six months or even a year
and say hey what was that one thing that
you did here and if you go back to your
notes you say oh you know I did this and
some people get down really into the
weeds they have dates times everything
for step by step what they do on an
assessment and that's completely up to
you and how well you take your notes
this is kind of how I lay it out and
then you see the green check marks next
to it I add those green check marks when
I'm doing my report so as I'm building
my report out and I cover something in
the report I'll just go ahead and right
click and I'll change the note icon to a
check mark meaning that I've written
that part of the report for that finding
and we just kind of go through over time
so with that being said I do want to
show you some decent applications the
one that I'm using here and that you see
is called keep note now I run on Windows
as a base so keep note.org that's how
you get keep note it is for Linux it is
for Mac OS X but this is totally a
preference thing me I prefer I've been
using it for a long time some people
don't like it okay so I'm going to offer
some Alternatives as well
cherry tree comes built into Kali Linux
as you're going to see here in just a
little bit worth looking at worth trying
seeing if you like it one note's another
example if you use Microsoft and if
you're a Mac User a lot of students have
told me that Joplin is really good now
I've never used this but I keep hearing
great things about it so what I'm going
to do is I'm going to put all of these
into the course resources and you'll be
able to look at them download them
decide on your own now you're not
limited to these four no keeping
applications by any means feel free to
use whatever you like to take notes if
you want pen and paper that's great as
well and so just make sure that you're
taking good notes and we're gonna we're
gonna harp on this throughout the entire
course over and over and over again so
make sure you're taking good notes so
from here what we're going to do is
we're going to install keep note in the
next video and we're going to install an
awesome tool called greenshot I'm going
to show you what greenshot does and why
it's so cool and I can cannot live on
any assessment without it so let's catch
you over in the next video when we work
alright so in that example in the last
video we talked about using keep note so
if you go to Google and you type in keep
note all you got to do is come here and
keep noteworks on Windows Linux and Mac
OS X so
great great tool the only issue with
this tool is it has not been updated in
a long time some people find issue with
that if you're one of those people I'm
actually not you can use other tools
OneNote is an option
cherry tree is also an option you can
also find other options out there for
you if you have a favorite note-taking
tool already that's absolutely fine as
well just make sure to take good notes
especially during this course and make
the most of it learn all the things that
you can and incorporate that so I will
show you quickly how to install keep
note here and another thing note too is
while we do this is cherry tree is
available on Cali Linux we're going to
install Kali Linux here very soon so
once we install Kali Linux and we get
into the introductory Linux and we
explore it I'll show you a little bit
more of cherry tree and what that looks
like and we'll talk pros and cons of
cherry tree when we get there so here we
go if you are on Windows you can follow
along or you download your appropriate
one here depending if you're on Linux or
if you need Mac as well so I'm going to
go ahead and install the exe and I'm
just going to actually run this
we're just going to say yes
and I'm going to say next next install
and that's it that I mean it's it's that
quick and then we just launch Keep note
and here you go we've got keep note so
the other tool the really cool tool that
I love this one is called Green shot now
this is a screenshot capturing tool so
let's go to downloads here on greenshot
if you are running on something other
than Windows you're going or Windows or
Mac so basically Linux you're going to
need a different tool the recommended
tool that I've heard out there is called
Flame shot
f-l-a-m-e though I have no experience
with it
I've heard it is identical to Green shot
so here I'm going to download the latest
stable I'm going to select run yes
yes okay
okay
accept the agreement give away our firstborn
firstborn
next next next place it however you want
I'm just going to next through
everything and I'm going to start green
shot with Windows start that is my
preference I love this tool again
so it's finished all right let's take a
look at it so it should be running let's
start greenshot now
okay now you see it running down here on
the bottom okay let's let's go let's
open up a web page let's say we want to
take a screenshot of something now you
just hit your print screen button
and this nice cursor gets brought up
here and let's say we wanted to take
this downloads part right here we're
just going to capture this
and now we have choices we can just save
the image that we just grabbed
or my favorite is that we can actually
just open an image editor right so let's
open this in their image editor look at
this okay so here's the picture we just
grabbed right on top of this really
great tools let me show you two that I
use always so I come into effects I put
a border on it let's say that you have
like a Kali Linux and Kali Linux if
you've never used it has a black
terminal it's really nasty so let's
imagine here that it's black it's nasty
when it comes to reporting so let's
imagine that we're in this situation and
we're writing a report and we've got
this black background similar to this
well you can see what I just did I just
inverted it and I do this for all of my
reports I invert the Cali background so
that way it's white and that way it
looks nice on a report and when we get
into the reporting you'll kind of see
what that looks like but I like a nice
clean background it saves on ink as well
if they were to print it and it's just
nice and neat when you give it to a
client so I always invert my images if I
need to you've got the black border here
another thing is let's say you want to
point something out you saw in my keep
note notebook that I had a highlight you
can just click that button up here and
just highlight something like right here
great another tool that's in here is
this officegate so let's say that
there's like a password or something
really sensitive in here that that you
don't want the client to see or you
don't want to be reveal on a final
report you can do that and then you can
just like up the pixel size on this and
make it really blurry you know
um so it's a really really great tool
and then when you're done you can copy
it to your clipboard you can save the
file I just usually like copy this and
if I want to go paste it like you know
make a new notebook or whatever I'll
just paste it in my keep note and just
kind of go from there so again fantastic
tool awesome to use if I had two
recommendations for your note keeping
it's keep note and green shot if I had
to make one recommendation of the two
it's absolutely green shot you can be
flexible on your note keeping tool so
again hopefully this helps you again
again please do take good notes of this
course you're going to find yourself
wanting to know hey what was that
command I ran again and because we're
going to go through so much stuff by the
time this is all said and done that
you're gonna want to remember it so
please take good notes so from here
let's go ahead and move on into our
networking refresher and we'll catch you
hello everyone and welcome to this
section on networking so this section is
titled networking refresher meaning that
some of you might have a networking
background and if you're looking at this
list that's on the screen and you go
down the list and you say yep I know all
those you can feel free to skip this
section if you've taken some of these in
the past and you just might want a
little bit of a refresher on them then
this section is for you we're going to
cover these topics not totally in depth
but we're going to use it as a way to
brush up and then we'll hit on
networking again when we get into
introductory Linux so if you are
unfamiliar with things like TCP UDP in
the three-way handshake or if you're
subnetting is a little shaky or you
don't know what the OSI model is chances
are you should probably stick around and
just click through this series watch it
and build that Foundation remember we
talked about one of the core foundations
of pen testing being a strong networking background
background
this is a good way to build it up
remember what you might have forgotten
and go from there so let's go ahead and
just jump right into the first video
what's up everybody so I'm gonna preface
this video really quick with that it is
raining pretty hard here so if the
soothing sounds of the rain put you to
sleep during this video and you can hear
it I'm very very sorry but the show must
go on so what we're going to be doing
today is we're going to be talking about
IP addresses now if you've ever used a
computer before and you're any anywhat
familiar with it you probably know what
an IP address is but I want to take this
a little bit deeper in in theory on why
we use IP addresses what types of IP
addresses are out there and talk more
about protocols and how IP addresses are
actually designed and made up
so I'm here in a Cali terminal and I'm
just going to type in a simple command
and that command is ifconfig now if
you've used Linux before this might be
familiar to you if you used windows it's
similar to ipconfig all I'm trying to do
is bring up my IP address so what we can
see here is that we have an IP address
which is our inet this is my IP address
here I also have another IP address this
inet 6. this is what's called an IPv6
address so we've got this inet which is
considered an ipv4 in this inet 6 which
is considered an IPv6 now you can notice
right away that there's two different
types of notations for these this inet
here is in a decimal notation and the
IPv6 is in a hexadecimal notation we'll
get to the importance of that in just a
second so when it comes to IP addresses
this looks probably pretty familiar to
us this is an IP address this is how we
communicate we communicate over layer
three and you're going to hear me
talking about layers repeatedly
throughout the course or at least
throughout this part of the course so
that we can get familiar with how we're
actually doing this so I want you to be
familiar with troubleshooting these
layers and these layers all refer to
something called The OSI model so when
we we talk about layers we think about
the OSI model and I'll introduce the OSI
model here in a few videos and it should
all click once I introduce the OSI model
so if I brought in the OSI model up
front it might be boring might not make
sense so I'm going to introduce the OSI
model near the end and you're going to
say hey yeah that all makes sense so
what we've got here is we've got this
ipv4 address and this is the most
commonly used format that we use today
right we use ipv4 for mostly everything
and again this is in that decimal
notation so when we see this decimal
notation it's just a realistically a
bunch of ones and zeros that are put
together so that we have this human
readable format
realistically all we're seeing here with
192 this first this first section here
this first octet is actually just a
bunch of ones and zeros it's eight bits
so we've got a range of eight ones and
zeros here we've got another eight here
eight here and eight here so when it's
all said and done this inet or this ipv4
is made up of 32 bits eight plus eight
plus eight plus eight here and which
equals four bytes so another way to
think about that is to think about it as
say something like this one two three
four five six seven eight period period
okay that is one section there so we've
got eight ones that can make up this and
then we'd have another eight
Etc not gonna be the dead horse here but
I do want to give you guys another
example so if we go into our
applications and we go to a text editor
really quick
so the way this looks is something like
this we start with a number like 128 I'm
gonna try to space this out as best as
possible and all I like to do is think
of 128 as my base and this will make a
lot more sense when we get into
subdending so please if you're confused
by this don't worry this is all Theory
right now when we get into subnetting
and we get Hands-On it'll make a lot
more sense I promise you
so let's say we have ones and zeros here
if we have a one for each of these sections
sections
and I'm going to space this out again as
best as possible it's not pretty but if
we have a one for all these this equals
255 why does this equal 255 will you
take this and all these numbers add up
one plus two plus four plus eight all
this adds up to 255. so let's say if we
didn't have all the ones and zeros we
had just
someone's enabled
like these last three here okay well
this would equal seven
because we have four plus two plus one
equals seven so our first number or
whatever number this applied to in the
octet would be seven so if we had
7.7.7.7 it would just be this numbers
repeating over and over these numbers
repeating over and over right so uh be
zero zero zero zero one one one dot zero
zero zero zero one one one
and so forth so this is kind of what it
looks like behind the scenes because
again a computer is just ones and zeros
we're all binary so what we're going to
do is we're going to close this out
we're going to talk a little bit of
other Theory when it comes to this and
why inet or IPv6 and why ipv4 so let's
close this and let's talk about ipv4
so I'm going to bring up a calculator
and with ipv4 we have these 32 bits so
what we can do is we could take two
to the 30 second power
and this is the possible amount of IAP
addresses that we could have so we have
somewhere in the four billion range of
IP addresses well spoiler alert we don't
have only four billion people on earth
right we're up to seven something
billion at this point and all these IEP
address spaces are gone so ipv4 has been
around since 1981. nobody thought we
were ever going to use all these
addresses uh computers weren't really a
thing who knew that we were going to
want all these addresses and you know uh
these companies started buying them up
and they started buying them up in large
chunks and then they sold those to isps
and then isps sell those to you and so
these IP addresses have been gone for a
very very long time and uh chances are
when you when you have an IP address and
you get this ipv4 you're only going to
get one if your corporation you might
buy it more but we've run out of IP
address space there's just not enough to
go around so the theory is okay let's
come up with something different let's
come up with IPv6 now this hexadecimal
mole is actually in 128 bits which makes
things just a little bit longer and adds
quite a bit so let's take this 2 to the
128 power
and we get a number that I cannot tell
you how to say not even going to try but
I can guarantee you that in our lifetime
we will never use this address space
so we've come up with a solution of IPv6
but nobody really uses it IPv6 is just a
thing that's that's there but when we we
get IPv6 addresses a sign but still to
this day everybody's using ipv4 well how
how is that possible if we're using ipv4
but we're out of address space well
think about this we're using something
called nat which is Network address
translation now let's think about your
network so you might have a cell phone
or computer or multiple devices my
network has at least 20 devices on it
I've got I've got cameras I've got
multiple cell phones Smart TVs
everything that connects to my internet
gets an IP address
and that's 20 IP addresses right there
right so let's say I have 20 devices
that's 20 IP addresses am I taking up 20
IP addresses out of that 4 billion no
we're actually using something called
Network address translation or it's
called nat for short and we'll talk
about this again when we we set up our
actual lab but
with Nat what we're doing is we're
assigned these private IP address spaces
192.168.57.139 now if you've ever seen a
IP address before and you've been on a
network good chances are it probably
started with 192 or maybe it started
with a 10 dot or something along those
lines and that's because those are
private IP addresses so anything that
starts with 192.168 is not an IP address
that is going to be out in the uh the
interwebs it is going to be an IP
address that is only known to you these
are called private IP addresses so
because we use these private IP
addresses we can pass them out through
what is called a public IP address now
to make better use of this let's go out
to Firefox and I've already got a tab open
open
so I went to Google and I just said
private IP addresses and I clicked the
second image here because I think it's a
great image so if we look at this there
are classes of IP addresses private IP
addresses now there is a Class D and E
we're not going to worry about those The
Big Three are class A B and C if you
know these you are good to go uh so if
we look at class C this is what the most
common household and small business use
so we see it starts with the
192.168.0.0 so the 192 168 are constant
if you see a 192.168 address you can
guarantee yourself that that is a
private IP address space and then we
have the range of changing this number
between 0 and 255 and this number
between 0 and 255. Y 0 to 255 well
that'll all make sense when we get into
subnetting but what that allows us to do
is have a large number of networks here
and a small amount of hosts but for a a
regular user like you or I uh or a small business
business
254 hosts is pretty good I mean I'm only
using like 20 in my household so the
most common household is probably using
this 192 address
but what about a big big business right
something huge
okay well they might use a 10 address
because a 10 address frees you up to
anything after this 10 is private so 10.1
10.1
10.1.1.1 whatever you want to put in
here up to 255 on each octet
makes for a small amount of networks but
a large amount of hosts okay and don't
worry about the host versus Network
thing again subnetting we'll talk about
that it'll all make sense
but just imagine the amount of amount of
host that you can put in here with this
wide range so because of this you'll see
larger corporations using 10 addresses
you'll also see a lot of Corporations
even small businesses using 10 addresses
the the matter of fact is as long as you
have this private IP address you're good
to communicate across your network so
any IP address outside of these and the
loopback here are free game for the
public address space they're probably
already owned and you purchase those or
rent those really from your ISP your
internet service provider so going back
to this thought we have a class C
address my Network's Class C 192 168 57
139 here so it falls into that class C
I've got all these devices on this
192.168 network all these devices are
talking out of one IP address that is my
public IP address that is what I rent
from my ISP and all this network traffic
goes out one IP so this is how we have
achieved or solved the issue of running
out of address space without having to
use IPv6 not that there's anything wrong
with IPv6 uh it's it's not pretty I mean
it's way easier to type this stuff in
than it would be to type something like
this in
um but at the same time this is how
we've solved it we've we're able to
still use ipv4 in mostly all networks
and we are able to communicate out with
this quote unquote IEP address shortage
so hopefully that makes sense we're
going to build upon these Concepts again
ipv4 IPv6 IP addresses are layer 3
protocols Layer Three is a router so
when we Route traffic we route via an IP
address so we're going to build upon
that as well as we go in hopefully this
is all just a refresher to you so that
is it for this video I'll go ahead and
all right so we're going to move down a
layer here and talk about Layer Two so
remember ipv4 IPv6 IP address is just a
whole that is layer three we're talking
about routing here in Layer Two we're
going to be talking about a Mac address
or a physical address now Mac stands for
media access control and that is
identified here in our ifconfig as this
ether here so we can think of this as
our physical address and a way that we
communicate when we are using switches
switches communicate over this physical
address this is kind of how they know
what device is what so what we say here
is if we have a device say you just
built a computer and you're installing
your network interface card or your Nick
you're going to plug that in and you're
going to have a MAC address for that
Nick your cell phone that's going to
have a MAC address anything that's using
a network interface is going to have a
MAC address so these Mac addresses are
important because they utilize layer 2
or switching and they are how we
communicate over switches now there's
something to be noted briefly about Mac
addresses now Mac addresses have
identifiers so as you can see here this
Mac address
has six different pairs of two right
and what we can do is we could take the
first three pairs
and we can just copy this
and we can go out and we can try to put
it into a MAC address lookup now for
this one this is just going to be VMware
I'm not sure if it's actually going to
come up but I'm going to go ahead and
paste it and see what happens
and you can see that the vendor actually
shows up as VMware so the first three
pairs here are identifiers and we can
identify what we're up against if you've
ever looked in your house and you've
looked at your network and you you're
trying to find a device and you see the
IP address but the IP address doesn't
really help you identify it you might
see something along the lines of a MAC
address because your your home device
say your your router might also be
what's called a layer two slash layer 3
device meaning it's doing switching and
routing for you and it'll also know the
MAC address of that device so you can
take the first three pairs here put
those into the Google machine and see if
you can identify what the device is so
if I was unsure this didn't have a host
name or device name and I could just
reach out and say okay well let me let
me look these up maybe it'll give me an
ink link it's not going to tell me the
exact device but if I know it's it's
running VMware then I could say oh you
know that's my host machine running or
if it's related to like Texas
Instruments or something maybe I know
that device in my house so this is just
a quick way to look up devices and know
about them the other option or other
thing that you need to know here is just
that again Mac addresses layer two
related to switching I'm just trying to
repeat this and get this into your head
so that's all we need to know from this
lesson and we're going to go ahead and
all right so now we're moving into layer
four which is the transport layer of the
OSI model
and we're going to talk about what is
TCP and what is UDP so we'll type that
in here TCP versus UDP so TCP is what is
known as the transmission control
protocol and you could think of that as
a connection oriented protocol and we
also have UDP which is the user datagram
protocol and this is a connection less
protocol so when we have these two
protocols one is best suited when it
comes to high reliability that's TCP TCP
is connection oriented we want to make a
connection we need High reliability so
you can think of something like a
website which is HTTP or https or you
can think of something like SSH or FTP
the file transfer protocol those all
utilize TCP when you think about UDP you
might think about something like a
streaming service that's connectionless
or DNS is connectionless or our voice
over IP is connectionless and when this
comes into the importance of scanning
scanning is super important we're going
to be scanning both TCP and UDP as a
penetration tester and don't worry about
scanning right now when we get into the
scanning section this will make a lot
more sense
but we need to know what TCP and udpr
and Define them broadly so the most commonly
commonly
we commonly use protocol that you're
going to be scanning is going to be TCP
now TCP works on what is called a
three-way handshake now if we look at
the three-way handshake it's going to
look something like this we're going to
first send out a sin packet
and then we're going to receive back a
sin act packet
and finally we're going to send an act
packet now how does this work now you
could think of this as an interaction so
let's say you have a friend or a
neighbor and you go to your neighbor and
you say hello that's a sin now sinach is
going to be the response it's going to
say hey sin I acknowledge you that's
your neighbor waving hello back and then
you know you are good to go start a
conversation so that's the
acknowledgment now when we think about
this in the terms of ports now Port is a
item that can be open on a machine it's
a way to communicate with certain protocols for example if you think about
protocols for example if you think about HTTP that's over Port 80. if you think
HTTP that's over Port 80. if you think about https that's over Port 443 there's
about https that's over Port 443 there's a lot of different protocols and there
a lot of different protocols and there are 65 000 plus ports that can utilize
are 65 000 plus ports that can utilize these protocols so everything related
these protocols so everything related here is has to do with these ports
here is has to do with these ports now let's say that you want to connect
now let's say that you want to connect to Port 443 on a website you're going to
to Port 443 on a website you're going to send out a sin packet to that website
send out a sin packet to that website you're going to say hey I want to
you're going to say hey I want to connect to you on Port 443 and if 443 is
connect to you on Port 443 and if 443 is open and available for connection
open and available for connection they're going to say hey you can go
they're going to say hey you can go ahead and connect to me and when you
ahead and connect to me and when you want to actually establish that
want to actually establish that connection you're going to send that
connection you're going to send that acknowledgment packet back now let's
acknowledgment packet back now let's make more sense of this let's go ahead
make more sense of this let's go ahead and open up a tool called Wireshark so
and open up a tool called Wireshark so this is built into Kali Linux I'm just
this is built into Kali Linux I'm just going to type in Wireshark and I'm going
going to type in Wireshark and I'm going to provide an ampersand here just so I
to provide an ampersand here just so I have shell access if I need it in the
have shell access if I need it in the background
background and all I'm going to do is capture
and all I'm going to do is capture packet data so this is going to be
packet data so this is going to be listening in on my Nic and it's going to
listening in on my Nic and it's going to say hey what's he doing let's capture
say hey what's he doing let's capture all that data so we're going to capture
all that data so we're going to capture that I'm going to start a capture here
that I'm going to start a capture here you're going to start to see a bunch of
you're going to start to see a bunch of traffic coming through you can see the
traffic coming through you can see the different protocols here you can see UDP
different protocols here you can see UDP is coming through right now but we're
is coming through right now but we're going to go establish a TCP connection
going to go establish a TCP connection so let's go out to the world wide web
so let's go out to the world wide web and I've got Google up I'm just going to
and I've got Google up I'm just going to refresh Google you're going to see a lot
refresh Google you're going to see a lot of traffic start coming through so I'm
of traffic start coming through so I'm going to go ahead and just stop this
going to go ahead and just stop this right here
right here look at all the data packets that get
look at all the data packets that get sent when you're using your computer
sent when you're using your computer this is what's going on in the
this is what's going on in the background you don't even think about it
background you don't even think about it so we could see some sin synacts there
so we could see some sin synacts there those are in the gray let's see if we
those are in the gray let's see if we could find a good one okay so here is
could find a good one okay so here is one right here
one right here um so what we're gonna do actually let's
um so what we're gonna do actually let's find a better one so we're going to come
find a better one so we're going to come down to
down to here and we're going to say okay
here and we're going to say okay so here we are we're our source IP this
so here we are we're our source IP this is 192.168 5739 we're going out to
is 192.168 5739 we're going out to destination of 74 125 21 155 we're
destination of 74 125 21 155 we're saying hey I've got this port here I
saying hey I've got this port here I want to connect to your Port so Port 443
want to connect to your Port so Port 443 this is a web page we're sending a sin
this is a web page we're sending a sin packet
packet if that port is open and available for
if that port is open and available for connection and communication what's
connection and communication what's going to happen back is that IP address
going to happen back is that IP address is going to say hey here I am I'll allow
is going to say hey here I am I'll allow you to connect on this port and if we
you to connect on this port and if we make that final connection we're going
make that final connection we're going to go ahead and send the ACT packet back
to go ahead and send the ACT packet back which is right here it's going to say
which is right here it's going to say ack so that is the three-way handshake
ack so that is the three-way handshake please do remember this is going to come
please do remember this is going to come back into play when we get into scanning
back into play when we get into scanning and we'll talk about Stealth scanning
and we'll talk about Stealth scanning and how we modify the three-way
and how we modify the three-way handshake to actually do some scanning
handshake to actually do some scanning so that is it for this lesson I will
so that is it for this lesson I will catch you over in the next one
all right so before we go into the OSI model I do want to talk about some
model I do want to talk about some common ports and protocols since this is
common ports and protocols since this is a refresher most of these should be
a refresher most of these should be pretty familiar to you I'm going to run
pretty familiar to you I'm going to run through them pretty quickly and just
through them pretty quickly and just talk about them briefly on each of these
talk about them briefly on each of these common ports and the reason I've listed
common ports and the reason I've listed these is because there are things that
these is because there are things that we'll see quite often as a penetration
we'll see quite often as a penetration tester and it's just something that as
tester and it's just something that as we're going through the course if one of
we're going through the course if one of these show up it's something that just
these show up it's something that just rings a bell and you see you see a scan
rings a bell and you see you see a scan it comes back and you see Port 21 you
it comes back and you see Port 21 you just think ah yes FTP or you see Port 80
just think ah yes FTP or you see Port 80 you think ah yes HTTP so you got to
you think ah yes HTTP so you got to start training your mind to memorize
start training your mind to memorize these ports so when we get into our
these ports so when we get into our scanning which again we haven't covered
scanning which again we haven't covered scanning but when we get there and we
scanning but when we get there and we see what ports are open on a machine
see what ports are open on a machine we're going to be able to have these
we're going to be able to have these common ports memorized so on the TCP
common ports memorized so on the TCP side we've got FTP FTP is the file
side we've got FTP FTP is the file transfer protocol you're going to see
transfer protocol you're going to see this in some assessments you're going to
this in some assessments you're going to see this a lot when we do something
see this a lot when we do something called Capture the Flag or we run
called Capture the Flag or we run through some test machines you'll see
through some test machines you'll see FTP open quite a bit so FTP file
FTP open quite a bit so FTP file transfer protocol all that means is we
transfer protocol all that means is we can log into this server we can put a
can log into this server we can put a file or we can get a file off the server
file or we can get a file off the server now SSH and telnet kind of play hand in
now SSH and telnet kind of play hand in hand telnet is the ability to log into a
hand telnet is the ability to log into a machine remotely now SSH does the same
machine remotely now SSH does the same thing the only difference is SSH is the
thing the only difference is SSH is the encrypted version of that so with telnet
encrypted version of that so with telnet you are in clear text and with SSH you
you are in clear text and with SSH you are encrypted now SMTP POP3 and IMAP all
are encrypted now SMTP POP3 and IMAP all relate to mail we're not going to worry
relate to mail we're not going to worry too much about mail in this course but
too much about mail in this course but you might see it come back up at some
you might see it come back up at some point so just remember your 25 110 and
point so just remember your 25 110 and 143
143 DNS so DNS is a way to resolve IP
DNS so DNS is a way to resolve IP addresses to names and we could take a
addresses to names and we could take a quick look at that if we go back to our
quick look at that if we go back to our Kali machine and say we're at Google
Kali machine and say we're at Google here we've got Google up but the
here we've got Google up but the computer doesn't really know what Google
computer doesn't really know what Google is the computer is just using nice text
is the computer is just using nice text like google.com for us to humans what's
like google.com for us to humans what's going on on the back end is Google
going on on the back end is Google actually resolves to an IP address
actually resolves to an IP address now the IP address is how the computer
now the IP address is how the computer knows to get back and forth
knows to get back and forth because we don't want to sit there and
because we don't want to sit there and type in IP addresses this DNS or domain
type in IP addresses this DNS or domain name system has been implemented for us
name system has been implemented for us so we type in google.com on the back end
so we type in google.com on the back end it knows hey I want to go out to
it knows hey I want to go out to 17179 10 22 34 whatever it is in in
17179 10 22 34 whatever it is in in reality but this is just a quick way for
reality but this is just a quick way for the computer to relate to a human and
the computer to relate to a human and the human to you know have easily
the human to you know have easily readable access to some of this stuff so
readable access to some of this stuff so going back to our PowerPoint
going back to our PowerPoint we have HTTP and https that is a website
we have HTTP and https that is a website just what you saw there mostly
just what you saw there mostly everything is on 443 now or https the
everything is on 443 now or https the HTTP on Port 80 you'll see sometimes
HTTP on Port 80 you'll see sometimes remember that is the non-secure version
remember that is the non-secure version of the protocol so https is encrypted
of the protocol so https is encrypted HTTP is not encrypted and not secure
HTTP is not encrypted and not secure so lastly SMB ports 139 and 445.
so lastly SMB ports 139 and 445. originally it was just 139 in the later
originally it was just 139 in the later versions of Windows they put on 445
versions of Windows they put on 445 you're going to see these ports a lot
you're going to see these ports a lot this is probably the most common Port
this is probably the most common Port you're going to see as a pen tester
you're going to see as a pen tester these relate to file shares you might
these relate to file shares you might also hear this called Samba so there are
also hear this called Samba so there are a few names for it but when you think of
a few names for it but when you think of SMB and you see 139 or 445 think of file
SMB and you see 139 or 445 think of file shares and as a pen tester perspective
shares and as a pen tester perspective you got to think about all the crazy
you got to think about all the crazy exploits we've had regarding SMB the
exploits we've had regarding SMB the most recent one as of this course was
most recent one as of this course was the wannacry virus right so you have the
the wannacry virus right so you have the wannacry virus it's also known as
wannacry virus it's also known as Eternal blue was what it was built off
Eternal blue was what it was built off of or
of or ms17010 was the official term of that
ms17010 was the official term of that exploit that exploit utilized an SMB
exploit that exploit utilized an SMB exploit to navigate through networks so
exploit to navigate through networks so it became very vicious very quick
it became very vicious very quick because SMB is open so frequently on
because SMB is open so frequently on networks now on the UDP side we also
networks now on the UDP side we also have DNS over here DNS is both atcp and
have DNS over here DNS is both atcp and UDP protocol we also have DHCP
UDP protocol we also have DHCP now when it comes to IP addresses DHCP
now when it comes to IP addresses DHCP Associates you with an IP address kind
Associates you with an IP address kind of at random now you could have the
of at random now you could have the opposite of that is what is a static IP
opposite of that is what is a static IP address so with DHCP you plug into your
address so with DHCP you plug into your network say your home network and the
network say your home network and the internet just fires up guess what
internet just fires up guess what probably DHCP on the back end it just
probably DHCP on the back end it just picks a number between a range says hey
picks a number between a range says hey here's your IP address I'm going to let
here's your IP address I'm going to let you lease that out for eight hours or a
you lease that out for eight hours or a day or a week or however long the timing
day or a week or however long the timing is set for and that IP address is yours
is set for and that IP address is yours now the opposite of that again is static
now the opposite of that again is static so you could say hey I want a static IP
so you could say hey I want a static IP address and anytime I plug in with this
address and anytime I plug in with this specific computer go ahead and give it
specific computer go ahead and give it this IP address so how are we going to
this IP address so how are we going to know that most likely the MAC address
know that most likely the MAC address right so from Layer Two it's going to
right so from Layer Two it's going to know layer 3 and how to assign it so
know layer 3 and how to assign it so again DHCP should be pretty familiar to
again DHCP should be pretty familiar to you we've also got tftp on Port 69 which
you we've also got tftp on Port 69 which is the trivial FTP and it utilizes UDP
is the trivial FTP and it utilizes UDP instead of TCP and we also have SNMP
instead of TCP and we also have SNMP which is the simple Network management
which is the simple Network management protocol so you will encounter SNMP
protocol so you will encounter SNMP occasionally on networks not always but
occasionally on networks not always but when we do encounter it there may be
when we do encounter it there may be some information to be gathered
some information to be gathered especially if there are strings being
especially if there are strings being used that are Community or public
used that are Community or public strings and we'll worry about that when
strings and we'll worry about that when we we encounter it but you'll probably
we we encounter it but you'll probably see it again in this course
see it again in this course so that is it in this video we're going
so that is it in this video we're going to go ahead and move on to the OSI model
to go ahead and move on to the OSI model and tie all this together then we'll get
and tie all this together then we'll get into a little bit of subnetting and
into a little bit of subnetting and we'll end this with a refresher on
we'll end this with a refresher on networking a final final video on
networking a final final video on networking so I'll see you over in the
networking so I'll see you over in the next video
all right so this whole time we've been talking we've been talking about
talking we've been talking about networking and I've been throwing terms
networking and I've been throwing terms at you and I every time I throw a term
at you and I every time I throw a term at you I try to use the respective layer
at you I try to use the respective layer for it so you've heard me say layer two
for it so you've heard me say layer two layer three layer four and those all
layer three layer four and those all correspond with what is called The OSI
correspond with what is called The OSI model now if you're ever in a network
model now if you're ever in a network interview or if you're ever talking to
interview or if you're ever talking to somebody who has experience in
somebody who has experience in networking or even if you're on the help
networking or even if you're on the help desk or taking tickets knowing the OSI
desk or taking tickets knowing the OSI model is incredibly helpful and people
model is incredibly helpful and people will just throw layers at you especially
will just throw layers at you especially the people who have been in the field
the people who have been in the field for quite some time might just say Layer
for quite some time might just say Layer Two instead of a switch or they might
Two instead of a switch or they might say layer three instead of a router so
say layer three instead of a router so I'm going to discuss the OSI model
I'm going to discuss the OSI model really quickly give you a mnemonic on
really quickly give you a mnemonic on how to remember it and just talk about
how to remember it and just talk about some of the concepts within it and how
some of the concepts within it and how to troubleshoot down it as well so
to troubleshoot down it as well so I picked this up from Keith Barker a
I picked this up from Keith Barker a long time ago great trainer by the way
long time ago great trainer by the way and this is the mnemonic so we're gonna
and this is the mnemonic so we're gonna go p d n t s
go p d n t s p a
p a and this stands in my head for please do
and this stands in my head for please do not throw sausage pizza away
not throw sausage pizza away again that is please do not throw
again that is please do not throw sausage pizza away so I'm gonna put
sausage pizza away so I'm gonna put numbers corresponding to the layers in
numbers corresponding to the layers in front of it here
front of it here and we're gonna go ahead and type these
and we're gonna go ahead and type these out one by one so on the first layer
out one by one so on the first layer here we've got what is called the
here we've got what is called the physical layer
physical layer and you could think of your physical
and you could think of your physical layer as like data cables
layer as like data cables or like your cat 6 cables
or like your cat 6 cables stuff like that something you might you
stuff like that something you might you might plug in right that is the physical
might plug in right that is the physical layer and we've already talked about
layer and we've already talked about Layer Two quite a bit Layer Two is the
Layer Two quite a bit Layer Two is the data layer and that is our switching
data layer and that is our switching right and also our Mac addresses
right and also our Mac addresses going down the list we've got the
going down the list we've got the network layer which is IP addresses
network layer which is IP addresses also routing
the fourth layer is the transport layer which is TCP UDP which we have talked
which is TCP UDP which we have talked about as well
about as well and the last few so the session layer
and the last few so the session layer we've got the session layer which is
we've got the session layer which is just session management you don't really
just session management you don't really have to worry too much about this one
have to worry too much about this one six is the presentation layer now this
six is the presentation layer now this should be familiar to you because think
should be familiar to you because think about WMV
about WMV jpeg movie files that's what your
jpeg movie files that's what your presentation layer is so media and then
presentation layer is so media and then lastly we've got the application layer
lastly we've got the application layer which is like HTTP SMTP your
which is like HTTP SMTP your applications that you utilize right
applications that you utilize right so we've got this laid out here and you
so we've got this laid out here and you might be asking why is this important
might be asking why is this important well again when we say something like my
well again when we say something like my home router is a layer 2 3. so that
home router is a layer 2 3. so that means it does it does switching and it
means it does it does switching and it does routing right you might think of
does routing right you might think of this in another way as well you might be
this in another way as well you might be asked to troubleshoot and something to
asked to troubleshoot and something to talk about too with the with the OSI
talk about too with the with the OSI model is when we receive data we receive
model is when we receive data we receive data down this physical layer all the
data down this physical layer all the way down to the application when we
way down to the application when we transmit data it goes out the
transmit data it goes out the application layer down to the physical
application layer down to the physical when we're troubleshooting this it is
when we're troubleshooting this it is always best to start with the physical
always best to start with the physical and go down to the application Level
and go down to the application Level okay so say you get a your working help
okay so say you get a your working help desk and you get a phone call and
desk and you get a phone call and somebody says you know my internet's not
somebody says you know my internet's not working help me
working help me well what's the first thing you're going
well what's the first thing you're going to do are you going to ask them
to do are you going to ask them application Level questions yeah
application Level questions yeah probably not you might say hey can you
probably not you might say hey can you look at the back of the computer do you
look at the back of the computer do you see a uh the cable plugged in
see a uh the cable plugged in oh the cable's plugged in okay well uh
oh the cable's plugged in okay well uh do you do you see the the where the
do you do you see the the where the cables plugged in is there a blinking
cables plugged in is there a blinking light is that blinking light green by
light is that blinking light green by chance okay we're checking the Nick
chance okay we're checking the Nick right and then we might ask them to you
right and then we might ask them to you know do they have an IP address what's
know do they have an IP address what's going on uh all the way down and then we
going on uh all the way down and then we troubleshoot all the way down to layer
troubleshoot all the way down to layer seven so we wouldn't start on layer
seven so we wouldn't start on layer seven right we would start from the
seven right we would start from the basics and move down so it's important
basics and move down so it's important to know this this isn't a help desk
to know this this isn't a help desk course by any means but it's super
course by any means but it's super important to know this especially if
important to know this especially if it's been a while since you've seen this
it's been a while since you've seen this network stuff or even if this is new to
network stuff or even if this is new to you that the osm model is commonly
you that the osm model is commonly referred to even as a pen tester I get
referred to even as a pen tester I get all kinds of layer two layer three talk
all kinds of layer two layer three talk and you will be sitting in meetings with
and you will be sitting in meetings with network Engineers with people who are
network Engineers with people who are very very smart about this stuff and
very very smart about this stuff and they're going to throw all this lingo at
they're going to throw all this lingo at you so if you know this lingo really
you so if you know this lingo really really benefits you or else you're just
really benefits you or else you're just gonna sit there and wonder what the heck
gonna sit there and wonder what the heck they're talking about so hopefully the
they're talking about so hopefully the this is a quick informative method for
this is a quick informative method for you and again remember
you and again remember please do not throw sausage pizza away
please do not throw sausage pizza away that's the easiest way that I remember
that's the easiest way that I remember it you can make up your own mnemonics if
it you can make up your own mnemonics if you want people have other things as
you want people have other things as well if you've got a if you got a
well if you've got a if you got a favorite mnemonic please feel free to
favorite mnemonic please feel free to comment down below and tell me your
comment down below and tell me your mnemonic as well so I'd love to hear
mnemonic as well so I'd love to hear some of these other ones so let's go
some of these other ones so let's go ahead and move on into subnetting and
ahead and move on into subnetting and then we'll uh we'll start moving into
then we'll uh we'll start moving into other fun parts of the course
let's talk about subnetting so subnetting is important in networking
subnetting is important in networking you hear about it all the time you hear
you hear about it all the time you hear even people perhaps freaking out I know
even people perhaps freaking out I know I freaked out when I heard that I had to
I freaked out when I heard that I had to do it for exams like Network Plus or
do it for exams like Network Plus or CCNA and I feel like there are a lot of
CCNA and I feel like there are a lot of complicated methods out there for
complicated methods out there for submitting but there was a method that
submitting but there was a method that was shown to me middle of my career and
was shown to me middle of my career and it just blew my mind it's really really
it just blew my mind it's really really fast subnetting method and I really want
fast subnetting method and I really want to break down for you what subnetting is
to break down for you what subnetting is why we do it and then show you the
why we do it and then show you the methodology behind it so if we want to
methodology behind it so if we want to talk about subnetting if we just come in
talk about subnetting if we just come in here and just do an ifconfig
here and just do an ifconfig and we look at our IP address right we
and we look at our IP address right we have our inet which is our ipv4 and you
have our inet which is our ipv4 and you can see here too we have this net mask
can see here too we have this net mask this is also known as a subnet mask or a
this is also known as a subnet mask or a subnet and it just says 255-255-255.0
really tell us a lot if we don't know much about it but this is what a subnet
much about it but this is what a subnet looks like and we can think of subnets
looks like and we can think of subnets in ones and zeros it's all bit right so
in ones and zeros it's all bit right so we've got eight bits here just like an
we've got eight bits here just like an IP address ipv4 same thing 8 Bits 8 Bits
IP address ipv4 same thing 8 Bits 8 Bits 8 Bits and another eight bits and we've
8 Bits and another eight bits and we've got ones and zeros if all the ones are
got ones and zeros if all the ones are switched on we've got 255 if none of the
switched on we've got 255 if none of the ones are switched on we've got zero and
ones are switched on we've got zero and depending on how those ones and zeros
depending on how those ones and zeros are switched on or off determines a lot
are switched on or off determines a lot of things for us and that's why this net
of things for us and that's why this net mask is important now attached to your
mask is important now attached to your resources for this course I've created
resources for this course I've created an Excel sheet that I think will be
an Excel sheet that I think will be useful so if we look at the Excel sheet
useful so if we look at the Excel sheet here is the Cyber mentors subnetting
here is the Cyber mentors subnetting sheet and let's talk through this it
sheet and let's talk through this it looks like a bunch of numbers and it
looks like a bunch of numbers and it might look crazy for you and we're going
might look crazy for you and we're going to talk about how this breaks down how
to talk about how this breaks down how the bits break down and then how I would
the bits break down and then how I would write this shorthanded for an exam or a
write this shorthanded for an exam or a test or just something that I do on a
test or just something that I do on a day-to-day basis
day-to-day basis so first let's talk about the bit so
so first let's talk about the bit so come to the bits tab here and we have
come to the bits tab here and we have our eight bits right we can count this
our eight bits right we can count this across and there's eight here on the
across and there's eight here on the count you can see that and it starts
count you can see that and it starts with 128 and descends down to one you
with 128 and descends down to one you just keep cutting it in half right so
just keep cutting it in half right so 128 64 32 16 8 whatever what's more
128 64 32 16 8 whatever what's more important is why we get to these numbers
important is why we get to these numbers so if we have a 1 switched on here it
so if we have a 1 switched on here it adds to the value when all the ones are
adds to the value when all the ones are switched on it equals to 255 you see all
switched on it equals to 255 you see all the ones switched on here if we were to
the ones switched on here if we were to highlight over all this come down to the
highlight over all this come down to the sum you see the sum is 255 that's all
sum you see the sum is 255 that's all this formula is doing here
this formula is doing here so if we were to come through and you
so if we were to come through and you see all the zeros here nothing's flipped
see all the zeros here nothing's flipped on to actually turn any value on here
on to actually turn any value on here how this actually works is the switch
how this actually works is the switch has to be on in order right so if we
has to be on in order right so if we were to switch on another bit we'd have
were to switch on another bit we'd have to switch it on here
to switch it on here and we'd have to switch another one on
and we'd have to switch another one on here we couldn't just come down here and
here we couldn't just come down here and switch it on here it wouldn't make sense
switch it on here it wouldn't make sense it doesn't work that way not with
it doesn't work that way not with subnetting so we're going to take these
subnetting so we're going to take these back off and just show zeros again but
back off and just show zeros again but you see how the values change if for
you see how the values change if for example we had this network and you saw
example we had this network and you saw the default and I'm showing you the
the default and I'm showing you the 255-255-2550 the standard here because
255-255-2550 the standard here because that is what's known as a slash 24
that is what's known as a slash 24 Network that's very very common
Network that's very very common and it's very common because it's used
and it's very common because it's used mostly in household and small businesses
mostly in household and small businesses and it's done this way because of the
and it's done this way because of the amount of hosts that it allows now if we
amount of hosts that it allows now if we talk about the host you can see that I
talk about the host you can see that I have here 2 to the eighth power
have here 2 to the eighth power why do I have that well we actually go
why do I have that well we actually go by how many bits are switched off or how
by how many bits are switched off or how many hosts are available to us so if a
many hosts are available to us so if a host here or a bit was switched on then
host here or a bit was switched on then we lose the amount of hosts we have
we lose the amount of hosts we have available to us and this subnet gets
available to us and this subnet gets smaller and smaller now don't worry too
smaller and smaller now don't worry too much about the ones and zeros it's going
much about the ones and zeros it's going to make a lot more sense when we stop
to make a lot more sense when we stop talking in these binary terms I just
talking in these binary terms I just kind of want to break down the math
kind of want to break down the math behind it first before we make it really
behind it first before we make it really really simplistic so again we've we're
really simplistic so again we've we're talking about what's called the slash 24
talking about what's called the slash 24 or whack 24 Network and it's so standard
or whack 24 Network and it's so standard because of the host again 256. think of
because of the host again 256. think of all the devices in your house you have
all the devices in your house you have cell phones you probably have computers
cell phones you probably have computers you might have like a Roku or Amazon
you might have like a Roku or Amazon Fire or something along those lines you
Fire or something along those lines you might have Smart TVs or smart watches or
might have Smart TVs or smart watches or something that connects to the internet
something that connects to the internet well again they're all connecting
well again they're all connecting through Nat right and going out but the
through Nat right and going out but the amount of hosts that you can have on
amount of hosts that you can have on your private Network really depends on
your private Network really depends on the subnet mask and how you set it so we
the subnet mask and how you set it so we have this class C that you saw before
have this class C that you saw before the
the 192.168.1 or dot zero or however you
192.168.1 or dot zero or however you want to have it right well it allows us
want to have it right well it allows us to have 256 when we have a subnet of
to have 256 when we have a subnet of Slash 24 so that's very common for a
Slash 24 so that's very common for a household it's also common for a small
household it's also common for a small business maybe there's a printer some
business maybe there's a printer some few devices in there but they're never
few devices in there but they're never going to get over this 256 hose okay so
going to get over this 256 hose okay so when we come to the subnet cheat sheet
when we come to the subnet cheat sheet let's break this down a little bit
let's break this down a little bit differently
differently so we have our host here let's start
so we have our host here let's start with the slash 24 we just were and you
with the slash 24 we just were and you saw that there is 256 available hosts as
saw that there is 256 available hosts as we start turning off bits
we start turning off bits okay we turn off a bit here we turn off
okay we turn off a bit here we turn off a bit keep going down the list the hosts
a bit keep going down the list the hosts start getting bigger and that just
start getting bigger and that just corresponds here we have a slash 24 and
corresponds here we have a slash 24 and the only reason I'm saying 24 is I'm
the only reason I'm saying 24 is I'm counting the ones across right so we've
counting the ones across right so we've got 24 bits switched on if we had 23
got 24 bits switched on if we had 23 okay it gets bigger and bigger and
okay it gets bigger and bigger and bigger
bigger now
now let's stay away from the ones and zeros
let's stay away from the ones and zeros I think it's a little bit complicated
I think it's a little bit complicated the better way to think about this is to
the better way to think about this is to look at the subnet Mass down here and
look at the subnet Mass down here and I'm going to replicate this and then
I'm going to replicate this and then we're going to come back to it so what I
we're going to come back to it so what I do here is we can have a possibility of
do here is we can have a possibility of 32 bits switched on right so I'm just
32 bits switched on right so I'm just making a new tab and I'm just going to
making a new tab and I'm just going to go over here and I'm going to hit
go over here and I'm going to hit control and drag this across until it
control and drag this across until it hits eight
hits eight okay and then I'm gonna do the same
okay and then I'm gonna do the same thing with nine I'm gonna drag it across
thing with nine I'm gonna drag it across all I'm doing is just making really
all I'm doing is just making really quickly 32 placeholders
quickly 32 placeholders and I'm just emulating here
and I'm just emulating here if we had the possibility of
if we had the possibility of 32 different switched on bits so imagine
32 different switched on bits so imagine one bit is switched on imagine all 32
one bit is switched on imagine all 32 bits are switched on that's the
bits are switched on that's the possibilities here right so always for
possibilities here right so always for sure we're going to have an amount of
sure we're going to have an amount of host and we're gonna have a subnet mask
host and we're gonna have a subnet mask okay so we'll just call it subnet there
okay so we'll just call it subnet there we always start here
we always start here with 128 just like the bits that you saw
with 128 just like the bits that you saw you saw the 128 start on the bits let's
you saw the 128 start on the bits let's just start also with 128. now as you saw
just start also with 128. now as you saw every bit that's switched on remember
every bit that's switched on remember when we switch a bit on over here
when we switch a bit on over here it starts decreasing so we're going to
it starts decreasing so we're going to decrease for the bits that are switched
decrease for the bits that are switched on 64 32 16 8
on 64 32 16 8 4 2 1. you come over here and what I
4 2 1. you come over here and what I like to actually do is I like to just
like to actually do is I like to just add these numbers together and you can
add these numbers together and you can see 128 and 64 is 192.
see 128 and 64 is 192. and then you can add these two together
and then you can add these two together so you get 192 32 you just add diagonals
so you get 192 32 you just add diagonals the way I I actually always do it so 224
the way I I actually always do it so 224 240 248
240 248 252 254 and 255. now what does that
252 254 and 255. now what does that correspond to it corresponds to the
correspond to it corresponds to the possibilities of the bits being flipped
possibilities of the bits being flipped on right so this looks just like what
on right so this looks just like what you see here
you see here same deal and if you had a one
same deal and if you had a one underneath of it okay then you got 128
underneath of it okay then you got 128 if you've got another one underneath of
if you've got another one underneath of it well guess what you've got 128 plus
it well guess what you've got 128 plus 64 which is 192. and this number keeps
64 which is 192. and this number keeps growing why is this important this is
growing why is this important this is still all ones and zeros right well
still all ones and zeros right well let's start thinking about it
let's start thinking about it if we have a slash 24 Network we've got
if we have a slash 24 Network we've got 24 bits turned on
24 bits turned on our subnet mask is
our subnet mask is 255.255.255.0
255.255.0.0 why where are these changes coming from let me show you this
coming from let me show you this okay for a slash eight I'm just tying
okay for a slash eight I'm just tying this into just this right here well this
this into just this right here well this is coming from the number of bits that
is coming from the number of bits that are turned on
are turned on eight bits turned on we've got two five
eight bits turned on we've got two five five and the rest are zeros you got
five and the rest are zeros you got another eight bits turned on two five
another eight bits turned on two five five two five five the rest are zeros
five two five five the rest are zeros come down to the slash 24 which is that
come down to the slash 24 which is that really common subnet that you see and
really common subnet that you see and you've got two five five two five five
you've got two five five two five five two five five zero now this is very
two five five zero now this is very common okay let's go back to the cheat
common okay let's go back to the cheat sheet now
sheet now and you can see that I've got X as a
and you can see that I've got X as a placeholder in the subnet so what I'm
placeholder in the subnet so what I'm saying here is you look at this list and
saying here is you look at this list and you say I've got a slash one well for
you say I've got a slash one well for this whole area here from one to eight
this whole area here from one to eight the placeholder is going to hold in
the placeholder is going to hold in place of this x so for a slash one if
place of this x so for a slash one if I've got 128 then guess what it's going
I've got 128 then guess what it's going to become
to become 128.0.0.0 because that's how it would be
128.0.0.0 because that's how it would be and if you were turned on just one bit
and if you were turned on just one bit here and made all of these zeros guess
here and made all of these zeros guess what just the 128 would be on the rest
what just the 128 would be on the rest would be zeros okay if we had a slash 14
would be zeros okay if we had a slash 14 okay so 255's automatically flipped on
okay so 255's automatically flipped on you have a slash eight already you've
you have a slash eight already you've passed through it okay so you're
passed through it okay so you're starting on the second iteration here
starting on the second iteration here slash 14 corresponds down here to 252 so
slash 14 corresponds down here to 252 so you'd have a 255.252.0.0
so all this is is placeholders let's go back to the sheet here
back to the sheet here so I make this quick and dirty list this
so I make this quick and dirty list this is what I write out when I'm just
is what I write out when I'm just writing out something quick for an exam
writing out something quick for an exam I'll write out one through thirty two
I'll write out one through thirty two I'll put the host here and I'll put the
I'll put the host here and I'll put the subnet here so again if we know that
subnet here so again if we know that once we cross through 8 16 24 32 that
once we cross through 8 16 24 32 that has a two five five in front of it
has a two five five in front of it all we've got to do then is we'll say
all we've got to do then is we'll say slash 27 well we've come through three
slash 27 well we've come through three columns then I know for sure that we've
columns then I know for sure that we've got
255.255.255.something right you see the slash 27 you come down here the subnet
slash 27 you come down here the subnet would be 224.
would be 224. say 28 okay two five five two five five
say 28 okay two five five two five five two five five look at the 28 you've got
two five five look at the 28 you've got a DOT 240.
a DOT 240. and this is gonna be confusing this is
and this is gonna be confusing this is subnetting is not necessarily easy once
subnetting is not necessarily easy once you get the chart down it makes a lot
you get the chart down it makes a lot more sense so let's start piecing some
more sense so let's start piecing some more things together when I say that
more things together when I say that I've got host now the host I'm showing
I've got host now the host I'm showing you only correspond to these first rows
you only correspond to these first rows but it's very common or very useful just
but it's very common or very useful just to know this number right off the bat
to know this number right off the bat now if you look at the cheat sheet what
now if you look at the cheat sheet what you can do here is you just know that
you can do here is you just know that you start with a one or you start with
you start with a one or you start with the 128 you go down but every time you
the 128 you go down but every time you go up you're doubling and why are we
go up you're doubling and why are we doubling do you remember from the bits
doubling do you remember from the bits part
part every time a bit is turned off so as we
every time a bit is turned off so as we go up a number
go up a number we take it to the next power so we've
we take it to the next power so we've got eight bits turned off we take two to
got eight bits turned off we take two to the eighth power it's 256. well
the eighth power it's 256. well here you go look
here you go look come through here 256 we go to the ninth
come through here 256 we go to the ninth power 512 to the 10th power 10 24 it
power 512 to the 10th power 10 24 it just keeps doubling okay that's all you
just keeps doubling okay that's all you got to think about in your mind is it
got to think about in your mind is it keeps doubling so on an exam for example
keeps doubling so on an exam for example you might have something like what how
you might have something like what how many hosts could be potentially in a
many hosts could be potentially in a slash 20 Network and you come to your
slash 20 Network and you come to your cheat sheet that you made or you have in
cheat sheet that you made or you have in your head and you say well 496 and then
your head and you say well 496 and then we'll get to this in a minute but we
we'll get to this in a minute but we have to subtract two so 494 potential
have to subtract two so 494 potential and why is this all important what do we
and why is this all important what do we even care about any of this why am I
even care about any of this why am I rambling on well you need to know based
rambling on well you need to know based on the network okay the slash 24 is
on the network okay the slash 24 is great for a small office home network
great for a small office home network however you want to have it but what if
however you want to have it but what if you're a large Enterprise
you're a large Enterprise maybe you have thousands of devices okay
maybe you have thousands of devices okay maybe you want a slash 16 Network that
maybe you want a slash 16 Network that might make more sense for you or you
might make more sense for you or you even see some with a slash 8 Network it
even see some with a slash 8 Network it just depends on how big the company is
just depends on how big the company is the larger the company the greater
the larger the company the greater chance that you're going to see that
chance that you're going to see that they're not using slash 24 or they could
they're not using slash 24 or they could even have subnetted segments of their
even have subnetted segments of their Network where say they have just
Network where say they have just telephones and they've got 500 employees
telephones and they've got 500 employees and 500 telephones they might just have
and 500 telephones they might just have one slash 23 Network for nothing but
one slash 23 Network for nothing but telephones because that's the amount of
telephones because that's the amount of hosts that fit in there
hosts that fit in there so what we're after with subnetting is
so what we're after with subnetting is how many hosts can we fit and what is
how many hosts can we fit and what is the mask that's behind it so those are
the mask that's behind it so those are questions you might be asked in the exam
questions you might be asked in the exam and these are questions that you're just
and these are questions that you're just going to see and when you're given
going to see and when you're given addresses say you're doing a pen test
addresses say you're doing a pen test for a client you might be given
for a client you might be given something like this you might be given
something like this you might be given IP address it's
IP address it's 192.168.1.0 24. okay and immediately in
192.168.1.0 24. okay and immediately in your head you're like oh slash 24 that's
your head you're like oh slash 24 that's standard there could be up to 256 hosts
standard there could be up to 256 hosts or 254 hosts or devices in this network
or 254 hosts or devices in this network but if they gave you something like 192
but if they gave you something like 192 168 1.0 20. then you might look at your
168 1.0 20. then you might look at your little chart and say
little chart and say 4094 hosts remember we're going to
4094 hosts remember we're going to subtract two four thousand ninety four
subtract two four thousand ninety four hosts in this network now I know if I'm
hosts in this network now I know if I'm scanning this I'm up against a lot more
scanning this I'm up against a lot more devices potentially than I am in this
devices potentially than I am in this okay so when a client gives you your
okay so when a client gives you your subnets they might just write it out
subnets they might just write it out like this and depending how big your
like this and depending how big your client is might depend on how big their
client is might depend on how big their subnets are for you for example I just
subnets are for you for example I just pen tested a client that was a slash 16
pen tested a client that was a slash 16 all the way across and it looks
all the way across and it looks something like
something like 10.1.0.0 16.
10.1.0.0 16. okay and your subnet mask for that would
okay and your subnet mask for that would be something like two five five two five
be something like two five five two five five zero dot zero and how does this
five zero dot zero and how does this come into play well every time you have
come into play well every time you have a two five five that number's locked in
a two five five that number's locked in place that's another way to think about
place that's another way to think about this so that 10 is always locked down
this so that 10 is always locked down this one is always locked down the rest
this one is always locked down the rest of the bits are fair game meaning we
of the bits are fair game meaning we could have
10.1.1.0.1.2.3 we could actually have a zero here
zero here 0.1.2.3.4 and that's how this number for
0.1.2.3.4 and that's how this number for like a slash 16 gets so big because you
like a slash 16 gets so big because you have 10.1.0.0
through 255 on the possibilities which equals 256 hosts okay for one range you
equals 256 hosts okay for one range you get 256. well imagine you have to do
get 256. well imagine you have to do that 255 other times right and that
that 255 other times right and that number gets substantially bigger here
number gets substantially bigger here and then if you were to have a slash
and then if you were to have a slash eight then of course it gets bigger and
eight then of course it gets bigger and bigger so what you need to realize are a
bigger so what you need to realize are a few things here
few things here we have these addresses and you see the
we have these addresses and you see the slash one slash a again we call them wax
slash one slash a again we call them wax whack 24 is going to be very common I
whack 24 is going to be very common I would say wax 16 is probably your next
would say wax 16 is probably your next common you might see some weird cemented
common you might see some weird cemented networks like this subnetted networks
networks like this subnetted networks like this but typically it's slash 24
like this but typically it's slash 24 16. now
16. now your network ID is typically what is
your network ID is typically what is known as your first address and your
known as your first address and your broadcast ID is known as your last
broadcast ID is known as your last address this is not always the case but
address this is not always the case but it is very common and let me log back
it is very common and let me log back into this Cali machine here and I'll
into this Cali machine here and I'll show you
show you so we have our IP address 192 168 57.139
so we have our IP address 192 168 57.139 and we've got a net mask of
and we've got a net mask of 255-255-2550 what does that tell you
255-255-2550 what does that tell you from what we just learned that tells you
from what we just learned that tells you we have a slash 24 Network okay this is
we have a slash 24 Network okay this is a common Network there are potentially
a common Network there are potentially 250 for hosts why have I keep saying
250 for hosts why have I keep saying that why do I keep subtracting true well
that why do I keep subtracting true well we've got a network ID and a broadcast
we've got a network ID and a broadcast ID or broadcast IP here well what we
ID or broadcast IP here well what we need to know
need to know is we are DOT 139 we could be anywhere
is we are DOT 139 we could be anywhere from dot 1.254 within this network
from dot 1.254 within this network that's our 254 possibilities this zero
that's our 254 possibilities this zero means we have the flexibility to be any
means we have the flexibility to be any IP address range from 1 to 254. usually
IP address range from 1 to 254. usually usually a DOT zero for this IP here and
usually a DOT zero for this IP here and a DOT 255 make up your network ID and
a DOT 255 make up your network ID and your broadcast IP okay usually so if we
your broadcast IP okay usually so if we were to say something along the lines of
were to say something along the lines of let's go back to this Excel document and
let's go back to this Excel document and we were to say something along the lines
we were to say something along the lines of this let's say that we have a slash
of this let's say that we have a slash 24 Network
24 Network and we want to know how many hosts
and we want to know how many hosts we want to know how what our network ID
we want to know how what our network ID is
is and what our broadcast ideas or IAP is
and what our broadcast ideas or IAP is okay
okay we would say okay and we'll we'll give
we would say okay and we'll we'll give it one more we'll say it's a slash 24
it one more we'll say it's a slash 24 and the IP starts with
and the IP starts with 192.168.1 DOT
192.168.1 DOT zero okay or we can even write it like
zero okay or we can even write it like this 192 168 1.0 24 delete this and
this 192 168 1.0 24 delete this and we'll say what's our subnet mask
what's our host what's our Network what's our broadcast so subnet you come
what's our broadcast so subnet you come to your cheat sheet you say Okay slash
to your cheat sheet you say Okay slash 24 I already know that I need to be
24 I already know that I need to be filling in this area here on the X so
filling in this area here on the X so I'm just going to come in 255 255 what's
I'm just going to come in 255 255 what's the X well we know to come down this row
the X well we know to come down this row 255 here
255 here dot zero
dot zero okay and then we've got hosts I'm just
okay and then we've got hosts I'm just going to expand this a little bit we've
going to expand this a little bit we've got the host okay hosts are right here
got the host okay hosts are right here 256 hosts potentially 254 though because
256 hosts potentially 254 though because we always subtract 2 from the host total
we always subtract 2 from the host total so our network ID is usually the first
so our network ID is usually the first address available to us which is
address available to us which is 192.1681.0 the broadcast is
192.1681.0 the broadcast is 192.168.1.255 meaning available to us is
192.168.1.255 meaning available to us is anything from dot 1 to Dot 254.
anything from dot 1 to Dot 254. let's take a look at something else
let's take a look at something else that's uh a basic example let's do like
that's uh a basic example let's do like a slash 28. let's say we got
192.168.1.0 28. now what
now what well you've got 16 hosts here
well you've got 16 hosts here okay so our subnet is then going to fill
okay so our subnet is then going to fill in two five five two five five two five
in two five five two five five two five five dot X right because we're in this
five dot X right because we're in this row
row slash 28 says it's going to be a 240
slash 28 says it's going to be a 240 when we drop down to the subnet mask
when we drop down to the subnet mask I'm going to make this a little bigger
I'm going to make this a little bigger how many hosts 16 minus two we have 14
how many hosts 16 minus two we have 14 hoes
hoes okay so the first non-host would be a
okay so the first non-host would be a 192.168.1.0 again still the same thing
192.168.1.0 again still the same thing first first address
first first address last address is going to be what
last address is going to be what 192.168.1.15.
does that make sense 0 to 15 is 16 addresses usable space is 14 because we
addresses usable space is 14 because we take out the network and the broadcast
take out the network and the broadcast now you could see something like this
now you could see something like this and then guess what you're segmented so
and then guess what you're segmented so because you're only using this little
because you're only using this little bit of space you can then in turn have
bit of space you can then in turn have something like this
something like this 192.168.1.16 28.
192.168.1.16 28. and then it starts the same way your
and then it starts the same way your subnet mask is actually the same because
subnet mask is actually the same because you're using a slash 28 you come through
you're using a slash 28 you come through you can just copy and paste that the
you can just copy and paste that the hosts are still the same what changes
hosts are still the same what changes here
here well your first address 102.168.1.16
and then your last address which is 192.168.1.31
so because this is smaller on the slash 28 side
28 side we can actually have multiple networks
we can actually have multiple networks within like say a DOT
1.0.1.16.1.32 you get a multiple little networks here with only a small amount
networks here with only a small amount of hosts so maybe you have just a few
of hosts so maybe you have just a few servers in this range and you have like
servers in this range and you have like servers
servers um a b and c they go in a slash 28 and
um a b and c they go in a slash 28 and then you have another one of servers DC
then you have another one of servers DC and e or d d e and f however you want to
and e or d d e and f however you want to say it and you have more in that range
say it and you have more in that range okay so you can subnet this out into
okay so you can subnet this out into different things and when we see subnets
different things and when we see subnets we see all kinds of stuff we can see
we see all kinds of stuff we can see phones servers user computers Wireless
phones servers user computers Wireless all different sort of things some
all different sort of things some companies get really specific with their
companies get really specific with their subnetting now let's try one more let's
subnetting now let's try one more let's say we have a slash 23. now I want to
say we have a slash 23. now I want to put in
put in 192.168.1.0 23 but that would be wrong
192.168.1.0 23 but that would be wrong why would this be wrong this is actually
why would this be wrong this is actually going to be a zero and I'll show you why
going to be a zero and I'll show you why in a second
in a second so we're no longer locking in the this
so we're no longer locking in the this this number anymore right when we get
this number anymore right when we get below the slash 24 of the 255 all the
below the slash 24 of the 255 all the way across for three of them guess what
way across for three of them guess what we're now have the ability to change
we're now have the ability to change this number other than what's locked in
this number other than what's locked in so let's do a DOT zero we'll talk about
so let's do a DOT zero we'll talk about why let's hit enter here so the subnet
why let's hit enter here so the subnet on a slash 23 well we're going to do a
on a slash 23 well we're going to do a 254 which is going to be the placeholder
254 which is going to be the placeholder of the X here we're going to come in and
of the X here we're going to come in and say 255-255-254.0
and now again we're not locked in so remember this 255 would lock in this dot
remember this 255 would lock in this dot one that doesn't happen anymore so we've
one that doesn't happen anymore so we've got 255 255 254.0 we're actually going
got 255 255 254.0 we're actually going to start at zero here and we're going to
to start at zero here and we're going to say the number of hosts that are
say the number of hosts that are possible
possible it's 510 okay 512 minus two we'll say
it's 510 okay 512 minus two we'll say our network ID is
our network ID is 192.168.0.0 and our broadcast would then
192.168.0.0 and our broadcast would then be 192.168.1.255.
why okay so we have the possibility now that we're spanning two ranges we've got
that we're spanning two ranges we've got 510 hosts in this network okay and we
510 hosts in this network okay and we have the ability to go between zero and
have the ability to go between zero and one we've got two options now zero and
one we've got two options now zero and one so if we were to say another network
one so if we were to say another network if we wanted to get to like a two we'd
if we wanted to get to like a two we'd actually have to say
actually have to say 192.168.2.0 23 it would be the same
192.168.2.0 23 it would be the same subnet mask
subnet mask same number of hosts but then this would
same number of hosts but then this would be 192.168.2.0
again there's 500 510 possible hosts in between this right because you got to
between this right because you got to think dot
think dot 0.1.0.2.0.3 all the way through 254 and
0.1.0.2.0.3 all the way through 254 and again 1.1 1.2 all the way through 254.
again 1.1 1.2 all the way through 254. so that equals 510. once you've hit that
so that equals 510. once you've hit that maximum that 1.255 then guess what you
maximum that 1.255 then guess what you start at 2 you have a whole new network
start at 2 you have a whole new network here just like these smaller segments
here just like these smaller segments you get whole new networks on the bigger
you get whole new networks on the bigger side as well so what you need to know is
side as well so what you need to know is that when I if I were to put something
that when I if I were to put something like a 192.168.1.0.23
that would have fallen into line with the one and the zero in our actual
the one and the zero in our actual network ID still would have been 0.0 and
network ID still would have been 0.0 and a 1.255 would have been the broadcast
a 1.255 would have been the broadcast here and you can double check this
here and you can double check this anytime you're confused you can double
anytime you're confused you can double check your cider notation so I'm going
check your cider notation so I'm going to bring over a website that I will show
to bring over a website that I will show you here and this is just an IP
you here and this is just an IP addressing guide It's called
addressing guide It's called ipaddressguide.com you bring this over
ipaddressguide.com you bring this over and you scroll down just a little bit
and you scroll down just a little bit and I just put in
and I just put in 192.168.1.0 23 and you can see that it
192.168.1.0 23 and you can see that it actually corrects me and says the first
actually corrects me and says the first bit is
bit is 192.168.0.0 the last one's
192.168.0.0 the last one's 192.1681.255 total host is 5 12 minus
192.1681.255 total host is 5 12 minus two shows you that again first IP last
two shows you that again first IP last IP you got your net mask very easy to
IP you got your net mask very easy to use a cider calculator here or an IP
use a cider calculator here or an IP range to convert to cider as well so
range to convert to cider as well so very useful calculators but if you're
very useful calculators but if you're not allowed to use these for like an
not allowed to use these for like an exam purpose or something along those
exam purpose or something along those lines then using the cheat sheet that
lines then using the cheat sheet that I've shown you is super useful now what
I've shown you is super useful now what I want to do is I want to try three more
I want to do is I want to try three more subnets okay I'm going to write these
subnets okay I'm going to write these out I'm going to say
192.168.1.0 26 and
192.168.1.0 27. I want you to solve these for me tell me the subnet mask the
these for me tell me the subnet mask the host Network and broadcast
host Network and broadcast and with that being said this again is a
and with that being said this again is a very complicated topic I did not pick
very complicated topic I did not pick this up the first time or the second
this up the first time or the second time that I got it if you're running
time that I got it if you're running confused right now perfectly normal you
confused right now perfectly normal you can go back and watch this video again
can go back and watch this video again try to pick up more topics try to
try to pick up more topics try to understand it maybe I'm not the right
understand it maybe I'm not the right instructor for this either I do
instructor for this either I do recommend looking at other resources to
recommend looking at other resources to completely fill in your knowledge Gap if
completely fill in your knowledge Gap if there is one that exists another
there is one that exists another resource that I'll link down is what is
resource that I'll link down is what is called seven second subnetting it is
called seven second subnetting it is very useful a lot of students have
very useful a lot of students have recommended it to me I'm going to push
recommended it to me I'm going to push it forward as well so go ahead and try
it forward as well so go ahead and try to solve this understand that what
to solve this understand that what you're after here is just understanding
you're after here is just understanding what a subnet is okay when you see
what a subnet is okay when you see something like this if a client sends
something like this if a client sends you
you 192.1681.024 you're gonna say hey okay I
192.1681.024 you're gonna say hey okay I know that there's probably 254 hosts in
know that there's probably 254 hosts in that Network and I know what I'm working
that Network and I know what I'm working with if you see this
with if you see this 255.255.255.0 again you know that you're
255.255.255.0 again you know that you're working with a slash 24 Network very
working with a slash 24 Network very standard stuff that's what we're after I
standard stuff that's what we're after I don't expect you to ever memorize this I
don't expect you to ever memorize this I don't have this memorized like I don't
don't have this memorized like I don't come in here and say you know a slash 18
come in here and say you know a slash 18 is a two five five two five five 192.0
is a two five five two five five 192.0 Network and it's got 16 384 hosts I
Network and it's got 16 384 hosts I don't do that okay I have a cheat sheet
don't do that okay I have a cheat sheet I'll use a website if I need to for the
I'll use a website if I need to for the most part what you need to understand is
most part what you need to understand is two 254 hosts for a slash 24 if that
two 254 hosts for a slash 24 if that number has gone up to like a slash 28
number has gone up to like a slash 28 you know you're dealing with less if
you know you're dealing with less if that number is lower like a slash 16 you
that number is lower like a slash 16 you know you're doing with a bigger Network
know you're doing with a bigger Network that's really what it comes down to
that's really what it comes down to unless you are working in networking and
unless you are working in networking and then these become more important but as
then these become more important but as a pen tester understanding how to read
a pen tester understanding how to read this understanding what the subnet is
this understanding what the subnet is and just identifying it with very basic
and just identifying it with very basic measures this is extremely useful so I
measures this is extremely useful so I will catch you over in the next video
will catch you over in the next video when we talk about solving these
when we talk about solving these challenges and hopefully we got them all
challenges and hopefully we got them all right so I'll see you over there in the
right so I'll see you over there in the next one
foreign so let's solve this challenge together
so let's solve this challenge together shall we
shall we 've got a
've got a 192.168.00 22 why did I write this out
192.168.00 22 why did I write this out this way well similar to the slash 23.
this way well similar to the slash 23. so if we come to a slash 22 we see that
so if we come to a slash 22 we see that there are
there are 1024 hosts which means we have a
1024 hosts which means we have a possibility of 1022 right and all we
possibility of 1022 right and all we need to do is fill in the blank on the X
need to do is fill in the blank on the X so
so 255.255 dot 252.0
we come across we know our first IP here or ID is
IP here or ID is 192.1680.0 first address possible now if
192.1680.0 first address possible now if we think about this we can kind of do
we think about this we can kind of do this mentally in our head we can think
this mentally in our head we can think okay there's probably 250 or so hosts in
okay there's probably 250 or so hosts in a network and we've got a thousand or so
a network and we've got a thousand or so hosts here well that's going to be about
hosts here well that's going to be about four right four ranges because we got a
four right four ranges because we got a thousand divided by 250 so I'm going to
thousand divided by 250 so I'm going to go ahead and go 0 1 2 3. that's four
go ahead and go 0 1 2 3. that's four total we'd say
192.168.3.255. and hopefully that math makes sense again zero
makes sense again zero dot 0.1 through 254
dot 0.1 through 254 .1.1 through
.1.1 through 254.2.1 through
254.2.1 through 254.3.1 through 254. that equals about
254.3.1 through 254. that equals about 1022 hosts okay actually I lied to you
1022 hosts okay actually I lied to you the only two we're taking off are 0 and
the only two we're taking off are 0 and 255 you actually have dot zero through
255 you actually have dot zero through 255 1.0 through 255 all the way we're
255 1.0 through 255 all the way we're only subtracting these two so if you do
only subtracting these two so if you do that math that will add up to 10 22.
that math that will add up to 10 22. okay so a slash 26 we've got a
255.255.255.192 fill in the blanks fill in the X's 64 hosts we got 62 in reality
in the X's 64 hosts we got 62 in reality and we're gonna say 192. 168.1.0
and we're gonna say 192. 168.1.0 and 192.168.1.63.
again if we wanted to create a second Network we could start here with a
Network we could start here with a 64-26 and we would start with 64 as the
64-26 and we would start with 64 as the network ID and then 127 as the broadcast
network ID and then 127 as the broadcast and lastly
255.255.255.224 for a slash 27. we've got 30 potential hosts
we've got 30 potential hosts because we got 32 minus 2. 192 168.1.0
because we got 32 minus 2. 192 168.1.0 and then we're going to do 192.168.1.31.
same thing here if we wanted to create a second Network we could we could say
192.168.1.32-27 and then this would start at 32 and this one would end at
start at 32 and this one would end at 63. we can make however many networks
63. we can make however many networks within that four to eight I think eight
within that four to eight I think eight eight different segmented networks with
eight different segmented networks with the Slash 27.
the Slash 27. so that is it again as I said last video
so that is it again as I said last video this can be confusing and all we're
this can be confusing and all we're taking away here is identifying what the
taking away here is identifying what the cider notation looks like identifying
cider notation looks like identifying the base that to me is slash 24 being
the base that to me is slash 24 being the most common what you'll see
the most common what you'll see understanding what a subnet mask is and
understanding what a subnet mask is and why it's important especially in
why it's important especially in relation to hosts and the number of
relation to hosts and the number of devices that you can have on a network
devices that you can have on a network and why you might see something like a
and why you might see something like a slash 28 or a slash 23 or more commonly
slash 28 or a slash 23 or more commonly something like a slash 16. so understand
something like a slash 16. so understand again that slash 24 as you see a bigger
again that slash 24 as you see a bigger number there or you see even you know
number there or you see even you know something other than 3 255s in a row
something other than 3 255s in a row understand the number of hosts are
understand the number of hosts are getting smaller the last 255s you see on
getting smaller the last 255s you see on your screen the number is getting bigger
your screen the number is getting bigger for the number of hosts okay and just
for the number of hosts okay and just understand how to read this that's all
understand how to read this that's all you need to take away again I'm going to
you need to take away again I'm going to provide additional resources as I
provide additional resources as I provide in the last video go review them
provide in the last video go review them if you don't understand them you can
if you don't understand them you can always come to the Discord Channel you
always come to the Discord Channel you can always ask q a questions this is not
can always ask q a questions this is not an easy topic to pick up but it is a
an easy topic to pick up but it is a topic that I had to show you as part of
topic that I had to show you as part of networking
all right so in order to be successful in this course we are going to be
in this course we are going to be utilizing what is called a virtual
utilizing what is called a virtual machine now virtual machines are known
machine now virtual machines are known as VMS for short and a VM is just a
as VMS for short and a VM is just a machine on top of a machine and to give
machine on top of a machine and to give you an example I'm actually running this
you an example I'm actually running this Windows 10 instance that you see here
Windows 10 instance that you see here on top of my Windows 10 instance so here
on top of my Windows 10 instance so here you can see if I scroll up that I have a
you can see if I scroll up that I have a Windows 10 machine I also have a Linux
Windows 10 machine I also have a Linux machine sitting here if I were to
machine sitting here if I were to demaximize this you can see that I'm
demaximize this you can see that I'm actually running here a Windows machine
actually running here a Windows machine in the back this is my wife and I and
in the back this is my wife and I and you come through here we just blow it
you come through here we just blow it back up and we're back inside of our
back up and we're back inside of our machine so a virtual machine is just a
machine so a virtual machine is just a machine inside of a machine so what
machine inside of a machine so what we're going to be doing is we're going
we're going to be doing is we're going to be utilizing this to build out Labs
to be utilizing this to build out Labs that way we don't have to actually have
that way we don't have to actually have a bunch of Hardware we can just use this
a bunch of Hardware we can just use this for our our course and run what we need
for our our course and run what we need to on top of our own machine already now
to on top of our own machine already now this can get resource intensive so if
this can get resource intensive so if you are only utilizing something like
you are only utilizing something like eight gigabytes of RAM then you might
eight gigabytes of RAM then you might have some issues with this but you can
have some issues with this but you can still follow along when we get into the
still follow along when we get into the active directory portion you might run
active directory portion you might run into issues if you do not have at least
into issues if you do not have at least 16 gigabytes of RAM to utilize but we'll
16 gigabytes of RAM to utilize but we'll worry about that when we we get there
worry about that when we we get there there's still plenty of ways to follow
there's still plenty of ways to follow along throughout this whole course so
along throughout this whole course so another thing to note is that I use VMS
another thing to note is that I use VMS every single day this machine that you
every single day this machine that you see here is actually my day-to-day pen
see here is actually my day-to-day pen testing machine so I run a Kali Linux
testing machine so I run a Kali Linux instance on top of my Windows machine
instance on top of my Windows machine and utilize that to do penetration
and utilize that to do penetration testing so I'm going to demonstrate that
testing so I'm going to demonstrate that to you and how we're going to build out
to you and how we're going to build out our Labs with that and a lot of us in
our Labs with that and a lot of us in the industry run through VMS as opposed
the industry run through VMS as opposed to running it directly on metal or on a
to running it directly on metal or on a machine
machine so in order to utilize virtual machines
so in order to utilize virtual machines we first need some sort of virtual
we first need some sort of virtual machine software to play these so there
machine software to play these so there are two different ways that we can do
are two different ways that we can do this if you are on a Windows machine or
this if you are on a Windows machine or a Linux machine you can utilize VMware
a Linux machine you can utilize VMware Workstation player now if you type in
Workstation player now if you type in VMware Workstation player in Google the
VMware Workstation player in Google the first one here that says download VMware
first one here that says download VMware Workstation player you just click on
Workstation player you just click on that
that and if you are in a Mac environment
and if you are in a Mac environment you're going to be utilizing Oracle
you're going to be utilizing Oracle virtualbox so if you type in Oracle
virtualbox so if you type in Oracle virtualbox you come here and you go to
virtualbox you come here and you go to downloads
downloads you have your option there as well so in
you have your option there as well so in this course I will be using VMware
this course I will be using VMware Workstation player I'm going to be
Workstation player I'm going to be running it on top of Windows if you are
running it on top of Windows if you are using Mac that is absolutely fine you're
using Mac that is absolutely fine you're going to be following along just the
going to be following along just the same all you need to be able to do is
same all you need to be able to do is follow the same instructions that I give
follow the same instructions that I give you and you will be a-okay so if you
you and you will be a-okay so if you scroll down here you can see try
scroll down here you can see try workstation player for windows or try a
workstation player for windows or try a workstation player for Linux go ahead
workstation player for Linux go ahead and just select download now
and just select download now that should bring up a download and go
that should bring up a download and go ahead and save it
ahead and save it if you're doing virtualbox go ahead and
if you're doing virtualbox go ahead and download for OS X I will download the
download for OS X I will download the windows version just so that we can uh
windows version just so that we can uh we can see what that looks like as well
we can see what that looks like as well so I'll save both of these
so I'll save both of these so let's view our downloads and we've
so let's view our downloads and we've got VMware Workstation player here
got VMware Workstation player here I'm going to go ahead and open this one
I'm going to go ahead and open this one and we're going to install this
and this will be very point and click so next accept the agreement possibly
so next accept the agreement possibly give away our first child uh yeah we
give away our first child uh yeah we should go ahead and install the enhanced
should go ahead and install the enhanced keyboard driver while we have this
and then we don't need to enjoy join any Improvement programs or check for
Improvement programs or check for product update that's okay we will
product update that's okay we will install desktop start menu you check
install desktop start menu you check check your preferences as you like it
check your preferences as you like it I'm just going to install this
I'm just going to install this and this should just finish here in just
and this should just finish here in just a second
okay then you'll be brought to this screen once everything's done it should
screen once everything's done it should take about a minute or two and we're
take about a minute or two and we're going to go ahead and hit finish
going to go ahead and hit finish and it's going to want a restart to take
and it's going to want a restart to take effect you can go ahead and restart your
effect you can go ahead and restart your system I'm going to say no right now
system I'm going to say no right now let's go ahead and install virtualbox if
let's go ahead and install virtualbox if you are a Mac User
you are a Mac User we'll hit next
we'll hit next here
here next and yes and install
next and yes and install except
except and again vary point and click with the
and again vary point and click with the installation
installation select install and any options that do
select install and any options that do pop up
pop up and then we can start Oracle VM if we
and then we can start Oracle VM if we want let's go ahead and just start that
want let's go ahead and just start that this is what Oracle VM looks like
this is what Oracle VM looks like and let's see if we can start the VMware
and let's see if we can start the VMware Player here even though we need to
Player here even though we need to restart
and this is what VMware Workstation player looks like so here you can see
player looks like so here you can see that we have virtual machines we can
that we have virtual machines we can create new virtual machines open ones
create new virtual machines open ones Etc we'll get into that in the next
Etc we'll get into that in the next video so again if you are using Windows
video so again if you are using Windows or Linux this is probably what your view
or Linux this is probably what your view is going to look like for the rest of
is going to look like for the rest of the time if you are using Oracle on a
the time if you are using Oracle on a Mac this is what your view is going to
Mac this is what your view is going to look like another site Pro tip here is
look like another site Pro tip here is that I am using workstation Pro and I
that I am using workstation Pro and I might utilize this in some instances
might utilize this in some instances throughout the course other instances
throughout the course other instances I'll be utilizing the workstation player
I'll be utilizing the workstation player they are not much of a difference
they are not much of a difference especially in the beginning when we get
especially in the beginning when we get into the active directory portion it
into the active directory portion it might actually be worth it for you all
might actually be worth it for you all to download the VMware Pro trial because
to download the VMware Pro trial because the trial is 30 days and you can utilize
the trial is 30 days and you can utilize that to get through some sections and
that to get through some sections and actually have nice little Windows here
actually have nice little Windows here to to be clean and just have a pro
to to be clean and just have a pro Edition you can do everything that I'm
Edition you can do everything that I'm going to show you in the course on the
going to show you in the course on the player it just is that you have to open
player it just is that you have to open if you want to run more than one machine
if you want to run more than one machine you you'll just have to reopen the
you you'll just have to reopen the VMware Workstation player several times
VMware Workstation player several times to run multiple machines but that's okay
to run multiple machines but that's okay it just won't look like this nice clean
it just won't look like this nice clean layout where you could transfer between
layout where you could transfer between machines like I can do just here
machines like I can do just here so with that being said let's go ahead
so with that being said let's go ahead and move on to the next video we're
and move on to the next video we're going to be installing Kali Linux onto
going to be installing Kali Linux onto our VMware Workstation player
now that we've installed VMware or virtualbox we need to install Linux
virtualbox we need to install Linux we're going to be using a version of
we're going to be using a version of Linux called Kali Linux throughout this
Linux called Kali Linux throughout this course
course this version of Linux is a Debian based
this version of Linux is a Debian based distribution which is geared towards
distribution which is geared towards ethical hacking and penetration testing
ethical hacking and penetration testing so it's a special version of Linux that
so it's a special version of Linux that allows us to have all the tools in one
allows us to have all the tools in one place that will allow us to hack without
place that will allow us to hack without having to download these tools and
having to download these tools and install them on our own custom Linux
install them on our own custom Linux distribution so it's all kind of nicely
distribution so it's all kind of nicely built into one package
built into one package so if you go out to Google and you type
so if you go out to Google and you type in Kali Linux download you should see
in Kali Linux download you should see this link I'll put the link in the
this link I'll put the link in the description below as well but you should
description below as well but you should just be able to go to get Cali right
just be able to go to get Cali right here
here and you're going to be presented with a
and you're going to be presented with a couple of options here we're going to be
couple of options here we're going to be using a virtual machine in this course
using a virtual machine in this course so we're just going to go ahead and
so we're just going to go ahead and click on this virtual machine option
click on this virtual machine option and that's going to take us down just a
and that's going to take us down just a little bit here what you're going to do
little bit here what you're going to do is you're going to download the
is you're going to download the respective version that you need so if
respective version that you need so if you need VMware you download VMware
you need VMware you download VMware you're using virtualbox go ahead and
you're using virtualbox go ahead and download the virtualbox one
download the virtualbox one now they have a direct download which is
now they have a direct download which is a 7-Zip and they also have a torrent if
a 7-Zip and they also have a torrent if you know how to torrent
you know how to torrent what you're going to do is go ahead and
what you're going to do is go ahead and download the file that you need and
download the file that you need and while you're doing that if you do choose
while you're doing that if you do choose to download directly you're also going
to download directly you're also going to need a tool called 7-Zip or a way to
to need a tool called 7-Zip or a way to unzip this file so go ahead and start
unzip this file so go ahead and start your download while it's downloading
your download while it's downloading let's also go ahead and navigate to
let's also go ahead and navigate to 7-Zip so if you go to Google and you
7-Zip so if you go to Google and you look at 7-Zip you'll see this page here
look at 7-Zip you'll see this page here comes up you just go to download in here
comes up you just go to download in here you're going to download the file that
you're going to download the file that is for your respective system so here
is for your respective system so here I'm using Windows on 64-bit I would
I'm using Windows on 64-bit I would download this executable right here now
download this executable right here now if you're running on Linux here's where
if you're running on Linux here's where you download Linux if you're running on
you download Linux if you're running on Mac OS here's where you download for Mac
Mac OS here's where you download for Mac OS very straightforward I've already got
OS very straightforward I've already got this installed but what you need to do
this installed but what you need to do is just download this and literally
is just download this and literally click next through it make sure you get
click next through it make sure you get it installed
it installed go ahead and pause the video once that
go ahead and pause the video once that is installed 7zip that is and once you
is installed 7zip that is and once you have the actual Cali image downloaded go
have the actual Cali image downloaded go ahead and unpause the video I'll be here
ahead and unpause the video I'll be here waiting for you
waiting for you okay so your next step should look
okay so your next step should look something like this
something like this you have your 7-Zip file open you should
you have your 7-Zip file open you should see a folder located in there and the
see a folder located in there and the easiest thing is to just drag and drop
easiest thing is to just drag and drop this you can also right click and
this you can also right click and extract if you know where you want to
extract if you know where you want to extract it I created a folder called
extract it I created a folder called Cali I'm just going to grab this and I'm
Cali I'm just going to grab this and I'm going to drag it over and it's going to
going to drag it over and it's going to take a minute here just a few seconds
take a minute here just a few seconds honestly to unzip the file size of this
honestly to unzip the file size of this one at least for the VMware version is
one at least for the VMware version is around 11 gigabytes or 11 gigabytes
around 11 gigabytes or 11 gigabytes exactly unzip so make sure you have the
exactly unzip so make sure you have the space on your hard drive in order to do
space on your hard drive in order to do this
this now once you have it unzipped you can go
now once you have it unzipped you can go ahead and just double click in here
ahead and just double click in here you'll see a bunch of files if you have
you'll see a bunch of files if you have VMware installed you can actually just
VMware installed you can actually just double click on this vmx file and that
double click on this vmx file and that should open things up for you I'm just
should open things up for you I'm just going to show you the other way around
going to show you the other way around doing this as well
doing this as well so with VMware Workstation player open
so with VMware Workstation player open what you're going to want to do is go to
what you're going to want to do is go to open a virtual machine
and in the folder that you have you should see this vmx file as well again
should see this vmx file as well again you could double click it or you could
you could double click it or you could just open it through this what's going
just open it through this what's going to happen is it's going to open that
to happen is it's going to open that file here and you're going to want to
file here and you're going to want to edit this virtual machine settings once
edit this virtual machine settings once you have it loaded click on edit virtual
you have it loaded click on edit virtual machine settings
machine settings and in here we're going to want to First
and in here we're going to want to First change the amount of ram that we have
change the amount of ram that we have now this is dependent on your system if
now this is dependent on your system if you have like eight gigs of RAM or maybe
you have like eight gigs of RAM or maybe even 16 gigs of RAM you might want to
even 16 gigs of RAM you might want to try leaving it at 2 at first I'm going
try leaving it at 2 at first I'm going to bump mine up to four gigs which is
to bump mine up to four gigs which is 40.96 and I have a 128 gigs of RAM so I
40.96 and I have a 128 gigs of RAM so I have more than enough space to allocate
have more than enough space to allocate for this but if you again if you're on
for this but if you again if you're on like eight gigs of RAM probably not the
like eight gigs of RAM probably not the best idea to Jack this up Beyond two
best idea to Jack this up Beyond two honestly I would try it at one maybe two
honestly I would try it at one maybe two see how it works the other thing you're
see how it works the other thing you're going to make sure of is that you're
going to make sure of is that you're running on Nat Network so if you click
running on Nat Network so if you click on network adapter make sure that it
on network adapter make sure that it says Nat and that's selected once that's
says Nat and that's selected once that's selected go ahead and hit OK
selected go ahead and hit OK and then you're just going to hit play
and then you're just going to hit play Virtual Machine
Virtual Machine when it asks you what to do just say I
when it asks you what to do just say I copied it
copied it now from here it's going to take a
now from here it's going to take a minute for this to load you can just let
minute for this to load you can just let this run through it'll boot on its own
this run through it'll boot on its own once you are presented with the login
once you are presented with the login screen go ahead and unpause the video
screen go ahead and unpause the video but until then pause and I'll meet you
but until then pause and I'll meet you back when you're at the login screen
okay I'm at the login screen I'm going to make this a little bit bigger just so
to make this a little bit bigger just so we can see
we can see and from here what I'm going to do is
and from here what I'm going to do is I'm just going to type in the username
I'm just going to type in the username of Cali k-a-l-i and the password of Cali
of Cali k-a-l-i and the password of Cali k-a-l-i
k-a-l-i hit enter
and if you see this screen congratulations you have successfully
congratulations you have successfully installed the Kali Linux and you now
installed the Kali Linux and you now have it up and running
have it up and running in later videos we're going to cover
in later videos we're going to cover what we're going to be doing and how to
what we're going to be doing and how to use this and how to use Linux and all
use this and how to use Linux and all this but for now pat yourself on the
this but for now pat yourself on the back you've got Linux installed and
back you've got Linux installed and we're going to pause here and move on to
we're going to pause here and move on to the next video
okay so this video pertains to some updates we need to make to virtualbox
updates we need to make to virtualbox for quality of life so if you're not
for quality of life so if you're not using virtualbox you can go ahead and
using virtualbox you can go ahead and skip this video if you are Buckle in we
skip this video if you are Buckle in we just need to do a couple of quick
just need to do a couple of quick updates and then we should be good for
updates and then we should be good for the rest of the course
the rest of the course so go ahead and go out to Google and
so go ahead and go out to Google and Google virtualbox extension pack what
Google virtualbox extension pack what it's going to bring up is just the
it's going to bring up is just the downloads page of virtualbox so we're
downloads page of virtualbox so we're going to want to go here
going to want to go here and on this page if you look kind of
and on this page if you look kind of towards the middle you'll see that there
towards the middle you'll see that there is a virtual box extension pack here
is a virtual box extension pack here we're going to just click all supported
we're going to just click all supported platforms and that will automatically
platforms and that will automatically download the file that we need
download the file that we need so once that is downloaded and pause if
so once that is downloaded and pause if you need to go ahead and open virtualbox
you need to go ahead and open virtualbox and you can come in here and up at the
and you can come in here and up at the top we're going to go ahead and click on
top we're going to go ahead and click on preferences
preferences and from here we are interested in
and from here we are interested in extensions see extensions right here go
extensions see extensions right here go ahead and click on that there's a little
ahead and click on that there's a little plus sign we're going to go ahead and
plus sign we're going to go ahead and click on that
click on that and then you should have your downloads
and then you should have your downloads right here so we're going to take the
right here so we're going to take the downloads and just go ahead and install
downloads and just go ahead and install that hit install
that hit install read this give away your firstborn
read this give away your firstborn accept all the terms and you should be
accept all the terms and you should be good very quick install okay
good very quick install okay the second thing we need to do is we
the second thing we need to do is we need to come to the one tab appear above
need to come to the one tab appear above which is Network
which is Network we're going to go ahead and hit the
we're going to go ahead and hit the network button or this add button and
network button or this add button and we're going to add what is called a Nat
we're going to add what is called a Nat Network
Network okay and we're going to come in here and
okay and we're going to come in here and we're going to double click
we're going to double click and you can go ahead and keep these
and you can go ahead and keep these defaults I'm going to actually change
defaults I'm going to actually change them to
192.168.57.0 because that's what's going to be used through the rest of the
to be used through the rest of the course and that is what the cider
course and that is what the cider notation of my Cali machine and my key
notation of my Cali machine and my key Optics which you'll see later Etc all
Optics which you'll see later Etc all fell into this 57.0 so we're going to go
fell into this 57.0 so we're going to go ahead and keep it on this Nat Network
ahead and keep it on this Nat Network make sure you support the hcp go ahead
make sure you support the hcp go ahead and just hit OK hit OK
and just hit OK hit OK and then for a machine and make sure any
and then for a machine and make sure any machine that you use again any machine
machine that you use again any machine that you use in this course make sure
that you use in this course make sure you set it to Nat network if you're
you set it to Nat network if you're using virtualbox so you can come in here
using virtualbox so you can come in here click on a machine like this mail
click on a machine like this mail machine I have here you can just click
machine I have here you can just click on that settings go to network and then
on that settings go to network and then you can go ahead and just go to Nat
you can go ahead and just go to Nat Network all right and that name right
Network all right and that name right here you see name that Network that's
here you see name that Network that's all we're going to use that'll
all we're going to use that'll automatically set it up so when you have
automatically set it up so when you have a Cali machine running later and you
a Cali machine running later and you have kiopteryx or another box running or
have kiopteryx or another box running or even when we build out an active
even when we build out an active directory lab you need to make sure that
directory lab you need to make sure that you're running that net Network so that
you're running that net Network so that all the machines are on the same subnet
all the machines are on the same subnet if you don't you might run into a
if you don't you might run into a situation where the same IP comes up for
situation where the same IP comes up for the same machine and then they're
the same machine and then they're conflicting with each other or you get
conflicting with each other or you get on different networks and some weird
on different networks and some weird stuff happens so make sure again that
stuff happens so make sure again that it's imperative that you're setting that
it's imperative that you're setting that net Network for every single machine
net Network for every single machine that you're setting up so with that said
that you're setting up so with that said we're going to go ahead and move on to
we're going to go ahead and move on to the next video in this section
the first thing I'd like to do before we get started with any commands or
get started with any commands or anything like that is just take a look
anything like that is just take a look around Kali Linux and kind of
around Kali Linux and kind of demonstrate why a pen tester or ethical
demonstrate why a pen tester or ethical hacker might use this distribution of 1x
hacker might use this distribution of 1x now throughout the course as stated in
now throughout the course as stated in the last video you might see a different
the last video you might see a different version of this pop up as I recorded
version of this pop up as I recorded videos on some of the older versions
videos on some of the older versions everything should still work just as is
everything should still work just as is you just might see a different look and
you just might see a different look and feel to some of the Cali interface but
feel to some of the Cali interface but all the commands I'm going to show you
all the commands I'm going to show you everything that we do is going to be the
everything that we do is going to be the same so let's take a look and just
same so let's take a look and just explore Kali Linux just for a bit so if
explore Kali Linux just for a bit so if we come up here into the corner and we
we come up here into the corner and we just click on the little Cali logo you
just click on the little Cali logo you can see that we have nice things broken
can see that we have nice things broken out for us so we've got these favorites
out for us so we've got these favorites up here which we have our terminal which
up here which we have our terminal which we're going to be living in essentially
we're going to be living in essentially we've got a text editor we've got a web
we've got a text editor we've got a web browser which is basically Firefox we've
browser which is basically Firefox we've got some other tool down here docs Etc
got some other tool down here docs Etc the other thing that we can come scroll
the other thing that we can come scroll through is we can see that we have
through is we can see that we have different applications in here if we
different applications in here if we look at the different sections these
look at the different sections these kind of go in order which we haven't
kind of go in order which we haven't covered quite yet but in the order of
covered quite yet but in the order of how a hack might go down so information
how a hack might go down so information gathering is usually the first step you
gathering is usually the first step you can come in here look through this and
can come in here look through this and here's a bunch of tools related to
here's a bunch of tools related to information gathering you can even click
information gathering you can even click into these and go deeper if you wanted
into these and go deeper if you wanted to related to specific things so DNS or
to related to specific things so DNS or SMB or open source intelligence
SMB or open source intelligence all of this that's in here this is just
all of this that's in here this is just built in tools so let's say we're coming
built in tools so let's say we're coming in here we want to do a wireless attack
in here we want to do a wireless attack well we go to wireless Stacks got a
well we go to wireless Stacks got a bunch of tools already built in so Kali
bunch of tools already built in so Kali Linux is just essentially a ethical
Linux is just essentially a ethical hacking distribution of Linux and it's
hacking distribution of Linux and it's built on Debian so if you've ever used
built on Debian so if you've ever used something like Ubuntu or anything along
something like Ubuntu or anything along those lines of a Debian distribution
those lines of a Debian distribution this is all going to feel really
this is all going to feel really familiar to you with just a bunch of
familiar to you with just a bunch of tools built in on top of it so fairly
tools built in on top of it so fairly straightforward they do have some nice
straightforward they do have some nice Tools in here you can come through and
Tools in here you can come through and utilize these a lot of this is already
utilize these a lot of this is already built in and we're going to take a look
built in and we're going to take a look at that as we go okay so the next thing
at that as we go okay so the next thing that we're going to do is and throughout
that we're going to do is and throughout the rest of this course is start looking
the rest of this course is start looking at the terminal so if you come up here
at the terminal so if you come up here you'll see that we have a terminal now
you'll see that we have a terminal now mostly everything that we do is going to
mostly everything that we do is going to be done in this terminal here now this
be done in this terminal here now this is almost like accessing the command
is almost like accessing the command line so if you're using a command line
line so if you're using a command line like in Windows for example if you've
like in Windows for example if you've ever used a command line if not that's
ever used a command line if not that's okay but we do a lot of this from this
okay but we do a lot of this from this interface as opposed to maybe utilizing
interface as opposed to maybe utilizing a GUI bass interface where if we clicked
a GUI bass interface where if we clicked a folder this might look more familiar
a folder this might look more familiar to you if you're a Windows or Mac User
to you if you're a Windows or Mac User you come in here you have this kind of
you come in here you have this kind of area yeah yeah we can do that and
area yeah yeah we can do that and sometimes we'll utilize this but a lot
sometimes we'll utilize this but a lot of times we're going to be living right
of times we're going to be living right here okay so as we move forward we're
here okay so as we move forward we're going to start talking about this
going to start talking about this command line how we can utilize it and
command line how we can utilize it and use it to our advantage and then we'll
use it to our advantage and then we'll do some tips and tricks and hopefully
do some tips and tricks and hopefully learn some pretty neat stuff as we go so
learn some pretty neat stuff as we go so in the next video I'm going going to
in the next video I'm going going to cover the sudo feature which I think is
cover the sudo feature which I think is important it's something that was
important it's something that was brought in now originally we had
brought in now originally we had something called a root permission and
something called a root permission and we'll talk about that that has changed
we'll talk about that that has changed since 2020.1 moving forward so we're
since 2020.1 moving forward so we're introducing that into this course and
introducing that into this course and we'll talk options that you have so
we'll talk options that you have so let's go ahead and move to the next
let's go ahead and move to the next video where we talk about the sudo
video where we talk about the sudo feature
all right so before we look at any commands or learn any command line we
commands or learn any command line we have to talk about sudo Sudo is very
have to talk about sudo Sudo is very important and what had happened
important and what had happened previously was that in the earlier
previously was that in the earlier versions of Kali Linux we ran as a user
versions of Kali Linux we ran as a user called root root is the ultimate user
called root root is the ultimate user you could think of it as the
you could think of it as the administrator of the machine now we're
administrator of the machine now we're running as a user called Cali so we
running as a user called Cali so we don't have root privileges directly this
don't have root privileges directly this is as an improved security feature
is as an improved security feature because we should be running only
because we should be running only certain commands when we need to as the
certain commands when we need to as the root user
root user so what we're going to see is we're
so what we're going to see is we're going to see how we can run commands as
going to see how we can run commands as an elevated privilege and we're going to
an elevated privilege and we're going to do that with sudo which stands for super
do that with sudo which stands for super user do they just kind of shortened it
user do they just kind of shortened it so we just have sudo now okay now with
so we just have sudo now okay now with sudo what we're doing is we're saying
sudo what we're doing is we're saying Hey I want to run a command elevated I
Hey I want to run a command elevated I want to run this as a higher user in
want to run this as a higher user in this instance we can say I want to run
this instance we can say I want to run the command as root why is that
the command as root why is that important well let's take a look at an
important well let's take a look at an example let's say that I wanted to look
example let's say that I wanted to look at a very sensitive file now one
at a very sensitive file now one sensitive file in our system is the Etsy
sensitive file in our system is the Etsy Shadow file you can see cat
Shadow file you can see cat Etsy like this Etsy Shadow and you don't
Etsy like this Etsy Shadow and you don't have to follow along right now you don't
have to follow along right now you don't have to really understand what's going
have to really understand what's going on if you've never seen Linux all I'm
on if you've never seen Linux all I'm doing is saying hey I want to print out
doing is saying hey I want to print out this file I want to look at it okay and
this file I want to look at it okay and for here I can't see it it says
for here I can't see it it says permission denied you don't have the
permission denied you don't have the access to see this file that's a good
access to see this file that's a good thing but if I was the root user or
thing but if I was the root user or somebody that had elevated privileges I
somebody that had elevated privileges I could see it so I could say sudo
could see it so I could say sudo cat
cat Etsy Shadow like this
Etsy Shadow like this okay and it's going to say what is your
okay and it's going to say what is your password for Cali I'm gonna go ahead and
password for Cali I'm gonna go ahead and say Cali k-a-l-i
say Cali k-a-l-i hit enter
hit enter and now I can see that I have access to
and now I can see that I have access to this file and this file is very
this file and this file is very sensitive we'll talk about this later on
sensitive we'll talk about this later on in the course but sensitive file okay so
in the course but sensitive file okay so when we're looking at it I ran that
when we're looking at it I ran that command specifically as the root user as
command specifically as the root user as the root user I'm able to see okay this
the root user I'm able to see okay this file now
file now why or what's going on here well we're
why or what's going on here well we're running that specific Command right and
running that specific Command right and we're still staying as Cali we're doing
we're still staying as Cali we're doing this in a kind of one-off scenario so
this in a kind of one-off scenario so there will be times where something that
there will be times where something that you run in this course might require
you run in this course might require sudo or you can run the command without
sudo or you can run the command without sudo but you notice something doesn't
sudo but you notice something doesn't work so best practice for this is saying
work so best practice for this is saying hey let's go ahead and just run mostly
hey let's go ahead and just run mostly everything that I'm showing you
everything that I'm showing you command-wise in this course that's not
command-wise in this course that's not best practice overall usually you should
best practice overall usually you should run things just as a regular user if you
run things just as a regular user if you get permissions blocked then run it as
get permissions blocked then run it as pseudo as necessary now the other thing
pseudo as necessary now the other thing to point out and we'll talk about this
to point out and we'll talk about this again in later on in the course but why
again in later on in the course but why can we do this is because this user is
can we do this is because this user is part of what's called a pseudors file
part of what's called a pseudors file meaning we can have this permission not
meaning we can have this permission not any user can come in here say we made a
any user can come in here say we made a new user and we just called the user
new user and we just called the user John we can't just take John and just go
John we can't just take John and just go ahead and then just run these commands
ahead and then just run these commands as root no John has to have the
as root no John has to have the permission to do this so you can think
permission to do this so you can think of Cali as being an administrator but
of Cali as being an administrator but only when we utilize that access or that
only when we utilize that access or that privilege okay the other thing I want to
privilege okay the other thing I want to show you though is that we can switch
show you though is that we can switch over to root if we want to we can come
over to root if we want to we can come in here and we can say sudo switch user
in here and we can say sudo switch user Dash just like that and then I'll put us
Dash just like that and then I'll put us into root now you can see okay we're
into root now you can see okay we're running root at Cali and that's only for
running root at Cali and that's only for this instance
this instance you can if you want I'm not going to
you can if you want I'm not going to demonstrate how to do this but you can
demonstrate how to do this but you can if you want change the root password log
if you want change the root password log out and log back in as root and run
out and log back in as root and run through this course as root again that's
through this course as root again that's not best security practice but that
not best security practice but that feature is available to you if you are a
feature is available to you if you are a Linux user that is comfortable with
Linux user that is comfortable with Linux comfortable with running as root
Linux comfortable with running as root and you want the easy path otherwise I
and you want the easy path otherwise I highly recommend just staying as Cali
highly recommend just staying as Cali running as pseudo privileges as you need
running as pseudo privileges as you need it and then moving forward but this is a
it and then moving forward but this is a quick way to switch into root if you
quick way to switch into root if you need to sometimes even running sudo
need to sometimes even running sudo causes some issues so switching to root
causes some issues so switching to root to run a command is Okay what we can do
to run a command is Okay what we can do here too is the demonstration is we can
here too is the demonstration is we can go file new tab and look at a new
go file new tab and look at a new instance and you'll see that this
instance and you'll see that this instance of root is only good for this
instance of root is only good for this tab here once we start a new tab we're
tab here once we start a new tab we're going to be brought back right back to
going to be brought back right back to Cali Cali you can see that from the Top
Cali Cali you can see that from the Top Line in the tab as well so just keep
Line in the tab as well so just keep note of this when you're running
note of this when you're running commands in this course if you see
commands in this course if you see something again try running it with sudo
something again try running it with sudo if it's not working or if it says access
if it's not working or if it says access denied then you know hey I need to run
denied then you know hey I need to run sudo very very very important okay I'm
sudo very very very important okay I'm trying to drive that in into your brains
trying to drive that in into your brains right now so from here we're going to
right now so from here we're going to move on we're going to start looking at
move on we're going to start looking at how to navigate around the file system
how to navigate around the file system taking a look at everything from a
taking a look at everything from a bigger picture and diving into terminal
bigger picture and diving into terminal so I will see you over in the next video
now we're going to take a look at the Linux terminal and if you're a user of a
Linux terminal and if you're a user of a regular computer like Windows or even
regular computer like Windows or even Mac OS you are probably used to using
Mac OS you are probably used to using what is called a GUI or a graphical user
what is called a GUI or a graphical user interface
interface and we can do this with our version of
and we can do this with our version of Linux we can come in here and if we want
Linux we can come in here and if we want to like go to folders We can absolutely
to like go to folders We can absolutely open this and go to folders we've got
open this and go to folders we've got the ability to go to Firefox we've got
the ability to go to Firefox we've got all of our Tools in here that we want to
all of our Tools in here that we want to use or look at and we have a graphical
use or look at and we have a graphical user interface
user interface however a lot of our time is going to be
however a lot of our time is going to be spent on the command line and using a
spent on the command line and using a terminal so it's very important that we
terminal so it's very important that we learn how to use a terminal in Linux
learn how to use a terminal in Linux so looking at our terminal here we can
so looking at our terminal here we can see a few things before we even get
see a few things before we even get started
started the first thing is that we have a Cali
the first thing is that we have a Cali at Cali
at Cali what does that mean well the first
what does that mean well the first instance here is Cali that is your user
instance here is Cali that is your user so remember when we first logged in we
so remember when we first logged in we logged in as Cali and that is our user
logged in as Cali and that is our user so if we ever switch over to root we'll
so if we ever switch over to root we'll see root here the second part of this is
see root here the second part of this is our hostname so our computer name
our hostname so our computer name happens to also be Cali if you change
happens to also be Cali if you change your host name you could say whatever
your host name you could say whatever you wanted to say here
you wanted to say here the last little part of this is this
the last little part of this is this attilda this is actually the directory
attilda this is actually the directory that you are currently in so this is a
that you are currently in so this is a quick way to say what user am I what
quick way to say what user am I what workstation am I on and what directory
workstation am I on and what directory am I in
am I in now we can take a look at what directory
now we can take a look at what directory we are in with the PWD command and that
we are in with the PWD command and that stands for print working directory and
stands for print working directory and in this instance you can see we are in
in this instance you can see we are in the home forward slash Cali folder and
the home forward slash Cali folder and that is the equivalent of being in the
that is the equivalent of being in the attilda so if you see the Attila that
attilda so if you see the Attila that just means you are in your users home
just means you are in your users home folder so if we were a root user we
folder so if we were a root user we would actually be in the forward slash
would actually be in the forward slash root folder as opposed to the home Cali
root folder as opposed to the home Cali folder so the attilda means something
folder so the attilda means something different for every user that you're on
different for every user that you're on the next thing we're going to look at is
the next thing we're going to look at is the change directory feature so imagine
the change directory feature so imagine that we are in our folder here so if we
that we are in our folder here so if we go to like I don't know our desktop
go to like I don't know our desktop and we're sitting in our Cali folder
and we're sitting in our Cali folder this is really what we're looking at so
this is really what we're looking at so we're looking at Cali right here and we
we're looking at Cali right here and we want to get out of this Cali folder and
want to get out of this Cali folder and change into another folder say like I
change into another folder say like I don't know downloads for example if we
don't know downloads for example if we go into downloads it's very easy to
go into downloads it's very easy to click into but how do we navigate around
click into but how do we navigate around on the terminal I'm going to show you
on the terminal I'm going to show you how to do that so the first thing we're
how to do that so the first thing we're going to do is use the CD command that
going to do is use the CD command that stands for change directory now if we do
stands for change directory now if we do change directory dot dot that says I
change directory dot dot that says I want to go backwards so if I do that
want to go backwards so if I do that now you can see that we are in the
now you can see that we are in the forward slash home folder but we can
forward slash home folder but we can also do a PWD print the working
also do a PWD print the working directory and you can see that we are in
directory and you can see that we are in the home folder
the home folder now can we go any further back well
now can we go any further back well let's try CD dot dot again
let's try CD dot dot again and now you can see we are at a forward
and now you can see we are at a forward slash if we do a PWD we are at a forward
slash if we do a PWD we are at a forward slash and one more time I'm going to CD
slash and one more time I'm going to CD dot dot and see if anything happens
dot dot and see if anything happens nothing happens here we cannot change
nothing happens here we cannot change any further we are in what is called our
any further we are in what is called our base directory so if you see a forward
base directory so if you see a forward slash think of that as the base folder
slash think of that as the base folder you cannot go any further back from that
you cannot go any further back from that now I'm going to clear my screen if you
now I'm going to clear my screen if you want to clear your screen you just hit
want to clear your screen you just hit Ctrl l
Ctrl l like that and that'll clear the screen
like that and that'll clear the screen and from here we are going to look at
and from here we are going to look at what is in our base folder and to do
what is in our base folder and to do that we can use a tool called list which
that we can use a tool called list which is LS
is LS so from here we can see different colors
so from here we can see different colors and different things and we can tell
and different things and we can tell based on the colors though these color
based on the colors though these color schemes are not the greatest in the
schemes are not the greatest in the newest Kali Linux we could still see
newest Kali Linux we could still see like hey this darker version of Blue is
like hey this darker version of Blue is actually a folder where some of these
actually a folder where some of these other things are actually files we don't
other things are actually files we don't have to worry too much about that right
have to worry too much about that right now but we just came out of the home
now but we just came out of the home folder so we can see here that we have a
folder so we can see here that we have a bunch of files and folders and let's say
bunch of files and folders and let's say we want to go back to the home folder
we want to go back to the home folder well we can see the home
well we can see the home and I'm going to start typing H and I'm
and I'm going to start typing H and I'm just going to hit Tab and because
just going to hit Tab and because there's nothing else in here with an H
there's nothing else in here with an H we don't have to worry too much it will
we don't have to worry too much it will just auto-complete to the home folder
just auto-complete to the home folder now for example if there's a bunch of
now for example if there's a bunch of L's I'm going to back up really quick
L's I'm going to back up really quick before I hit enter
before I hit enter if I wanted to try something that has
if I wanted to try something that has multiple items in here if I tried the L
multiple items in here if I tried the L and I hit tab you're going to see that
and I hit tab you're going to see that there's going to be a lot of options for
there's going to be a lot of options for me to go through and depending on what
me to go through and depending on what you have is when you can auto complete
you have is when you can auto complete so if I start typing l o it should know
so if I start typing l o it should know that there's only one Lo and I can Tab
that there's only one Lo and I can Tab and autocomplete the rest so you just
and autocomplete the rest so you just have to be able to get to a point where
have to be able to get to a point where you can Tab out or if you know the first
you can Tab out or if you know the first letter of the file that you're looking
letter of the file that you're looking for you can hit tab on that and you can
for you can hit tab on that and you can see okay here's where I need to be or
see okay here's where I need to be or here's what I can look at with
here's what I can look at with everything that starts with that letter
everything that starts with that letter I'm going to delete this and we're going
I'm going to delete this and we're going to CD back into home
to CD back into home we're going to LS to list the contents
we're going to LS to list the contents of home which is just our Cali folder so
of home which is just our Cali folder so I'm going to CD into Cali
and if I LS from here you can see that I have our desktop documents downloads
have our desktop documents downloads similar to what we saw in the graphical
similar to what we saw in the graphical user interface when we were in the
user interface when we were in the folder now we can see it from our
folder now we can see it from our terminal now before we go diving deeper
terminal now before we go diving deeper into these folders
into these folders something that I want to look at is what
something that I want to look at is what if I wanted to get to this Etsy folder
if I wanted to get to this Etsy folder over here so there's this Etsy folder
over here so there's this Etsy folder that was in our base
that was in our base now if I try to CD into Etsy from here
now if I try to CD into Etsy from here nothing's going to work I'm tabbing
nothing's going to work I'm tabbing nothing works if I try CD Etsy it's
nothing works if I try CD Etsy it's going to say I can't find it
going to say I can't find it so what does that mean well when we
so what does that mean well when we change directories we can only change
change directories we can only change directories from the folders that we
directories from the folders that we have available to us so I can only
have available to us so I can only change directories into these folders by
change directories into these folders by using that sort of nomenclature however
using that sort of nomenclature however if I can provide a full directory or a
if I can provide a full directory or a full path then I can CD from any folder
full path then I can CD from any folder that I'm in so if I go CD forward slash
that I'm in so if I go CD forward slash because remember we have the base here
because remember we have the base here well then I can say forward slash
well then I can say forward slash ET start typing that out and guess what
ET start typing that out and guess what I get Etsy here and if I wanted to dive
I get Etsy here and if I wanted to dive deeper into what folders are in there I
deeper into what folders are in there I could hit Tab and I could see all the
could hit Tab and I could see all the folders that are available in the Etsy
folders that are available in the Etsy folder to complete my task now if I hit
folder to complete my task now if I hit enter
enter I will be brought into the Etsy folder
I will be brought into the Etsy folder and similarly I can hit LS and see all
and similarly I can hit LS and see all the files and folders that are in here
the files and folders that are in here now let's just CD here and I'm going to
now let's just CD here and I'm going to use the attilda and that's going to get
use the attilda and that's going to get us back to our home folder
us back to our home folder I'm going to control L to clear screen
I'm going to control L to clear screen and then I'm going to LS again you're
and then I'm going to LS again you're going to see we're back where we just
going to see we're back where we just were
were now in this case what if I wanted to
now in this case what if I wanted to list the files of the Etsy folder well
list the files of the Etsy folder well it's the same thing I could do LS
it's the same thing I could do LS forward slash Etsy
forward slash Etsy and that will list all the files as if I
and that will list all the files as if I were sitting in that folder so just know
were sitting in that folder so just know that you can list folders and files you
that you can list folders and files you can change directories from being it
can change directories from being it within another directory it doesn't have
within another directory it doesn't have to be in that same up and down tree that
to be in that same up and down tree that I was showing you there's a lot more
I was showing you there's a lot more robustness to these commands same thing
robustness to these commands same thing if we LS in here we could take a look at
if we LS in here we could take a look at the folders and we don't have to change
the folders and we don't have to change the directory to see what's in these
the directory to see what's in these folders We can just LS desktop for
folders We can just LS desktop for example and start Auto tab completing
example and start Auto tab completing there's nothing in there I do have
there's nothing in there I do have something in the downloads folder just
something in the downloads folder just because I changed my picture I put our
because I changed my picture I put our TCM security logo in there so I have
TCM security logo in there so I have that in the downloads folder but it's
that in the downloads folder but it's completely normal not to have anything
completely normal not to have anything in your desktop or downloads when you
in your desktop or downloads when you first install Cali and again we can
first install Cali and again we can achieve the same thing by seeding into
achieve the same thing by seeding into downloads and then hitting LS
downloads and then hitting LS you have the same object here as you saw
you have the same object here as you saw before except we're just now in that
before except we're just now in that folder so you have to declare the folder
folder so you have to declare the folder or be within the folder to see the
or be within the folder to see the contents okay now let's go ahead and CD
contents okay now let's go ahead and CD back to the base folder you could CD dot
back to the base folder you could CD dot dot or just use the attilda I'm going to
dot or just use the attilda I'm going to clear my screen
clear my screen and from here we want to talk about
and from here we want to talk about making a directory so let's make a
making a directory so let's make a directory I'm going to make a directory
directory I'm going to make a directory called Heath you can just use your first
called Heath you can just use your first name if you want
name if you want and then when you LS in here
and then when you LS in here you can see now that the heath directory
you can see now that the heath directory is here
is here and I could see the end of that heat
and I could see the end of that heat directory I can LS in that directory and
directory I can LS in that directory and there's not going to be anything in
there's not going to be anything in there
there so I'm going to go ahead and backup one
so I'm going to go ahead and backup one and now I'm going to show you how to
and now I'm going to show you how to remove a directory or remove a folder so
remove a directory or remove a folder so you say rmdir
you say rmdir and you're going to go ahead and just
and you're going to go ahead and just say he
say he and that will remove that these commands
and that will remove that these commands work exactly the same as everything else
work exactly the same as everything else if I wanted to make a directory in the
if I wanted to make a directory in the base folder I could totally make dur
base folder I could totally make dur forward slash eat if I wanted to and I
forward slash eat if I wanted to and I could also remove that from here so
could also remove that from here so again it doesn't matter exactly where
again it doesn't matter exactly where you're at as long as you're using full
you're at as long as you're using full file path
file path okay so I've cleared my screen and now I
okay so I've cleared my screen and now I want to run LS
want to run LS and you see in LS that we just have a
and you see in LS that we just have a bunch of folders that's not entirely
bunch of folders that's not entirely true
true what we're going to do is we're going to
what we're going to do is we're going to do an ls-la
do an ls-la and I like to think of this as list all
and I like to think of this as list all but really it stands for long all
but really it stands for long all and if we hit enter you can see that
and if we hit enter you can see that there's a bunch of new files in here and
there's a bunch of new files in here and folders actually so from this we can see
folders actually so from this we can see that we have
that we have a like a bash history we've got uh dot
a like a bash history we've got uh dot Java folder anything with a DOT is
Java folder anything with a DOT is considered a hidden file we won't see
considered a hidden file we won't see that when we're using the ls command we
that when we're using the ls command we actually have to do a dash La command
actually have to do a dash La command and this is a great time to actually
and this is a great time to actually take a look at what these sub commands
take a look at what these sub commands are and how are some ways that we can
are and how are some ways that we can identify what these things mean so I'm
identify what these things mean so I'm going to show you a website first and I
going to show you a website first and I think this website is awesome we can go
think this website is awesome we can go to something like explain shell.com so
to something like explain shell.com so it is
it is explain shell you can see it
explain shell you can see it autocompleting up there but explain
autocompleting up there but explain shell.com
shell.com and if you came in here and you wanted
and if you came in here and you wanted to take a look let me make this a little
to take a look let me make this a little bit bigger if you wanted to take a look
bit bigger if you wanted to take a look at like ls-la you could say okay explain
at like ls-la you could say okay explain this to me
this to me and it'll tell you okay the first part
and it'll tell you okay the first part is LS that means list directory contents
is LS that means list directory contents remember I called it the list command
remember I called it the list command that's what it is now what does that La
that's what it is now what does that La do well the L you hover over it says use
do well the L you hover over it says use long listing format and the a says use
long listing format and the a says use all okay so do not ignore entries
all okay so do not ignore entries starting with a DOT which is what we're
starting with a DOT which is what we're looking for and the long listing just
looking for and the long listing just gives us more detail gives us these file
gives us more detail gives us these file permissions which we'll get into a
permissions which we'll get into a little bit later and who owns it and
little bit later and who owns it and what the file size is the directory
what the file size is the directory Etc et cetera we'll get down into that
Etc et cetera we'll get down into that in just a few videos
in just a few videos we can also use what are called Man
we can also use what are called Man pages I'm going to control L again if we
pages I'm going to control L again if we do man LS man stands for manual so man
do man LS man stands for manual so man LS we can see in here that LS means list
LS we can see in here that LS means list directory contents great Dash a stands
directory contents great Dash a stands for all do not ignore entry starting
for all do not ignore entry starting with the period same thing as we saw
with the period same thing as we saw before we could scroll down look for the
before we could scroll down look for the L portion of this and we'll see that we
L portion of this and we'll see that we have used a long listing format you can
have used a long listing format you can hit Q to quit this
hit Q to quit this so if you don't have internet access for
so if you don't have internet access for example you can use the Man pages I like
example you can use the Man pages I like using explain shell.com I think it's
using explain shell.com I think it's pretty awesome but man works very quick
pretty awesome but man works very quick and from the terminal you don't have to
and from the terminal you don't have to leave or do anything another thing that
leave or do anything another thing that you can do is LS dash dash help
you can do is LS dash dash help and that will give you similar to The
and that will give you similar to The Man pages though not as old detail I
Man pages though not as old detail I guess is the best way to say it and you
guess is the best way to say it and you come in here and you can see the same
come in here and you can see the same kind of switches and commands that were
kind of switches and commands that were in here so dash dash help works for a
in here so dash dash help works for a lot of commands it's one of those that
lot of commands it's one of those that you should know and you should try if
you should know and you should try if you have any questions about what you're
you have any questions about what you're trying to do it's a great resource so if
trying to do it's a great resource so if we LS la
we LS la we can CD into one of these hidden
we can CD into one of these hidden folders like we can CD into dot cache
folders like we can CD into dot cache for example
for example and we just LS that you can see that
and we just LS that you can see that there's actually stuff in the cache in
there's actually stuff in the cache in here so we're not going to get into this
here so we're not going to get into this I just want to show you that hidden
I just want to show you that hidden files and folders do exist so if you're
files and folders do exist so if you're looking for something especially pen
looking for something especially pen test related something might be hidden
test related something might be hidden if you're on a Linux machine you might
if you're on a Linux machine you might need to do ls-la to see a hidden file
need to do ls-la to see a hidden file and they're incredibly easy to see as
and they're incredibly easy to see as you can see for yourself let's go ahead
you can see for yourself let's go ahead and CD back to our home folder and from
and CD back to our home folder and from here I'm going to show you a couple of
here I'm going to show you a couple of things that we're going to explain later
things that we're going to explain later on but I just kind of want to get you
on but I just kind of want to get you familiar with it the first thing I want
familiar with it the first thing I want to show you is the echo command if we go
to show you is the echo command if we go Echo and we use a single apostrophe and
Echo and we use a single apostrophe and we say hi like this that's just going to
we say hi like this that's just going to Echo out to the screen we'll get into
Echo out to the screen we'll get into the echo command a little bit later on
the echo command a little bit later on in the course what we're doing here is
in the course what we're doing here is we're going to Echo this into a file so
we're going to Echo this into a file so I'm going to say hi and then I'm going
I'm going to say hi and then I'm going to put that file I'm going to use this
to put that file I'm going to use this greater than symbol and that's going to
greater than symbol and that's going to be a region Direction operator and I'm
be a region Direction operator and I'm going to say hey just go ahead and make
going to say hey just go ahead and make a file called test.txt
a file called test.txt and while you don't need to know this
and while you don't need to know this yet if I ran Cat on this on test.txt
yet if I ran Cat on this on test.txt you'll see that it prints back out High
you'll see that it prints back out High okay so I just want to have this file
okay so I just want to have this file here that we created and what we're
here that we created and what we're going to do is we're going to just
going to do is we're going to just quickly LS we're going to see that it's
quickly LS we're going to see that it's there you can see that there are color
there you can see that there are color differences for files and folders again
differences for files and folders again and the reason we're making this in this
and the reason we're making this in this video is I want to show you the copy
video is I want to show you the copy command so if we run copy on this we
command so if we run copy on this we could say copy test.txt what I want to
could say copy test.txt what I want to do is I want to copy this into the
do is I want to copy this into the downloads folder so I can just say copy
downloads folder so I can just say copy test.txt into downloads
test.txt into downloads if we LS we'll see that test.text is
if we LS we'll see that test.text is here we're making a copy if we LS
here we're making a copy if we LS downloads we can see that test.text is
downloads we can see that test.text is actually in there as well
actually in there as well so similar with the remove directory we
so similar with the remove directory we can use the RM command and what we're
can use the RM command and what we're going to do is remove that file and
going to do is remove that file and again we don't have to be in the
again we don't have to be in the directory to remove it we can call the
directory to remove it we can call the directory path and then test.text
directory path and then test.text if we hit LS on downloads again we can
if we hit LS on downloads again we can just go ahead and hit enter and you're
just go ahead and hit enter and you're going to see that there is no test.txt
going to see that there is no test.txt in there anymore but if we LS here
in there anymore but if we LS here you'll see that test.text does exist so
you'll see that test.text does exist so I'm going to go ahead and control l
I'm going to go ahead and control l the opposite of this is the move command
the opposite of this is the move command now if I move test.txt and I put that
now if I move test.txt and I put that into downloads
into downloads if I LS now
if I LS now you're going to see that there is no
you're going to see that there is no test.txt in here why is that well if we
test.txt in here why is that well if we LS downloads you're gonna see that we
LS downloads you're gonna see that we moved it so remember copy leaves an
moved it so remember copy leaves an original version wherever you copied
original version wherever you copied from move completely moves it so the CP
from move completely moves it so the CP and the MV commands are what you need to
and the MV commands are what you need to know there now while we're on this what
know there now while we're on this what we're going to do is we're going to look
we're going to do is we're going to look at a command called locate so locate's
at a command called locate so locate's pretty awesome if we did locate and say
pretty awesome if we did locate and say I wanted to find out where that
I wanted to find out where that test.text file is I could do locate
test.text file is I could do locate test.text and we're probably not going
test.text and we're probably not going to get anything back quite yet now if
to get anything back quite yet now if we're looking through this none of these
we're looking through this none of these files are where we're at so there are
files are where we're at so there are some test.text files on this machine but
some test.text files on this machine but we're not seeing the one that we created
we're not seeing the one that we created so say that we created a file we can't
so say that we created a file we can't remember where we put it and we just
remember where we put it and we just want to go search for it and find it
want to go search for it and find it what we can do is we can say update DB
what we can do is we can say update DB and you're going to see that we actually
and you're going to see that we actually get a denied why are we getting
get a denied why are we getting permission denied well this comes back
permission denied well this comes back to sudo so let's go ahead and sudo
to sudo so let's go ahead and sudo update
update DB
DB you're going to enter in your sudo
you're going to enter in your sudo password
password it's going to update the database and
it's going to update the database and now if we do locate test.txt and you can
now if we do locate test.txt and you can just when you see a screen like this by
just when you see a screen like this by the way where it's kind of semi-gray if
the way where it's kind of semi-gray if you just hit the right arrow that will
you just hit the right arrow that will go ahead and autocomplete because it
go ahead and autocomplete because it remembers your last command
remembers your last command you can hit that
you can hit that and you can now see that the first entry
and you can now see that the first entry in here is home Cali downloads test.text
in here is home Cali downloads test.text so now the database is updated and it
so now the database is updated and it finds it one other thing to mention I
finds it one other thing to mention I just talked about Auto completing with
just talked about Auto completing with the right arrow if you hit the up Arrow
the right arrow if you hit the up Arrow you can go through your previous
you can go through your previous commands you can see all the commands
commands you can see all the commands that I've been running through so we can
that I've been running through so we can also use the down arrow to scroll back
also use the down arrow to scroll back down through those commands so say I
down through those commands so say I wanted to run that locate test.txt
wanted to run that locate test.txt command again instead of typing it out I
command again instead of typing it out I just hit the up arrow and then I hit
just hit the up arrow and then I hit enter easy breezy okay so we're gonna go
enter easy breezy okay so we're gonna go ahead and remove downloads test.txt
ahead and remove downloads test.txt and now that file should be gone we can
and now that file should be gone we can LS one more time into downloads just to
LS one more time into downloads just to make sure and you can see that PCM
make sure and you can see that PCM security finals the only thing that's in
security finals the only thing that's in there
there one other thing to point out that I just
one other thing to point out that I just noticed actually is
noticed actually is these files are case sensitive and the
these files are case sensitive and the folders are case sensitive so if I try
folders are case sensitive so if I try to CD into downloads
to CD into downloads it's not going to work because downloads
it's not going to work because downloads doesn't exist so if I CD into downloads
doesn't exist so if I CD into downloads I could spell
I could spell then you can see that I actually get
then you can see that I actually get into the downloads folder so note that
into the downloads folder so note that it's case sensitive autocomplete if I go
it's case sensitive autocomplete if I go back we'll do a pretty decent job at
back we'll do a pretty decent job at trying on newer versions of Cali that is
trying on newer versions of Cali that is if I hit do for example and then I tab
if I hit do for example and then I tab it'll realize that I'm trying to get to
it'll realize that I'm trying to get to downloads so the last thing I'm going to
downloads so the last thing I'm going to show you is the password command and
show you is the password command and that is p-a-s-swd
that is p-a-s-swd we are going to be good security
we are going to be good security engineers and change our password we're
engineers and change our password we're going to make it a strong password
going to make it a strong password because we're good security engineers
because we're good security engineers I am going to be the bad security
I am going to be the bad security engineer and make my password password
engineer and make my password password and I'm doing that because later on the
and I'm doing that because later on the course will talk about cracking Linux
course will talk about cracking Linux passwords and we're going to use my bad
passwords and we're going to use my bad password as an example so here we're
password as an example so here we're going to type our current password Kali
going to type our current password Kali is a terrible password by the way and
is a terrible password by the way and we're going to go ahead and type in our
we're going to go ahead and type in our new password you can make your password
new password you can make your password whatever you want I'm making mine
whatever you want I'm making mine password and now we have updated
password and now we have updated successfully and we have finished all
successfully and we have finished all the commands that we need to know for
the commands that we need to know for this video I'll go ahead and see you in
this video I'll go ahead and see you in the next lesson
now we're going to talk about users and privileges
privileges so in the last video we learned about
so in the last video we learned about ls-la so I am in my home folder which is
ls-la so I am in my home folder which is the attilda here and all I'm going to do
the attilda here and all I'm going to do is just say ls-la
is just say ls-la I'm going to hit enter
I'm going to hit enter and we're going to see a bunch of stuff
and we're going to see a bunch of stuff over here on the left hand side we've
over here on the left hand side we've got this we've got the details kind of
got this we've got the details kind of of ownership we've got some file size in
of ownership we've got some file size in here and we'll talk about all of this
here and we'll talk about all of this but we do ls-la we're getting so much
but we do ls-la we're getting so much more information than whether or not a
more information than whether or not a file is hidden which is kind of the
file is hidden which is kind of the purpose we looked at it for last time
purpose we looked at it for last time but now we can take it and look at it
but now we can take it and look at it from a different scope or a lens we can
from a different scope or a lens we can see that we have this column here the
see that we have this column here the First Column now the First Column tells
First Column now the First Column tells us something interesting
us something interesting it first tells us whether or not we are
it first tells us whether or not we are looking at a file or a directory so if
looking at a file or a directory so if we see a d here we are seeing that this
we see a d here we are seeing that this is a directory note that these are also
is a directory note that these are also color coded right so we have blue for
color coded right so we have blue for directories it looks like and then white
directories it looks like and then white ear or files and then we also have links
ear or files and then we also have links which we're not going to get into much
which we're not going to get into much right now but a link looks like it's a
right now but a link looks like it's a lighter blue
lighter blue so we have the indicator here first it
so we have the indicator here first it says okay it's either a d or maybe a
says okay it's either a d or maybe a dash or an L there are other settings
dash or an L there are other settings that could be here but for now this is
that could be here but for now this is all we need to worry about the next set
all we need to worry about the next set of things that we're going to look at
of things that we're going to look at are these rwx's or our blank x what does
are these rwx's or our blank x what does that all mean well rwx means read write
that all mean well rwx means read write execute when we're missing one of those
execute when we're missing one of those like a dash here that just means we have
like a dash here that just means we have a read and execute and there are
a read and execute and there are actually three groups that we're looking
actually three groups that we're looking at here so we have the first group which
at here so we have the first group which is the owner of our file so this first
is the owner of our file so this first group says read write execute for the
group says read write execute for the owner of this file and if we look at the
owner of this file and if we look at the owner of the file we can actually see
owner of the file we can actually see that the owner is going to be Cali well
that the owner is going to be Cali well in this instance it's the directory but
in this instance it's the directory but here we're looking at Cali you can see
here we're looking at Cali you can see that one of these has root listed but in
that one of these has root listed but in this instance or since we're using the
this instance or since we're using the Cali user and we're in our home folder
Cali user and we're in our home folder we're looking at mostly Cali being the
we're looking at mostly Cali being the file owner for this
file owner for this the next one we're going to look at is
the next one we're going to look at is we're going to say okay group membership
we're going to say okay group membership so anybody that is a part of this group
so anybody that is a part of this group what do they get ownership to or what do
what do they get ownership to or what do they get to do with this directory or
they get to do with this directory or this file well anybody in this group can
this file well anybody in this group can read or execute but they cannot write to
read or execute but they cannot write to this directory or file and lastly we
this directory or file and lastly we have the third setting which is all
have the third setting which is all other users what can all other users do
other users what can all other users do all of the users can read and execute
all of the users can read and execute but they cannot write here and we don't
but they cannot write here and we don't have anything in here besides this link
have anything in here besides this link that is read write execute we don't have
that is read write execute we don't have a world read write execute in this
a world read write execute in this folder and that's okay
folder and that's okay this does come into play when we're
this does come into play when we're doing penetration testing however when
doing penetration testing however when we want to find some sort of file that
we want to find some sort of file that has read write access or read write
has read write access or read write execute access if we have full access
execute access if we have full access that is ideal especially if there are
that is ideal especially if there are some sensitive files that we're not
some sensitive files that we're not supposed to see or maybe were
supposed to see or maybe were misconfigured or if we need somewhere to
misconfigured or if we need somewhere to write to on the disk for example if I
write to on the disk for example if I clear the screen here and we do an ls-la
clear the screen here and we do an ls-la of the temp folder
we could see that temp actually has read write execute privileges throughout this
write execute privileges throughout this is a great place when we're doing pen
is a great place when we're doing pen testing and we're working on a Linux
testing and we're working on a Linux machine that if we need to come drop a
machine that if we need to come drop a file we know that this temp folder can
file we know that this temp folder can be written to we can write whatever file
be written to we can write whatever file we want and execute these files from
we want and execute these files from here without having to worry about too
here without having to worry about too many permissions so for attacking
many permissions so for attacking machines later on especially as we get
machines later on especially as we get on into the Practical ethical hacking
on into the Practical ethical hacking course you may see me go and use the
course you may see me go and use the temp folder to upload malware or write a
temp folder to upload malware or write a malicious file or something that I can
malicious file or something that I can do from a folder that is read write
do from a folder that is read write executable so let's clear the screen
executable so let's clear the screen again
again now another reason and importance for
now another reason and importance for the read write execute is that if we
the read write execute is that if we write a script we won't be able to
write a script we won't be able to execute that script until we have full
execute that script until we have full access to do so that's going to become
access to do so that's going to become more important as we download files and
more important as we download files and try to run them against machines but
try to run them against machines but even in this little section when we're
even in this little section when we're looking at the bash scripting we're
looking at the bash scripting we're going to need to be able to execute our
going to need to be able to execute our script and we're going to need to be
script and we're going to need to be able to change the permissions on that
able to change the permissions on that let's go ahead and do that here we're
let's go ahead and do that here we're going to create a little text file and
going to create a little text file and just look at the permissions and how
just look at the permissions and how things change
things change so similar to the last video we're going
so similar to the last video we're going to do an echo and we're just going to
to do an echo and we're just going to say hello
say hello and in this we are going to use our
and in this we are going to use our directional operator and we are going to
directional operator and we are going to just put this in a hello.txt file
just put this in a hello.txt file if we ls-la
we can see that hello.txt is in here but look at the permissions that are set
look at the permissions that are set we have read write permissions we don't
we have read write permissions we don't have any execute permissions if this was
have any execute permissions if this was a script or anything that we're trying
a script or anything that we're trying to run the machine will not let us run
to run the machine will not let us run it because we do not have to execute
it because we do not have to execute permissions
permissions same thing here everybody else can only
same thing here everybody else can only read this file they cannot write or
read this file they cannot write or execute this file so we can change the
execute this file so we can change the permissions on this and we can do that
permissions on this and we can do that with the chmod which stands for change
with the chmod which stands for change mode
mode so I'm going to go ahead and clear
so I'm going to go ahead and clear screen again and we can do a CH mod
screen again and we can do a CH mod and there's two different ways to do
and there's two different ways to do this the first way is to do something
this the first way is to do something like a plus sign and then give the
like a plus sign and then give the permissions that you want set for that
permissions that you want set for that file so we could do something like rwx
file so we could do something like rwx that is read write execute if you want
that is read write execute if you want to just read access or read write access
to just read access or read write access or just write access you would put the
or just write access you would put the appropriate lettering there and let's go
appropriate lettering there and let's go ahead and just give this a read write
ahead and just give this a read write execute and I'm going to say hello.txt
execute and I'm going to say hello.txt and hit enter
and hit enter and we're going to go ahead and ls-la
and we're going to go ahead and ls-la again
again and now you can see that the color of
and now you can see that the color of this has changed why it is fully read
this has changed why it is fully read write executable for us as the user
write executable for us as the user okay as the owner I should say
okay as the owner I should say so that's one way of doing it however
so that's one way of doing it however there is another way of doing this as
there is another way of doing this as well we can say chmod
well we can say chmod 777
777 hello.txt hit enter
hello.txt hit enter do an ls-la
do an ls-la and you'll see now that everything has
and you'll see now that everything has read write execute here well what
read write execute here well what changed what is this 777 and why is it
changed what is this 777 and why is it so important
so important okay for that we're going to jump over
okay for that we're going to jump over to PowerPoint for just a second
to PowerPoint for just a second okay so we have different numbers that
okay so we have different numbers that we can set for the CH mod and remember
we can set for the CH mod and remember we did 777 because we gave a seven to
we did 777 because we gave a seven to each group we had the first second and
each group we had the first second and third groups remember that well what
third groups remember that well what does 7 mean well 7 means read write
does 7 mean well 7 means read write execute so for a read permission we get
execute so for a read permission we get four points or a right we get 2 and for
four points or a right we get 2 and for execute we get one so as you can see
execute we get one so as you can see down here we have four plus two plus one
down here we have four plus two plus one that equals seven well if we had no
that equals seven well if we had no permissions that would be zero so we
permissions that would be zero so we could do something like a seven zero
could do something like a seven zero zero you might see something like read
zero you might see something like read only and then you would just give it
only and then you would just give it four four four across the board for
four four four across the board for example or I've seen something like an
example or I've seen something like an SSH pem file and those files require
SSH pem file and those files require specific permissions typically it is six
specific permissions typically it is six four four so that would say that the
four four so that would say that the owner has read write but no execute and
owner has read write but no execute and then the rest of everybody else has just
then the rest of everybody else has just read access to that file so that would
read access to that file so that would be a 644 permission so if you ever
be a 644 permission so if you ever wonder what the permissions mean you can
wonder what the permissions mean you can always refer back to a chart like this
always refer back to a chart like this or quickly Google what do the CH mod
or quickly Google what do the CH mod numbers mean just know if you want to
numbers mean just know if you want to give something full permissions you are
give something full permissions you are going to set 777 across the board and if
going to set 777 across the board and if we're doing hacking or doing penetration
we're doing hacking or doing penetration testing that's often what we're going to
testing that's often what we're going to use with the exception of pem files
use with the exception of pem files where they have to have more restricted
where they have to have more restricted permissions sometimes 644 sometimes
permissions sometimes 644 sometimes actually four zero zero is what I've
actually four zero zero is what I've seen as well from here let's go back to
seen as well from here let's go back to our Cali machine and I'm going to go
our Cali machine and I'm going to go ahead and control L to clear the screen
ahead and control L to clear the screen here we want to take a look at adding a
here we want to take a look at adding a user
user so we're going to do a pseudo
so we're going to do a pseudo add user
add user and you can give whatever username you
and you can give whatever username you want I'm going to just call this user
want I'm going to just call this user John
John it's going to ask for our sudo password
it's going to ask for our sudo password remember we changed our password so make
remember we changed our password so make sure you put in the right password and
sure you put in the right password and now it's going to say okay what password
now it's going to say okay what password do you want to use for John
do you want to use for John I'm going to go ahead and enter that and
I'm going to go ahead and enter that and I'm going to enter it again
and then you could just hit enter through all of this
through all of this and get back to the screen where it says
and get back to the screen where it says Cali at Cali from here we're going to go
Cali at Cali from here we're going to go ahead and switch user and go into John
ahead and switch user and go into John so just do s u John
so just do s u John I'm going to ask for John's password go
I'm going to ask for John's password go ahead and give that password
ahead and give that password and now you can see
and now you can see that we are John at Cali so what is
that we are John at Cali so what is special about John well we've made a new
special about John well we've made a new user and John has some permissions now
user and John has some permissions now if we wanted to cat out like the at the
if we wanted to cat out like the at the password file
password file we can and this is a very common file
we can and this is a very common file that you're going to look at as a pen
that you're going to look at as a pen tester if you come in here the Etsy
tester if you come in here the Etsy password file is important this is
password file is important this is something that we can see a lot of
something that we can see a lot of information about this machine now the
information about this machine now the Etsy password file is called the
Etsy password file is called the password file not because it has our
password file not because it has our password in it but because it used to
password in it but because it used to store our password in it in a very very
store our password in it in a very very long time ago now what is being done is
long time ago now what is being done is they put an X here for a placeholder and
they put an X here for a placeholder and that placeholder is then filled in with
that placeholder is then filled in with the shadow file we'll take a look at
the shadow file we'll take a look at that here in a second so we are using
that here in a second so we are using the cat command and you've seen me use
the cat command and you've seen me use this several times throughout the course
this several times throughout the course we are using that to basically print out
we are using that to basically print out a file so when we print out the file we
a file so when we print out the file we can read the file so from here we're
can read the file so from here we're reading the file and we're saying okay I
reading the file and we're saying okay I see root root is the zero user ID and
see root root is the zero user ID and that is important that's telling us they
that is important that's telling us they are the ultimate user on the machine
are the ultimate user on the machine they are user zero
they are user zero if we scroll way down to the bottom we
if we scroll way down to the bottom we should see some users that were created
should see some users that were created here for example we see Cali Cali's user
here for example we see Cali Cali's user 1000 pretty common we can also see that
1000 pretty common we can also see that John is in use here and John is user
John is in use here and John is user 1001 we could see what type of shell
1001 we could see what type of shell type they're using and what their home
type they're using and what their home folder is as well you could see the zsh
folder is as well you could see the zsh shell type compared to John's bin bash
shell type compared to John's bin bash so they are different shell types and
so they are different shell types and we'll get into those a little later on
we'll get into those a little later on but from here we can also see Roots here
but from here we can also see Roots here we could see the root shell type and we
we could see the root shell type and we can also see what kind of services are
can also see what kind of services are running on this machine so if you want
running on this machine so if you want to find the users I typically look at
to find the users I typically look at root and then I look and scroll all the
root and then I look and scroll all the way to the bottom to see what's been
way to the bottom to see what's been installed besides what's on this machine
installed besides what's on this machine so in here we can see some things like
so in here we can see some things like SSH which is important we know okay this
SSH which is important we know okay this has the capability of running SSH maybe
has the capability of running SSH maybe has an SSH service maybe it has a SQL
has an SSH service maybe it has a SQL service here with the MySQL openvpn so
service here with the MySQL openvpn so it's a little bit of information
it's a little bit of information gathering
gathering if we were to land on a machine for
if we were to land on a machine for example and we're a low-level user with
example and we're a low-level user with no privileges we could start to look at
no privileges we could start to look at who are the other users on the computer
who are the other users on the computer why are they important how can we get a
why are they important how can we get a hold of them where are their files
hold of them where are their files located what kind of services are
located what kind of services are running on this machine this is all part
running on this machine this is all part of the information gathering stage of
of the information gathering stage of ethical hacking and this file leads to a
ethical hacking and this file leads to a lot of clues for us
lot of clues for us now clearing the screen let's say I want
now clearing the screen let's say I want to view the shadow file the shadow file
to view the shadow file the shadow file is the file that contains the password
is the file that contains the password hashes for this machine
hashes for this machine I'm going to go ahead and try to type in
I'm going to go ahead and try to type in cat
remission denied okay maybe I need to use sudo
let's try it here enter our password oh John is not in the suitors file this
oh John is not in the suitors file this is also called the Sue doers file and
is also called the Sue doers file and you can also call sudo Sudo depends on
you can also call sudo Sudo depends on your nomenclature and how you pronounce
your nomenclature and how you pronounce it I'm a pseudo person so from here I'm
it I'm a pseudo person so from here I'm going to go ahead and control L we're
going to go ahead and control L we're going to switch user back into Cali and
going to switch user back into Cali and we're gonna take a look at some stuff so
we're gonna take a look at some stuff so if I go switch user
if I go switch user Cali it's going to ask me for the
Cali it's going to ask me for the password I'm gonna enter our password in
password I'm gonna enter our password in and first thing I want to show you the
and first thing I want to show you the shadow file before we move on to the
shadow file before we move on to the sudoers file so if we go pseudo cat
sudoers file so if we go pseudo cat let's see Shadow I think this is
let's see Shadow I think this is important to see
important to see you can come in here and remember how I
you can come in here and remember how I said with a hash that this is set here
said with a hash that this is set here so our root password has not been set
so our root password has not been set there's no hash in here and this is
there's no hash in here and this is security best practice we don't really
security best practice we don't really want to have a root password unless we
want to have a root password unless we absolutely need to in this instance we
absolutely need to in this instance we might just want to have certain users
might just want to have certain users that can Elevate into root and then if
that can Elevate into root and then if logging is enabled we can then see from
logging is enabled we can then see from our logs who access that root account at
our logs who access that root account at what time you really don't want to have
what time you really don't want to have a root password where anybody can just
a root password where anybody can just log in with a known password because
log in with a known password because then that eliminates some accountability
then that eliminates some accountability so best practice would say hey if we
so best practice would say hey if we have a Linux machine you get all regular
have a Linux machine you get all regular user accounts and then if you want to
user accounts and then if you want to run something as an elevated privilege
run something as an elevated privilege you're going to do that with your
you're going to do that with your account and then use sudo for that
account and then use sudo for that but looking down here we can see the
but looking down here we can see the hashes for this computer okay and what's
hashes for this computer okay and what's interesting actually is Cali and John
interesting actually is Cali and John have the same password but they have
have the same password but they have different hashes and that is sort of
different hashes and that is sort of unique if you saw this in a Windows
unique if you saw this in a Windows machine if the password was the same on
machine if the password was the same on the local machine you would see the
the local machine you would see the exact same hash and that is a clear
exact same hash and that is a clear indicator that password reuse is in play
indicator that password reuse is in play but here it's not so the hashing
but here it's not so the hashing algorithm that's being used is a little
algorithm that's being used is a little bit different and it's generating
bit different and it's generating different hashes even though the
different hashes even though the password is the same regardless the
password is the same regardless the password for both of these accounts is
password for both of these accounts is password and that's very weak and can
password and that's very weak and can easily be cracked as we'll find out
easily be cracked as we'll find out later on okay now on to the Sue doers
later on okay now on to the Sue doers file what we're going to do is we're
file what we're going to do is we're going to do a pseudo cat and we're going
going to do a pseudo cat and we're going to look at
to look at Etsy
Etsy sudoers just like that and I might have
sudoers just like that and I might have typed that a little fast so I'm going to
typed that a little fast so I'm going to go ahead and scroll back up for a second
go ahead and scroll back up for a second pseudo cat
pseudo cat Etsy sudoers
Etsy sudoers okay just like that it should Auto tab
okay just like that it should Auto tab complete and from there we're gonna go
complete and from there we're gonna go in here and we're going to look at who
in here and we're going to look at who has what privileges
has what privileges well if you see allow members of a group
well if you see allow members of a group pseudo to execute any command and you
pseudo to execute any command and you see percent pseudo so it's calling sudo
see percent pseudo so it's calling sudo from somewhere else sometimes we can
from somewhere else sometimes we can just include users in here we could say
just include users in here we could say hey the user Cali I want to do these
hey the user Cali I want to do these things instead this is saying hey
things instead this is saying hey anybody a part of this group I want to
anybody a part of this group I want to be able to do whatever they want they
be able to do whatever they want they can execute any commands like they were
can execute any commands like they were the root user essentially
the root user essentially so with that what we're going to do is
so with that what we're going to do is we're going to take a look at who is in
we're going to take a look at who is in that percent pseudo group and we can do
that percent pseudo group and we can do that by using the grep command
that by using the grep command so we can say grep and we're going to
so we can say grep and we're going to get really familiar with grep in The
get really familiar with grep in The Bash scripting video but basically think
Bash scripting video but basically think of grep as pulling out a specific string
of grep as pulling out a specific string or element out of a file or some
or element out of a file or some contents that you want to see it's a
contents that you want to see it's a great way to narrow down specifics and
great way to narrow down specifics and pull down only the information that you
pull down only the information that you want and we're going to get really
want and we're going to get really familiar with it here in a couple videos
familiar with it here in a couple videos so we're going to say grep and then
so we're going to say grep and then we're going to say sudo just like this
we're going to say sudo just like this and we're going to do that from Etsy
and we're going to do that from Etsy group
okay and it says who has a pseudo privilege here all we see is Cali so our
privilege here all we see is Cali so our user has pseudo privilege if we wanted
user has pseudo privilege if we wanted to give privileges to John we'd have to
to give privileges to John we'd have to add John to the pseudo group in the Etsy
add John to the pseudo group in the Etsy group or we could add John specifically
group or we could add John specifically to the sudoers file and give him
to the sudoers file and give him specific permissions as well and as we
specific permissions as well and as we move on in the course and we get into
move on in the course and we get into privilege escalation and if you ever go
privilege escalation and if you ever go into more of the privilege escalation
into more of the privilege escalation courses that we have you'll see that we
courses that we have you'll see that we look at pseudo-privileges immediately
look at pseudo-privileges immediately when we get onto a machine by doing
when we get onto a machine by doing something like sudo-l and we'll take a
something like sudo-l and we'll take a look at those and say okay what commands
look at those and say okay what commands can I run and in this instance we could
can I run and in this instance we could see okay all commands can be run here
see okay all commands can be run here but sometimes that's not the case
but sometimes that's not the case sometimes we can only run one specific
sometimes we can only run one specific command or maybe John for example we
command or maybe John for example we want John to be able to run python
want John to be able to run python because John's a developer so John can
because John's a developer so John can run python with pseudo privileges but
run python with pseudo privileges but cannot run anything else so something to
cannot run anything else so something to think about depending on the individual
think about depending on the individual and who we want to give permissions to
and who we want to give permissions to on that machine they might not have
on that machine they might not have privileges to access everything as sudo
privileges to access everything as sudo they can actually be limited in what
they can actually be limited in what they can run as well so that is it for
they can run as well so that is it for this video I'm going to go ahead and
this video I'm going to go ahead and catch you in the next one
now we're going to touch on networking commands that are relevant to
commands that are relevant to penetration testing and relevant to this
penetration testing and relevant to this course
course so the first thing that we're going to
so the first thing that we're going to do is we're going to use the IP Command
do is we're going to use the IP Command and that is IPA
and that is IPA IPA lists all is the way I like to think
IPA lists all is the way I like to think about it and you can see here that we
about it and you can see here that we have a loopback address and we have our
have a loopback address and we have our eth0 this is our ethernet address
eth0 this is our ethernet address and you can see that we have an IP
and you can see that we have an IP address here ipv4 of
address here ipv4 of 192.168.138140 we are on a slash 24
192.168.138140 we are on a slash 24 subnet and here is our broadcast address
subnet and here is our broadcast address here we can also see our IPv6 here which
here we can also see our IPv6 here which is nice and we can see our Mac address
is nice and we can see our Mac address here
here so we can also look at this through the
so we can also look at this through the i f config command
and that will show us the same things here's ethernet zero here is the
here's ethernet zero here is the loopback all the same information here
loopback all the same information here ifconfig is the old school way of doing
ifconfig is the old school way of doing it IPA is the newer way of doing it IPA
it IPA is the newer way of doing it IPA is nice and colorful if I'm being honest
is nice and colorful if I'm being honest I still use ifconfig because I like the
I still use ifconfig because I like the old school way of doing things but IPA
old school way of doing things but IPA is the new way of doing things and in
is the new way of doing things and in some instances I have config requires
some instances I have config requires sudo to even run or may no longer be on
sudo to even run or may no longer be on a machine but in some instances IP is
a machine but in some instances IP is not a machine depending on what type of
not a machine depending on what type of machine you're on and what you access
machine you're on and what you access you may need either one of these so it's
you may need either one of these so it's great to show you both
great to show you both now while the IPA does all
now while the IPA does all if only shows the ethernet connection so
if only shows the ethernet connection so the hardwired connections if we want to
the hardwired connections if we want to see wireless connections we need to do
see wireless connections we need to do IW config
IW config and in this instance you're going to see
and in this instance you're going to see down here that we have no wireless
down here that we have no wireless connections right now when we get into
connections right now when we get into Wireless hacking we'll see that we have
Wireless hacking we'll see that we have connections established and we'll use
connections established and we'll use the IW config command but just know for
the IW config command but just know for now that it's for wireless and if you
now that it's for wireless and if you ever need to use it that's what it's for
ever need to use it that's what it's for let's clear our screen and the next
let's clear our screen and the next thing I want to cover is the ipn and n
thing I want to cover is the ipn and n stands for neighbor the alternative to
stands for neighbor the alternative to this is the ARP Dash a
this is the ARP Dash a okay what is ARP if you do not know what
okay what is ARP if you do not know what ARP is that is the address resolution
ARP is that is the address resolution protocol this comes from your networking
protocol this comes from your networking if you are not familiar with networking
if you are not familiar with networking then you may need to go study up on a
then you may need to go study up on a little bit of this now ARP says what IP
little bit of this now ARP says what IP address is associated with what Mac
address is associated with what Mac address and what happens is a broadcast
address and what happens is a broadcast message goes out when we are trying to
message goes out when we are trying to identify an IP address and a MAC address
identify an IP address and a MAC address so broadcast goes out and it says who
so broadcast goes out and it says who has this IP address and whoever has the
has this IP address and whoever has the IP address will come back and it'll say
IP address will come back and it'll say hey that's me I have that IP address and
hey that's me I have that IP address and here is my Mac address so now you can
here is my Mac address so now you can associate my Mac address with this IP
associate my Mac address with this IP address
address and it is a way to identify these two
and it is a way to identify these two items together and link them up so again
items together and link them up so again in this instance we can use the IAP
in this instance we can use the IAP command or the old ARP command now the
command or the old ARP command now the IP Command is a little bit prettier and
IP Command is a little bit prettier and a little bit more colorful I think
a little bit more colorful I think easier to read in my opinion but either
easier to read in my opinion but either will work in this situation
will work in this situation another IP Command that we're going to
another IP Command that we're going to want to run and know is the IPR command
want to run and know is the IPR command now R stands for route you could also
now R stands for route you could also type in route
type in route and you'll get similar feedback here so
and you'll get similar feedback here so what we're looking at is what is called
what we're looking at is what is called a routing table we want to know where
a routing table we want to know where our traffic is routing and here you can
our traffic is routing and here you can see on either one of these that we're
see on either one of these that we're routing through
routing through 192.168.138.0 we have an open Gateway we
192.168.138.0 we have an open Gateway we can see the Gateway here is
can see the Gateway here is 138.2 we can see our mask here and we
138.2 we can see our mask here and we can find all that information out up
can find all that information out up here as well so it's important to know
here as well so it's important to know the routing and what's going on
the routing and what's going on especially if you are in a network or
especially if you are in a network or example where you might have multiple
example where you might have multiple routes say if we come in and we say oh
routes say if we come in and we say oh IPA okay we're on the
IPA okay we're on the 192.168.138 network but we just try to
192.168.138 network but we just try to connect to only the machines on this
connect to only the machines on this network we see a slash 24 we think okay
network we see a slash 24 we think okay well I know a slash 24 has 255 potential
well I know a slash 24 has 255 potential IEP addresses and I'm going to go ahead
IEP addresses and I'm going to go ahead and just stick to scanning that subnet
and just stick to scanning that subnet and looking for those IPS on that subnet
and looking for those IPS on that subnet well if you looked at the routing table
well if you looked at the routing table you might actually see that there's a
you might actually see that there's a 137 in here or 136 or maybe a 10 dot IP
137 in here or 136 or maybe a 10 dot IP address or something different than what
address or something different than what you have here maybe you have the ability
you have here maybe you have the ability to talk to other networks even though
to talk to other networks even though you're on this one slash 24 Network
you're on this one slash 24 Network very important to look at the routing
very important to look at the routing table it's also important because in
table it's also important because in real life pen tests we have been on a
real life pen tests we have been on a quote unquote segmented Network and in
quote unquote segmented Network and in reality it really wasn't a segmented
reality it really wasn't a segmented Network there just wasn't a route to
Network there just wasn't a route to that Network so they said that we were
that Network so they said that we were isolated and we couldn't access anything
isolated and we couldn't access anything and all we had to do was say okay we're
and all we had to do was say okay we're going to go add that Network to our
going to go add that Network to our routing table and what do you know we
routing table and what do you know we were able to scan and connect to the
were able to scan and connect to the network so being able to know your
network so being able to know your routing table being able to understand
routing table being able to understand what a route is and how to add routes
what a route is and how to add routes how to remove routes can become
how to remove routes can become important as well these are things that
important as well these are things that you should already know from General
you should already know from General networking I'm showing you the commands
networking I'm showing you the commands here for basic routing and how to
here for basic routing and how to display the routing tables
display the routing tables if you need further information on
if you need further information on routing tables you should go look that
routing tables you should go look that up and research that before continuing
up and research that before continuing on with the ethical hacking course okay
on with the ethical hacking course okay last command I want to get through that
last command I want to get through that is the Ping command so I'm going to do
is the Ping command so I'm going to do an ifconfig again and in this instance
an ifconfig again and in this instance I'm just going to Ping
I'm just going to Ping 192.168.138 and I believe earlier I saw
192.168.138 and I believe earlier I saw a DOT 2 was my Gateway so I'm going to
a DOT 2 was my Gateway so I'm going to go ahead and just hit enter that should
go ahead and just hit enter that should talk back to me and it does now if you
talk back to me and it does now if you are a Windows user and you've ever used
are a Windows user and you've ever used ping before it will only send four
ping before it will only send four packets out so it'll check four times
packets out so it'll check four times as you can see here we are getting more
as you can see here we are getting more than four packets sent we are sending
than four packets sent we are sending indefinitely and I'm going to go ahead
indefinitely and I'm going to go ahead and just hit Ctrl C and stop that we are
and just hit Ctrl C and stop that we are definitely seeing that we're getting
definitely seeing that we're getting responses back now there is a way to
responses back now there is a way to limit the amount that we send in the
limit the amount that we send in the amount of traffic that we're sending but
amount of traffic that we're sending but basically what we're doing with the Ping
basically what we're doing with the Ping command is we're saying hey are you
command is we're saying hey are you there are you alive can you respond to
there are you alive can you respond to me let me know you're there so I asked
me let me know you're there so I asked the machine at this IP address to
the machine at this IP address to respond and tell me yes I am here now
respond and tell me yes I am here now this is called
this is called icmp traffic not all machines permit
icmp traffic not all machines permit icmp traffic just because we ping a
icmp traffic just because we ping a machine and it does not respond does not
machine and it does not respond does not mean that it's not online okay there are
mean that it's not online okay there are machines that have icmp disabled and
machines that have icmp disabled and will not respond to Ping requests but
will not respond to Ping requests but ping is a quick way to see if a machine
ping is a quick way to see if a machine is online and typically by default ping
is online and typically by default ping or icmp is enabled on most machine means
or icmp is enabled on most machine means just as a further example we can ping a
just as a further example we can ping a machine that we do not believe to be
machine that we do not believe to be alive so I'm going to change this to a
alive so I'm going to change this to a three I don't think there's a three on
three I don't think there's a three on my network
my network and you're gonna see it's going to try
and you're gonna see it's going to try to send data and it's just going to get
to send data and it's just going to get stuck here and say host unreachable
stuck here and say host unreachable now again that could potentially mean
now again that could potentially mean that that host is not there or it could
that that host is not there or it could potentially mean that the host has icmp
potentially mean that the host has icmp disabled but we're going to be using
disabled but we're going to be using ping sweeping to identify host in our
ping sweeping to identify host in our Network and we'll do that here in just a
Network and we'll do that here in just a couple of videos but I wanted you to get
couple of videos but I wanted you to get familiar with the Ping command if you
familiar with the Ping command if you weren't familiar already
weren't familiar already now there are some commands in this
now there are some commands in this video that we did not talk about for
video that we did not talk about for example the netstat command now the
example the netstat command now the netsack command is used to identify what
netsack command is used to identify what open ports and services are there we'll
open ports and services are there we'll take a look at that more later on but
take a look at that more later on but just know that that command exists and
just know that that command exists and that we're going to do due diligence on
that we're going to do due diligence on a command later so any of you that are
a command later so any of you that are watching that have networking background
watching that have networking background or like hey you didn't show netstat
or like hey you didn't show netstat that's so important you're correct it's
that's so important you're correct it's coming later on in the course so that's
coming later on in the course so that's it for this video we're going to go
it for this video we're going to go ahead and move on to the next one
let's now talk about viewing creating and editing files and we've done a
and editing files and we've done a little bit of this in the course already
little bit of this in the course already you've seen me do something like Echo
you've seen me do something like Echo hello and remember that prints out to
hello and remember that prints out to the screen
the screen and we could just Echo that again like a
and we could just Echo that again like a hello and put that into a file and
hello and put that into a file and you've seen me do that we'll just call
you've seen me do that we'll just call this one hey.txt
this one hey.txt and if we LS we should see hey.txt right
and if we LS we should see hey.txt right here
here if we do a cat
if we do a cat a DOT txt we should print out to the
a DOT txt we should print out to the screen hello
screen hello all these should be pretty familiar to
all these should be pretty familiar to you
you so let's build upon this let's talk
so let's build upon this let's talk about how we can append to this and
about how we can append to this and overwrite these files in different ways
overwrite these files in different ways that we can actually create and edit
that we can actually create and edit files I'm going to clear the screen here
files I'm going to clear the screen here now what if I wanted to add to this file
now what if I wanted to add to this file and I'm just tapping up by the way what
and I'm just tapping up by the way what if I want to say hello again
if I want to say hello again so I want to say Echo hello again into
so I want to say Echo hello again into this hey.txt file that already exists
this hey.txt file that already exists what do we think is going to happen here
what do we think is going to happen here so I'm going to go ahead and hit enter
so I'm going to go ahead and hit enter and then I'm going to cut out the
and then I'm going to cut out the hey.txt
hey.txt well now it says hello again it used to
well now it says hello again it used to say hello well that is because when we
say hello well that is because when we use one greater than symbol like this
use one greater than symbol like this what's going to happen is that
what's going to happen is that overwrites the file
overwrites the file so if we tab up and if we go over and we
so if we tab up and if we go over and we just write hey again again just for fun
just write hey again again just for fun and let's add a second one of these so
and let's add a second one of these so now there should be two of these greater
now there should be two of these greater than symbols we hit enter we cat out
than symbols we hit enter we cat out a DOT dxt
a DOT dxt and now you can see it says hello again
and now you can see it says hello again and hello again again
and hello again again why do we care why are we doing this
why do we care why are we doing this well when we are using
well when we are using scripting for example and we want to
scripting for example and we want to Loop through a bunch of information and
Loop through a bunch of information and we want to add that information to a
we want to add that information to a file we might use something like this
file we might use something like this where if we're Gathering say i p
where if we're Gathering say i p addresses this is foreshadowing by the
addresses this is foreshadowing by the way if they were gathering IP addresses
way if they were gathering IP addresses and we are wanting to put them all in a
and we are wanting to put them all in a file we're going to need to use
file we're going to need to use something like a double greater than in
something like a double greater than in order to not overwrite the file with one
order to not overwrite the file with one IP address we want to list all the IP
IP address we want to list all the IP addresses in the file
addresses in the file so you're going to see that when we get
so you're going to see that when we get into the bash scripting of this section
into the bash scripting of this section let's clear our screen another way that
let's clear our screen another way that we can make a new file is just to say
we can make a new file is just to say touch
touch new file.txt
new file.txt and if we LS you can see that new
and if we LS you can see that new file.txt is here we can cat out new
file.txt is here we can cat out new file.txt
file.txt [Music]
[Music] and nothing is going to be in there
and nothing is going to be in there because we didn't tell it to do anything
because we didn't tell it to do anything we just said touch which creates a file
we just said touch which creates a file so we can use a different type of Editor
so we can use a different type of Editor to try and edit this and save the file
to try and edit this and save the file now there are a few editors that we can
now there are a few editors that we can use within our terminal so we can use
use within our terminal so we can use something called Nano which is my
something called Nano which is my personal favorite
personal favorite you may hear other people talk about VI
you may hear other people talk about VI in Vim you may hear lots of jokes about
in Vim you may hear lots of jokes about quitting them and how it's impossible to
quitting them and how it's impossible to quit them and for that reason honestly
quit them and for that reason honestly because of the complications and because
because of the complications and because I like Simplicity I just use Nano so we
I like Simplicity I just use Nano so we can Nano new file
can Nano new file and in here you can type whatever you
and in here you can type whatever you want I'm going to literally say I can
want I'm going to literally say I can type whatever I want in here
and now I'm going to hit Ctrl X and throughout this course you're going to
throughout this course you're going to actually see me
actually see me use Nano quite a bit and we're going to
use Nano quite a bit and we're going to use it for updating files and Shell Code
use it for updating files and Shell Code and it's beneficial if we log into a
and it's beneficial if we log into a machine remotely for example and we
machine remotely for example and we won't have the ability to have a
won't have the ability to have a graphical user interface type notepad
graphical user interface type notepad which I'm going to show you here in a
which I'm going to show you here in a second we might not have the luxury of
second we might not have the luxury of having something like that we might have
having something like that we might have to use Nano or Bim or in in terminal
to use Nano or Bim or in in terminal text editor so we're going to go ahead
text editor so we're going to go ahead and hit Ctrl X here I'm going to hit Y
and hit Ctrl X here I'm going to hit Y which is going to say yes I want to save
which is going to say yes I want to save this file and then I'm going to hit
this file and then I'm going to hit enter
enter and now if I cut out newfile.txt
and now if I cut out newfile.txt you can see it says I can type whatever
you can see it says I can type whatever I want in here
I want in here lastly we're going to look at a
lastly we're going to look at a graphical notepad so we're going to use
graphical notepad so we're going to use mouse pad we can type in mouse pad
mouse pad we can type in mouse pad and we can just say new file dot txt
and we can just say new file dot txt just like we created and hidden here you
just like we created and hidden here you can see that it says I can type whatever
can see that it says I can type whatever I want in here and that's true I can
I want in here and that's true I can also modify it's just like a notepad if
also modify it's just like a notepad if you had on Windows machine or if you've
you had on Windows machine or if you've used leafpad or any sort of notepad type
used leafpad or any sort of notepad type material this one's just called mouse
material this one's just called mouse pad so we can control s and save and
pad so we can control s and save and then just exit out if we cat out our new
then just exit out if we cat out our new file again you can see I can also modify
file again you can see I can also modify now throughout this course you might see
now throughout this course you might see me use a tool called G edit it is not
me use a tool called G edit it is not installed on this machine yet though we
installed on this machine yet though we are making updates to the course we will
are making updates to the course we will be using G edit anytime you see me use G
be using G edit anytime you see me use G edit feel free to use mouse pad instead
edit feel free to use mouse pad instead of G edit it's become deprecated
of G edit it's become deprecated offensive security got rid of it in Kali
offensive security got rid of it in Kali Linux and now if you go hit G edit it'll
Linux and now if you go hit G edit it'll say it's not found but you can install
say it's not found but you can install it we're not going to do that right now
it we're not going to do that right now but when we install Tools in a upcoming
but when we install Tools in a upcoming video you will be able to install that
video you will be able to install that with one of the tools that we're running
with one of the tools that we're running so anyway just note that we're going to
so anyway just note that we're going to be using mouse pad instead of G edit
be using mouse pad instead of G edit because it's the new and latest and
because it's the new and latest and greatest
greatest one last thing with Nano or any of these
one last thing with Nano or any of these tools
tools you can make a brand new file so you can
you can make a brand new file so you can say like brand new file.txt and then you
say like brand new file.txt and then you can type whatever in here and control X
can type whatever in here and control X hit Y hit enter and then you can cat out
hit Y hit enter and then you can cat out brand new file and guess what it's there
brand new file and guess what it's there so the file doesn't have to be existing
so the file doesn't have to be existing to use Nano or existing to use mouse pad
to use Nano or existing to use mouse pad you can create new files with these
you can create new files with these commands as well
commands as well so that is it for this video I'm gonna
so that is it for this video I'm gonna go ahead and catch you in the next one
another topic we need to talk about is starting and stopping services
starting and stopping services we may have a service like a web server
we may have a service like a web server or SSH or maybe SQL or some sort of
or SSH or maybe SQL or some sort of database that we need to start while
database that we need to start while we're already running Cali or we might
we're already running Cali or we might want to start a service on boot every
want to start a service on boot every single time that our computer loads if
single time that our computer loads if you've ever used Windows this is similar
you've ever used Windows this is similar to installing a program and then having
to installing a program and then having that boot up on launch it's kind of the
that boot up on launch it's kind of the same thing here if we're installing
same thing here if we're installing something we want that service to start
something we want that service to start on launch we have to tell our machine to
on launch we have to tell our machine to do that so we're going to look at how to
do that so we're going to look at how to start a service and how to have a
start a service and how to have a service start on launch so the first
service start on launch so the first service that we're going to look at is
service that we're going to look at is the Apache service and this is what I
the Apache service and this is what I used to use when I first started out as
used to use when I first started out as an ethical hacker and the reason is is
an ethical hacker and the reason is is that we can spin up our own web server
that we can spin up our own web server fairly easily and host malicious data or
fairly easily and host malicious data or files or things that we might want to
files or things that we might want to access or might want somebody else to
access or might want somebody else to access so before we run that command I
access so before we run that command I do want to do a proof of concept so
do want to do a proof of concept so let's do an ifconfig
let's do an ifconfig and we're going to grab our IP address
and we're going to grab our IP address here I'm going to copy this
here I'm going to copy this and then I want to open up Firefox
and then I want to open up Firefox from within Firefox I'm going to go
from within Firefox I'm going to go ahead and try to navigate to that IP
ahead and try to navigate to that IP address
address and you're going to see that it says
and you're going to see that it says it's unable to connect this is exactly
it's unable to connect this is exactly what we expected
what we expected so now what we're going to do is we're
so now what we're going to do is we're going to come in here and we're going to
going to come in here and we're going to say sudo service
say sudo service Apache to
Apache to start
start we hit enter it's going to ask for our
we hit enter it's going to ask for our sudo password
and then we have no confirmation of anything so let's go ahead and come in
anything so let's go ahead and come in back into the browser
back into the browser and we're going to refresh
and we're going to refresh and let's take away the https and now
and let's take away the https and now you can see that this is here on Port
you can see that this is here on Port 80. so we are actually on HTTP not https
80. so we are actually on HTTP not https and we have an Apache server running now
and we have an Apache server running now now let's say we wanted to stop this
now let's say we wanted to stop this service we could we can go in here and
service we could we can go in here and say sudo service Apache to stop and
say sudo service Apache to stop and before we do that I want to show you
before we do that I want to show you something so if we come back into the
something so if we come back into the Apache 2 I'm going to make this a little
Apache 2 I'm going to make this a little bit bigger
bit bigger you could see that our files are located
you could see that our files are located in the VAR
in the VAR www.html folder and what that is if we
www.html folder and what that is if we come to our home folder here
come to our home folder here and we just go to file system
and we just go to file system we scroll down and go to bar
we scroll down and go to bar and then we go to www
and then we go to www .html all I'm doing is going to the same
.html all I'm doing is going to the same location here
location here why I'm doing this is this is where if I
why I'm doing this is this is where if I wanted to host like a picture or a file
wanted to host like a picture or a file or malware I could put that in here this
or malware I could put that in here this index.html is the same index page that's
index.html is the same index page that's loaded here like if I open that that's
loaded here like if I open that that's literally the same page that's being
literally the same page that's being hosted you're seeing it here from a file
hosted you're seeing it here from a file format but now if I go back you can see
format but now if I go back you can see I'm hosting it at this IP address so if
I'm hosting it at this IP address so if I wanted to host something malicious I
I wanted to host something malicious I could do that now in order to stop the
could do that now in order to stop the service all we have to do is say stop
service all we have to do is say stop hit enter then we come back and we
hit enter then we come back and we refresh this page
refresh this page you can see that we're now again unable
you can see that we're now again unable to connect
to connect now I did mention the beginning of this
now I did mention the beginning of this video that this was my favorite way to
video that this was my favorite way to host malicious stuff or just host files
host malicious stuff or just host files for whatever purpose now that has
for whatever purpose now that has changed
changed I now use Python to do this so we can
I now use Python to do this so we can create a file let's go ahead and just
create a file let's go ahead and just say Echo hello and we're going to do
say Echo hello and we're going to do [Music]
[Music] hello.txt
hello.txt so if we LS we can see that we've got a
so if we LS we can see that we've got a bunch of stuff in here
bunch of stuff in here um hello.txt being one of them so what
um hello.txt being one of them so what I'm going to do is I'm going to spin up
I'm going to do is I'm going to spin up a web server on the fly with python so
a web server on the fly with python so I'm going to say python three
I'm going to say python three Dash m http.server
and then I'm going to give it port 80. now what we're saying is we want to run
now what we're saying is we want to run the module HTTP server and we're going
the module HTTP server and we're going to run Port 80 here you can put whatever
to run Port 80 here you can put whatever Port you want
Port you want and you can see now it says hey it's
and you can see now it says hey it's hosting up HTTP on Port 80 and what's
hosting up HTTP on Port 80 and what's going to happen is any file within the
going to happen is any file within the directory that I'm in is going to now be
directory that I'm in is going to now be hosted so you can see that I'm hosting
hosted so you can see that I'm hosting all this stuff here pretty awesome it's
all this stuff here pretty awesome it's a quick way to host up a web server
a quick way to host up a web server without having to start and stop
without having to start and stop services and you can on the fly from
services and you can on the fly from within a folder just start a web server
within a folder just start a web server so I think this is the cooler and better
so I think this is the cooler and better way to do it so I wanted to show you how
way to do it so I wanted to show you how to start a service but also that python
to start a service but also that python has some robust capabilities as well if
has some robust capabilities as well if you follow into the python section we'll
you follow into the python section we'll cover how to run an FTP server as well
cover how to run an FTP server as well which is also fun stuff so I'm going to
which is also fun stuff so I'm going to hit Ctrl C which is going to again shut
hit Ctrl C which is going to again shut down the server if I come here refresh
down the server if I come here refresh you'll see that it's now shut down
you'll see that it's now shut down and we can go ahead and talk about one
and we can go ahead and talk about one more thing before we go so let's say
more thing before we go so let's say that we wanted a service to start when
that we wanted a service to start when we started our machine well for that
we started our machine well for that we're going to use the system CTL
we're going to use the system CTL command system CTL
command system CTL and we can say enable if we wanted to
and we can say enable if we wanted to for example enable SSH we can come in
for example enable SSH we can come in here and just enable SSH and we just hit
here and just enable SSH and we just hit enter on this
enter on this and now you can see that it's enabled so
and now you can see that it's enabled so when we restart the computer SSH will
when we restart the computer SSH will always be enabled for us now I'm going
always be enabled for us now I'm going to disable that this isn't like security
to disable that this isn't like security best practice
and now you can see that we have disabled it and we're good to go so if
disabled it and we're good to go so if you ever have a service that you want to
you ever have a service that you want to run you just need to figure out the name
run you just need to figure out the name of the service and enable that and there
of the service and enable that and there may be times that you want things to run
may be times that you want things to run like historically I have ran SSH with it
like historically I have ran SSH with it enabled or I used to run the Apache 2
enabled or I used to run the Apache 2 server so I didn't have to spin it up
server so I didn't have to spin it up every time I just had a place to go
every time I just had a place to go immediately host that but your mileage
immediately host that but your mileage may vary depending on what it is you
may vary depending on what it is you want to run but knowing these commands
want to run but knowing these commands is important in case you need to start
is important in case you need to start or stop a service maybe restart a
or stop a service maybe restart a service same thing with enabling a
service same thing with enabling a service at boot up or disabling a
service at boot up or disabling a service at boot up so that's it for this
service at boot up so that's it for this video I'll go ahead and see you over in
video I'll go ahead and see you over in the next one
now let's talk about installing and updating tools
updating tools so the first thing that we're going to
so the first thing that we're going to do for Mark command line is we're going
do for Mark command line is we're going to look at how we would update our
to look at how we would update our current machine so just like other
current machine so just like other operating systems Linux machines require
operating systems Linux machines require updates as well and patching can be best
updates as well and patching can be best practice
practice so in order to update and upgrade our
so in order to update and upgrade our machine we're going to use the sudo
machine we're going to use the sudo command
command and we're going to say apt apt
and we're going to say apt apt and then we're going to say update and
and then we're going to say update and upgrade just like that so make sure you
upgrade just like that so make sure you use two Ampersand symbols here we're
use two Ampersand symbols here we're going to do two commands we're going to
going to do two commands we're going to say first I want you to update second I
say first I want you to update second I want you to upgrade
want you to upgrade well why are we doing this why are we
well why are we doing this why are we running two commands in the first place
running two commands in the first place well what we do when we actually install
well what we do when we actually install items on our Cali machine we are going
items on our Cali machine we are going out to what are called repositories and
out to what are called repositories and we're looking through packages and the
we're looking through packages and the update command is going out to the known
update command is going out to the known repositories and it is updating those
repositories and it is updating those repositories and then it's going to look
repositories and then it's going to look at those repositories and say okay what
at those repositories and say okay what needs upgraded here so what tools have
needs upgraded here so what tools have upgrades or updates available for them
upgrades or updates available for them that we need so if we run this command
that we need so if we run this command you're going to see that it's going to
you're going to see that it's going to go through these repositories you can
go through these repositories you can see it going through these Cali rolling
see it going through these Cali rolling and release AMD 64 packages and contents
and release AMD 64 packages and contents etc etc it'll take some time as it goes
etc etc it'll take some time as it goes through and it updates these
through and it updates these repositories it's going to find what
repositories it's going to find what programs we need and it'll provide it in
programs we need and it'll provide it in a list now what you can see is it's
a list now what you can see is it's asking us are you rude so this is a
asking us are you rude so this is a lesson here sometimes we have to be the
lesson here sometimes we have to be the root user we can't be just a pseudo user
root user we can't be just a pseudo user to run the command so what we're going
to run the command so what we're going to do in this instance is we're going to
to do in this instance is we're going to sudo switch user into root now we're
sudo switch user into root now we're root and we're going to run that command
root and we're going to run that command again we're going to say apt update
again we're going to say apt update and apt upgrade
okay and it's going to run through this and then it should provide us with a
and then it should provide us with a list of what we're going to install
list of what we're going to install which if we scroll back up to the top
which if we scroll back up to the top you can see that it says hey these
you can see that it says hey these packages were automatically installed
packages were automatically installed and no longer required and it says we
and no longer required and it says we can use the APT Auto remove command to
can use the APT Auto remove command to do that it's saying here are the brand
do that it's saying here are the brand new packages that need to be installed
new packages that need to be installed and then here are the packages that are
and then here are the packages that are going to be upgraded so these are
going to be upgraded so these are already installed such as like Apache 2
already installed such as like Apache 2 has some updates that are required and
has some updates that are required and it's going to go through and install all
it's going to go through and install all these now when you scroll down to the
these now when you scroll down to the bottom it's going to say you need 801
bottom it's going to say you need 801 megabytes and yours might be different
megabytes and yours might be different depending on when you watch this video
depending on when you watch this video it's going to say do you want to
it's going to say do you want to continue this operation
continue this operation in this instance I'm going to say no
in this instance I'm going to say no and the reason that I'm going to say no
and the reason that I'm going to say no is because updating on Kali Linux can
is because updating on Kali Linux can break things you should always have
break things you should always have almost two copies of your Linux right
almost two copies of your Linux right you should take a backup copy before you
you should take a backup copy before you ever make an update and there are some
ever make an update and there are some limitations on being able to make
limitations on being able to make backups depending on if you're using
backups depending on if you're using VMware or virtualbox and we're not going
VMware or virtualbox and we're not going to get into that right now but just know
to get into that right now but just know that tools can easily get broken by
that tools can easily get broken by pushing updates and we'll talk about a
pushing updates and we'll talk about a tool that you can use that is up to date
tool that you can use that is up to date and kind of makes your Cali the latest
and kind of makes your Cali the latest and greatest without breaking anything
and greatest without breaking anything even the current version of Cali right
even the current version of Cali right now 2022.2 not all the tools work out of
now 2022.2 not all the tools work out of the box as the way they should
the box as the way they should we'll talk about that in just a little
we'll talk about that in just a little bit so let's say that you wanted to
bit so let's say that you wanted to install a tool we're just going to go
install a tool we're just going to go grab one as an example so let's say that
grab one as an example so let's say that there was a tool you wanted to install
there was a tool you wanted to install like this cron Damon common I'm just
like this cron Damon common I'm just going to copy that
going to copy that you could come in here and you could say
you could come in here and you could say apt install Ron Damon common like this
apt install Ron Damon common like this hit enter and it's going to say oh you
hit enter and it's going to say oh you want to install this just hit yes and it
want to install this just hit yes and it will install and it will also upgrade
will install and it will also upgrade this cron package here I'm not going to
this cron package here I'm not going to do that but just know that you can also
do that but just know that you can also install applications as a one-time thing
install applications as a one-time thing if they're a part of the repository that
if they're a part of the repository that you have we're not going to get into
you have we're not going to get into updating repositories and adding manual
updating repositories and adding manual repositories we don't need to know that
repositories we don't need to know that at this point in our Linux careers we
at this point in our Linux careers we just need to understand that we're going
just need to understand that we're going out to repository and we can download
out to repository and we can download those items or packages based on what is
those items or packages based on what is in the repository so updating the
in the repository so updating the repository is always good and then we
repository is always good and then we checked for upgrades available to our
checked for upgrades available to our packages
packages in this instance we're not going to do
in this instance we're not going to do any updating or upgrading but there may
any updating or upgrading but there may be a time where we need to install a
be a time where we need to install a specific tool we go out to the web and
specific tool we go out to the web and we have to grab a tool and it says Hey
we have to grab a tool and it says Hey run this app install command this is
run this app install command this is what it's going to be doing this is how
what it's going to be doing this is how we would install something if we need to
we would install something if we need to now the next thing that we're going to
now the next thing that we're going to look at is we're going to look at the
look at is we're going to look at the get command
get command and git is a tool that runs with GitHub
and git is a tool that runs with GitHub I'm going to open up a new Firefox and
I'm going to open up a new Firefox and I'm going to make this a little bit
I'm going to make this a little bit bigger we're going to go to GitHub
bigger we're going to go to GitHub actually let's just go to Google we're
actually let's just go to Google we're going to go to Google
going to go to Google and a lot of times in our ethical
and a lot of times in our ethical hacking careers we're going to be
hacking careers we're going to be searching for tools we're going to come
searching for tools we're going to come out here and we're going to say oh I
out here and we're going to say oh I really want to find a tool maybe that
really want to find a tool maybe that does brute force Office 365 and then I
does brute force Office 365 and then I might say something like GitHub and you
might say something like GitHub and you can see it's already starting to
can see it's already starting to fill out and we might go find something
fill out and we might go find something like okay there's this Daft hack tool we
like okay there's this Daft hack tool we might click on that and we come in here
might click on that and we come in here and it might tell you how to install
and it might tell you how to install this well this is Powershell so that's
this well this is Powershell so that's not a great example uh we might come
not a great example uh we might come into here we might say okay here's one
into here we might say okay here's one how to install so you go through and
how to install so you go through and it'll say here's the usage on how to use
it'll say here's the usage on how to use this and sometimes we'll give you
this and sometimes we'll give you installation instructions but a lot of
installation instructions but a lot of times all you will need to do is you'll
times all you will need to do is you'll need to come in here and just download
need to come in here and just download the code to install the file so I'm
the code to install the file so I'm going to show you a tool that we're
going to show you a tool that we're going to install and run we go to Google
going to install and run we go to Google and we search for hemp my Cali
and we search for hemp my Cali just like that you're going to see that
just like that you're going to see that we can click in here and this tool is
we can click in here and this tool is available to us to download now
available to us to download now one way to look at a tool and see if it
one way to look at a tool and see if it has any relevancy on GitHub is to look
has any relevancy on GitHub is to look up at the number of stars that it has in
up at the number of stars that it has in the forks that it has
the forks that it has anything with like 700 stars like this
anything with like 700 stars like this is pretty reputable and you also should
is pretty reputable and you also should look at when it was last updated you can
look at when it was last updated you can see that this was last updated last
see that this was last updated last month now full disclosure DeWalt
month now full disclosure DeWalt actually works for TCM security and is a
actually works for TCM security and is a fantastic person if you never got to
fantastic person if you never got to interact with DeWalt he is somebody that
interact with DeWalt he is somebody that is awesome and a great resource he built
is awesome and a great resource he built this out because there were so many
this out because there were so many issues with Kali Linux and the tools
issues with Kali Linux and the tools that were coming freshly installed like
that were coming freshly installed like in 2022.2 don't always work in the way
in 2022.2 don't always work in the way that we intend them to work so a lot of
that we intend them to work so a lot of tools are broken some things need
tools are broken some things need downgraded and there's a lot of options
downgraded and there's a lot of options in here that can tell you hey here's
in here that can tell you hey here's what we can fix like we can fix
what we can fix like we can fix different missing issues that are going
different missing issues that are going on or we can fix go laying or fix impack
on or we can fix go laying or fix impack it and you don't have to worry about
it and you don't have to worry about what any of that means right now until
what any of that means right now until we get into pen testing but this is
we get into pen testing but this is something that we actually do install
something that we actually do install and run when we build out our lab
and run when we build out our lab machines or we build out our machines
machines or we build out our machines for even hacking on clients this is such
for even hacking on clients this is such a well done tool and he tells you in
a well done tool and he tells you in here how to install it he says hey get
here how to install it he says hey get clone right here off of this address we
clone right here off of this address we can also come up here we can go to the
can also come up here we can go to the code and we can just copy we say copy my
code and we can just copy we say copy my Cali right here and then we'll come in
Cali right here and then we'll come in and we can just say get clone
and we can just say get clone actually let's switch user I'm sorry
actually let's switch user I'm sorry let's sudo or let's switch user back to
let's sudo or let's switch user back to Cali
Cali and we'll enter here and then what I
and we'll enter here and then what I like to do when I install tools is I
like to do when I install tools is I like to install them into the op folder
like to install them into the op folder the opt folder so from here we're going
the opt folder so from here we're going to run get clone
to run get clone paste that
actually we're going to run sudo get clone I apologize
clone I apologize and then enter your password
and now if we look in here we should have Pimp My Cali which we do so if we
have Pimp My Cali which we do so if we CD to Pimp My Cali
CD to Pimp My Cali and now we LS we can see that we have
and now we LS we can see that we have the pimp mycali.sh script if you come
the pimp mycali.sh script if you come back into the website it will tell you
back into the website it will tell you how to run and operate this any decent
how to run and operate this any decent GitHub will say hey here's how you run
GitHub will say hey here's how you run this script so it says hey just run sudo
this script so it says hey just run sudo hit my Cali this is for a new Cali VM
hit my Cali this is for a new Cali VM you just need to run menu option n we're
you just need to run menu option n we're going to copy this and paste it
going to copy this and paste it and then we're gonna run it
and then we're gonna run it so now this tells you what do you want
so now this tells you what do you want to do well here's all the different
to do well here's all the different options N is a new VM setup run this
options N is a new VM setup run this option as your first time running Pimp
option as your first time running Pimp My Cali okay so that's going to fix all
My Cali okay so that's going to fix all the things for you I'm going to go ahead
the things for you I'm going to go ahead and hit n and let this run it's going to
and hit n and let this run it's going to go out and fetch some stuff from
go out and fetch some stuff from repositories and it's running apt update
repositories and it's running apt update and now it's going to install certain
and now it's going to install certain tools and packages and uninstall certain
tools and packages and uninstall certain tools and packages as you can see it's
tools and packages as you can see it's rolling through here so go ahead and let
rolling through here so go ahead and let this run I'm going to pause the video
this run I'm going to pause the video here for a second and then meet me back
here for a second and then meet me back when you're at the next screen where you
when you're at the next screen where you can actually enter in any sort of
can actually enter in any sort of command
command okay so it's been about five minutes and
okay so it's been about five minutes and we get to this page here and you can see
we get to this page here and you can see that it's asking us if we want to run
that it's asking us if we want to run root login installation it explains that
root login installation it explains that in Cali 2019 point x the default user
in Cali 2019 point x the default user used to be root which we talked about
used to be root which we talked about early on in this course and now that
early on in this course and now that they've switched it to Cali which is
they've switched it to Cali which is what we've been using now do we want to
what we've been using now do we want to re-enable the ability to log in as root
re-enable the ability to log in as root in Cali in this instance I'm going to
in Cali in this instance I'm going to choose yes however
choose yes however you need to make sure that you are
you need to make sure that you are comfortable and capable of running as
comfortable and capable of running as root
root in Linux if you do not feel comfortable
in Linux if you do not feel comfortable stick with running as Cali you're going
stick with running as Cali you're going to see me throughout the course as we
to see me throughout the course as we get into the ethical hacking section
get into the ethical hacking section running as root just know that there may
running as root just know that there may be times where you might need to use
be times where you might need to use sudo or you may need to switch user into
sudo or you may need to switch user into root as you saw me do with upgrading
root as you saw me do with upgrading packages just a few minutes ago that may
packages just a few minutes ago that may be required so if you're understanding
be required so if you're understanding of that you can hit no on this screen
of that you can hit no on this screen and that's perfectly okay security best
and that's perfectly okay security best practice to just to hit no I'm going to
practice to just to hit no I'm going to hit yes because I feel comfortable
hit yes because I feel comfortable running as root I'm the only user on
running as root I'm the only user on this machine and I don't have any
this machine and I don't have any accountability or repudiation to worry
accountability or repudiation to worry about so I'm going to give a new
about so I'm going to give a new password for this
and I'm going to enter it again and now it's going to ask if we want to
and now it's going to ask if we want to copy everything over from our Cali
copy everything over from our Cali folder into our root folder I'm going to
folder into our root folder I'm going to say no
and now it's going to continue on installing so we're going to let this
installing so we're going to let this run again go ahead and pause the video
run again go ahead and pause the video if you need to and then we'll meet you
if you need to and then we'll meet you back when this is all said and done
back when this is all said and done okay and when everything is said and
okay and when everything is said and done which it took about 10 minutes to
done which it took about 10 minutes to get through all that you should get to
get through all that you should get to this all done happy hacking screen right
this all done happy hacking screen right here and everything should be installed
here and everything should be installed for you if you chose to go the root
for you if you chose to go the root route that's a weird thing to say if you
route that's a weird thing to say if you chose to go the root route you can log
chose to go the root route you can log out and log back in as root and begin
out and log back in as root and begin using Linux as root otherwise you can
using Linux as root otherwise you can continue on with this lesson using Cali
continue on with this lesson using Cali as your main user so we're going to go
as your main user so we're going to go ahead and move on to the next video
last video in the section and this is going to be one of my favorites so what
going to be one of my favorites so what we're going to be talking about is
we're going to be talking about is scripting with bash I'm going to show
scripting with bash I'm going to show you some cool tricks that we can do to
you some cool tricks that we can do to kind of narrow down some of the results
kind of narrow down some of the results that we get and then I'm going to show
that we get and then I'm going to show you how you can automate some of that
you how you can automate some of that process and we'll take that and even
process and we'll take that and even write out some for loops and one line
write out some for loops and one line Loops which this might not make any
Loops which this might not make any sense right now and that's absolutely
sense right now and that's absolutely okay but by the time the video is done
okay but by the time the video is done hopefully it does so the first thing I
hopefully it does so the first thing I want to show you is I want to show you
want to show you is I want to show you how we're going to write a ping sweep so
how we're going to write a ping sweep so we're going to write a pink sweeper
we're going to write a pink sweeper basically we're going to go out and say
basically we're going to go out and say I want to Ping a device if that device
I want to Ping a device if that device is alive go ahead and show me that
is alive go ahead and show me that result and we're going to sweep an
result and we're going to sweep an entire network
entire network so what we're going to do first is we're
so what we're going to do first is we're going to identify a device that's alive
going to identify a device that's alive so we can test this out and then build
so we can test this out and then build upon that so you can go ahead and type
upon that so you can go ahead and type in ifconfig
in ifconfig and then just hit enter
and then just hit enter now my ethernet here is on a netted
now my ethernet here is on a netted Network so I'm running through a
Network so I'm running through a different IP address subnet here so this
different IP address subnet here so this one is 192.168 57 150 my actual IP
one is 192.168 57 150 my actual IP address is on a dot four dot X here so
address is on a dot four dot X here so I'm going to for this example I'm going
I'm going to for this example I'm going to be pinging
192.168.4.29 however and you can see here's the Ping that we're getting back
here's the Ping that we're getting back however if you are unsure of a IP
however if you are unsure of a IP address in your house that is active or
address in your house that is active or your Subnet in your house that's okay
your Subnet in your house that's okay you can just run 57.1 for this example
you can just run 57.1 for this example you might not get a lot of return
you might not get a lot of return results however you might only get one
results however you might only get one or two when we do this sweep so I advise
or two when we do this sweep so I advise you to figure out what your IP address
you to figure out what your IP address is that's a good challenge anyway and if
is that's a good challenge anyway and if you are familiar with networking which
you are familiar with networking which you should be at this point then you
you should be at this point then you should be able to determine the IP
should be able to determine the IP address of your home network but if you
address of your home network but if you do not do that then you can use 57.1 or
do not do that then you can use 57.1 or whatever your IP address is here on this
whatever your IP address is here on this third octet so that will also work if
third octet so that will also work if you see that
you see that all right so I'm going to clear this now
all right so I'm going to clear this now what are we noticing when we're pinging
what are we noticing when we're pinging we're pinging this address and we're
we're pinging this address and we're getting some data back now if we ping an
getting some data back now if we ping an active address you can see that we get
active address you can see that we get okay 64 bytes from 192 1684.29 it's
okay 64 bytes from 192 1684.29 it's saying it's active we're getting details
saying it's active we're getting details back if we were to Ping something let me
back if we were to Ping something let me do like 41.
do like 41. where we just don't get any data back
where we just don't get any data back okay and let's try this one more time
okay and let's try this one more time let's try this a different way let's do
let's try this a different way let's do like a count of one dash C of one we'll
like a count of one dash C of one we'll do a count of one
do a count of one it's going to try to send one packet
it's going to try to send one packet over and see if it works nothing's
over and see if it works nothing's happening right it's trying to transmit
happening right it's trying to transmit that packet you could see that it's
that packet you could see that it's getting zero received here where here is
getting zero received here where here is getting four received no data is coming
getting four received no data is coming back it's just not doing anything for us
back it's just not doing anything for us so the thing that we can identify here
so the thing that we can identify here is what's the big difference if we look
is what's the big difference if we look at line one and two versus line one and
at line one and two versus line one and two what are we seeing when we get data
two what are we seeing when we get data back well the big difference here is
back well the big difference here is we're well two of them I guess we see
we're well two of them I guess we see that we get this response right that's a
that we get this response right that's a big difference and then down here it'll
big difference and then down here it'll say hey we received some packets if it's
say hey we received some packets if it's not zero now the easy way to do this is
not zero now the easy way to do this is to look at a line that says hey we
to look at a line that says hey we receive data which is this line here
receive data which is this line here okay now what I want to do is I want to
okay now what I want to do is I want to narrow this down just a little bit what
narrow this down just a little bit what we're going to say is we're just going
we're going to say is we're just going to do a ping of one time so I'm going to
to do a ping of one time so I'm going to clear this I'm going to bring it back to
clear this I'm going to bring it back to this like this
this like this I'm gonna do a count of one
I'm gonna do a count of one and that should just ping once and
and that should just ping once and that's perfect we don't need to Ping
that's perfect we don't need to Ping endlessly we just want to make sure we
endlessly we just want to make sure we can ping once and then we're done okay
can ping once and then we're done okay and then from here I'm gonna put this
and then from here I'm gonna put this into a text file I'm just going to call
into a text file I'm just going to call this ip.txt just like that
this ip.txt just like that so when I cat out ip.txt
so when I cat out ip.txt now you can see that I have this file
now you can see that I have this file it's stored I don't have to run the
it's stored I don't have to run the command again we're good to go so what
command again we're good to go so what we're going to do now is we can take
we're going to do now is we can take this and then we can start Gathering
this and then we can start Gathering data based off of what we see here
data based off of what we see here so what I want to do
so what I want to do is I want to just extract this one line
is I want to just extract this one line here the 64 bytes from 192
here the 64 bytes from 192 168.4.29 and the best way to do that is
168.4.29 and the best way to do that is with a command called grep so grep is
with a command called grep so grep is going to look for a specific term or
going to look for a specific term or phrase and we can do that and it's going
phrase and we can do that and it's going to pull down any line that has that term
to pull down any line that has that term or phrase so if I say grep here and then
or phrase so if I say grep here and then I just put in quotation 64 bytes like
I just put in quotation 64 bytes like this
this now when I cut out this all I'm pulling
now when I cut out this all I'm pulling down is this line and it's even
down is this line and it's even highlighting it for us it's saying
highlighting it for us it's saying here's the line that we see 64 bytes
here's the line that we see 64 bytes from 192.168 Okay so we've extracted
from 192.168 Okay so we've extracted just the one line and why am I
just the one line and why am I extracting this line well if we're
extracting this line well if we're building out a ping sweeper what I want
building out a ping sweeper what I want to do is I want to sweep every single IP
to do is I want to sweep every single IP within a specific subnet so say this dot
within a specific subnet so say this dot four right I want to Ping
four right I want to Ping 4.1.2.3 all the way through 254 255. I
4.1.2.3 all the way through 254 255. I want to see if I can get through all the
want to see if I can get through all the IP addresses in a subnet so what we're
IP addresses in a subnet so what we're going to do is we're going to Ping every
going to do is we're going to Ping every single one of them and say hey are you
single one of them and say hey are you you up are you there and we're going to
you up are you there and we're going to do it with a count of one and we're
do it with a count of one and we're going to say are you there okay and if
going to say are you there okay and if they're there they're going to say yeah
they're there they're going to say yeah I'm here 64 bytes here's my response and
I'm here 64 bytes here's my response and it's going to say 64 bytes from this IP
it's going to say 64 bytes from this IP address so we want to extract the IP
address so we want to extract the IP addresses to say yeah we're alive that's
addresses to say yeah we're alive that's basically our goal here so when we run
basically our goal here so when we run this on a bigger scale which is what
this on a bigger scale which is what we're going to do we're going to need to
we're going to do we're going to need to grep out this information and extract
grep out this information and extract this information to where we only just
this information to where we only just get the IP address back
get the IP address back okay so what we're going to do now is
okay so what we're going to do now is we're going to start narrowing down and
we're going to start narrowing down and grabbing this IP address and then I'm
grabbing this IP address and then I'm going to show you how we're going to
going to show you how we're going to take this all in one instance and run it
take this all in one instance and run it and then extract IP addresses so from
and then extract IP addresses so from here what I want to do is I want to do
here what I want to do is I want to do another command so every time we pipe
another command so every time we pipe we're saying hey run this command then
we're saying hey run this command then with that command run this command then
with that command run this command then also run this command too so we're going
also run this command too so we're going to keep running this command on top of
to keep running this command on top of this to narrow things down so here's
this to narrow things down so here's what we're doing here we're going to run
what we're doing here we're going to run a command called cut
a command called cut and with cut we're going to say I want
and with cut we're going to say I want to cut something out of this we need to
to cut something out of this we need to provide it what is called a delimiter so
provide it what is called a delimiter so we do a Dash D like this
we do a Dash D like this and the delimiter I'm going to use is a
and the delimiter I'm going to use is a space
space and then I'm going to say Dash f for
and then I'm going to say Dash f for field and then I'm going to say 4.
field and then I'm going to say 4. okay what is this doing well it's saying
okay what is this doing well it's saying Hey I want to cut this line that you're
Hey I want to cut this line that you're getting back on a space so the delimiter
getting back on a space so the delimiter is a space so here's a space Here's a
is a space so here's a space Here's a space Here's a space and it says I want
space Here's a space and it says I want to count up to 4 to grab that data so
to count up to 4 to grab that data so one two three four right here so if we
one two three four right here so if we say 4 here like this we hit enter we're
say 4 here like this we hit enter we're grabbing that specific IP address
grabbing that specific IP address because we're doing it by spaces if we
because we're doing it by spaces if we did it on three what do you think we're
did it on three what do you think we're going to grab we're going to grab the
going to grab we're going to grab the word from so you can see here's from so
word from so you can see here's from so what I want to do is grab the IP so
what I want to do is grab the IP so we're going to use this cut just like
we're going to use this cut just like this use our delimiter and then get to
this use our delimiter and then get to the correct field position that we want
the correct field position that we want to grab the IP address
to grab the IP address all right so we've got the IP address
all right so we've got the IP address now there's only one thing wrong here
now there's only one thing wrong here with this IP address is that there is a
with this IP address is that there is a little colon on the end of it we just
little colon on the end of it we just want this without a colon at all we want
want this without a colon at all we want it just like this now there's a couple
it just like this now there's a couple ways we can do this we could use
ways we can do this we could use something called said said it's a little
something called said said it's a little bit complicated and a little bit
bit complicated and a little bit Advanced I would say for where we're at
Advanced I would say for where we're at right now
right now um so I'd rather teach you an easier way
um so I'd rather teach you an easier way to do this and that is called translate
to do this and that is called translate so with translate all we're going to do
so with translate all we're going to do is we're going to do one more pipe like
is we're going to do one more pipe like this and we're just going to say TR for
this and we're just going to say TR for translate a Dash D for a delimiter again
translate a Dash D for a delimiter again and then we're going to say we want to
and then we're going to say we want to get rid of this
get rid of this and that's it we're just getting rid of
and that's it we're just getting rid of this okay so if we run this one more
this okay so if we run this one more time
time now you can see that we've successfully
now you can see that we've successfully extracted this IP address out that's our
extracted this IP address out that's our goal that's all we wanted to do
goal that's all we wanted to do now how can we apply this to something
now how can we apply this to something bigger how can we make this part of a
bigger how can we make this part of a bigger script that is the question and
bigger script that is the question and we're going to do that so what I want
we're going to do that so what I want you to do is I just want you to copy
you to do is I just want you to copy this okay copy this entire line
this okay copy this entire line and we're going to go into a mouse pad
and we're going to go into a mouse pad so let's copy the selection and I'm
so let's copy the selection and I'm going to clear my screen I'm just going
going to clear my screen I'm just going to say mouse pad
to say mouse pad and we're going to call this ipsweep.sh
okay so this is going to be a bash script
script and I'm going to make this bigger
and I'm going to make this bigger and the first thing we're going to do
and the first thing we're going to do with our bash script is we have to
with our bash script is we have to declare that it's a batch script we're
declare that it's a batch script we're going to say hash bang right here
going to say hash bang right here shebang is what we'd call this forward
shebang is what we'd call this forward slash bin forward slash bash this allows
slash bin forward slash bash this allows the machine to know when we run this
the machine to know when we run this this allows bash to know hey we're
this allows bash to know hey we're calling this here's the location to bash
calling this here's the location to bash this is what we're running with the
this is what we're running with the script you're also going to see this
script you're also going to see this when we we use python as well you'll see
when we we use python as well you'll see the the Declaration hip here at the top
the the Declaration hip here at the top or when we're calling this out so I'm
or when we're calling this out so I'm going to go ahead and control s and save
going to go ahead and control s and save this that'll add some nice color to this
this that'll add some nice color to this so when we're coding this out we get to
so when we're coding this out we get to see in color I like that a lot I'm going
see in color I like that a lot I'm going to actually make this a little bit
to actually make this a little bit smaller and then make this like this
smaller and then make this like this here so we can get the whole picture
here so we can get the whole picture okay so what I want to do is I want to
okay so what I want to do is I want to paste in what we just wrote so I'm just
paste in what we just wrote so I'm just going to control V here and paste that
going to control V here and paste that in
in so
so we don't need to do a cat of an IP
we don't need to do a cat of an IP address here
address here in this instance instead we're going to
in this instance instead we're going to change this back we're going to Ping
change this back we're going to Ping remember we want to Ping every device in
remember we want to Ping every device in the network so we want to Ping say if
the network so we want to Ping say if we're pinging 192 1684 dot X okay we
we're pinging 192 1684 dot X okay we want to Ping that and we can leave this
want to Ping that and we can leave this like this for now don't worry about
like this for now don't worry about changing anything here this is just
changing anything here this is just going to be a placeholder we're going to
going to be a placeholder we're going to do a little bit of extra
do a little bit of extra syntax here to make this work so we're
syntax here to make this work so we're going to write what is called a for Loop
going to write what is called a for Loop so we're going to say 4 and I'll explain
so we're going to say 4 and I'll explain what this does here in a second you're
what this does here in a second you're also going to see this again when we get
also going to see this again when we get into python encoding and so you'll be
into python encoding and so you'll be able to understand more and more about
able to understand more and more about loops and what for Loops are while Loops
loops and what for Loops are while Loops Etc they're very very useful and very
Etc they're very very useful and very common in coding and scripting so I'm
common in coding and scripting so I'm going to say 4 IP in and then I'm going
going to say 4 IP in and then I'm going to say sequence
to say sequence 1 through 254.
1 through 254. now
now very important this character here is
very important this character here is not an apostrophe okay this is not an
not an apostrophe okay this is not an apostrophe
apostrophe this is the little line I don't know
this is the little line I don't know what it's called it's above the attilda
what it's called it's above the attilda next to your escape button on your
next to your escape button on your keyboard so it's this right here okay
keyboard so it's this right here okay it's like a backwards apostrophe almost
it's like a backwards apostrophe almost I'm sure there's a term for it I just
I'm sure there's a term for it I just don't know it uh so you come in here and
don't know it uh so you come in here and you say okay four IP address in sequence
you say okay four IP address in sequence one through 254 and I'm going to explain
one through 254 and I'm going to explain what all this does in a second I want
what all this does in a second I want you just to type this out for now I want
you just to type this out for now I want you to say do
you to say do all right and then I want you to come
all right and then I want you to come down here
down here and we're going to say Ampersand on this
and we're going to say Ampersand on this line and we're going to say done I'm
line and we're going to say done I'm going to explain what all this means
going to explain what all this means okay so this is a loop that we've just
okay so this is a loop that we've just created
created what we're saying is for the IP address
what we're saying is for the IP address and we're just declaring this this could
and we're just declaring this this could be Bob if you wanted to we're just I'm
be Bob if you wanted to we're just I'm just making it a name or a term that's
just making it a name or a term that's easy for us to remember so we're going
easy for us to remember so we're going to say for IP but if you want to call
to say for IP but if you want to call this Bob call Bob for IP in sequence 1
this Bob call Bob for IP in sequence 1 through 254. so what sequence is doing
through 254. so what sequence is doing is it's saying Hey I want to count
is it's saying Hey I want to count everything from 1 to 254. so one two
everything from 1 to 254. so one two three four five six seven eight all the
three four five six seven eight all the way to 254. this for Loop means I'm
way to 254. this for Loop means I'm going to do this every single time so
going to do this every single time so for IP in one for ipn2 for ipn3 we're
for IP in one for ipn2 for ipn3 we're going to run this command until we're
going to run this command until we're done so until this sequence has run up
done so until this sequence has run up 255 times it's done
255 times it's done okay and now we're going to say I want
okay and now we're going to say I want to do a count of
to do a count of dollar sign IP
dollar sign IP so what we're saying here is for IP in
so what we're saying here is for IP in sequence 1 through 254 go ahead and do a
sequence 1 through 254 go ahead and do a ping Dash C for a count of one 192.1684
ping Dash C for a count of one 192.1684 254 and here we're going to say dot
254 and here we're going to say dot 1.2.3 every time this Loops over and
1.2.3 every time this Loops over and over and over it's going to be
over and over it's going to be incrementing that number through this
incrementing that number through this sequence that's all we're doing this is
sequence that's all we're doing this is a basic Loop okay so we're going to keep
a basic Loop okay so we're going to keep going through and through and through
going through and through and through now this will work if you plugged in
now this will work if you plugged in your hard-coded IP address here this
your hard-coded IP address here this will absolutely work now we can improve
will absolutely work now we can improve this just a little bit if we want to so
this just a little bit if we want to so what's going on here is what we're going
what's going on here is what we're going to say is if we wanted to run this we
to say is if we wanted to run this we would just do dot forward slash and then
would just do dot forward slash and then I P Suite okay and this would work
I P Suite okay and this would work that's fine but we can make this a
that's fine but we can make this a little bit better from a coding
little bit better from a coding perspective we can come in here and we
perspective we can come in here and we can give this a dollar sign one
can give this a dollar sign one and that means argument one so what
and that means argument one so what we're saying here is I want to give an
we're saying here is I want to give an argument instead so if you want to be
argument instead so if you want to be technical this first dot forward slash
technical this first dot forward slash ipsweep.sh that is argument zero so you
ipsweep.sh that is argument zero so you can consider this dollar sign zero
can consider this dollar sign zero argument one would be what you type
argument one would be what you type after that so this would be argument one
after that so this would be argument one argument two
argument two Etc so in this case what we can do is we
Etc so in this case what we can do is we could say I want to run
could say I want to run 192.1684 like this and this will run the
192.1684 like this and this will run the dot 1.2.3 after it so you provide the
dot 1.2.3 after it so you provide the argument it places that here in argument
argument it places that here in argument one and then it does the rest for you so
one and then it does the rest for you so this way you can specify your network
this way you can specify your network and if you wanted to Ping multiple
and if you wanted to Ping multiple networks you don't have to come back in
networks you don't have to come back in here and keep changing this it just
here and keep changing this it just works so super easy this is a great
works so super easy this is a great little script for a slash 24 type subnet
little script for a slash 24 type subnet okay
okay okay so let's go ahead and try running
okay so let's go ahead and try running this really quick I'm going to just
this really quick I'm going to just control s save this I'm going to close
control s save this I'm going to close it we're going to do a CH mod plus X on
it we're going to do a CH mod plus X on ipsweep if it'll allow us to we might
ipsweep if it'll allow us to we might have to do a
have to do a okay let's do LS La real quick make sure
okay let's do LS La real quick make sure it worked
it worked it sure did okay so here's what we're
it sure did okay so here's what we're gonna do we're going to run the ipsweep
gonna do we're going to run the ipsweep and we're going to say
and we're going to say 192.168 you just put in your IP here I'm
192.168 you just put in your IP here I'm going to run that all right
going to run that all right and you can see all the devices that are
and you can see all the devices that are coming back within my network here
coming back within my network here I'm going to go ahead and hit Ctrl C
I'm going to go ahead and hit Ctrl C cancel this out
cancel this out and so this is grabbing all the
and so this is grabbing all the different devices in my network now
different devices in my network now that's great
that's great that works out really well but what we
that works out really well but what we can do is improve this what if I typed
can do is improve this what if I typed in a what if I didn't type anything at
in a what if I didn't type anything at all what if I just hit enter here now
all what if I just hit enter here now I'm just getting all kinds of pings
I'm just getting all kinds of pings unknown and it's going off of some of
unknown and it's going off of some of the stuff I was doing before but it just
the stuff I was doing before but it just causes all kinds of issues and errors
causes all kinds of issues and errors right so you can see I'm trying to hit
right so you can see I'm trying to hit Ctrl C it's it's taking its time to
Ctrl C it's it's taking its time to Break
Break um here we get issues because we're not
um here we get issues because we're not we're just allowing any sort of argument
we're just allowing any sort of argument here what we need to do is we need to
here what we need to do is we need to fix this up just a little bit so what we
fix this up just a little bit so what we can say is we can come back in here and
can say is we can come back in here and just go mouse pad ipsweep.sh
and come in here and let's add a little bit extra oh and I also left this in
bit extra oh and I also left this in here don't leave this in here that's why
here don't leave this in here that's why that was running twice
that was running twice um okay so what we're doing here is we
um okay so what we're doing here is we need to add in a statement what we're
need to add in a statement what we're going to do is we're going to add in a
going to do is we're going to add in a if statement if statements are
if statement if statements are conditions we're saying hey if this
conditions we're saying hey if this condition is met do something for us if
condition is met do something for us if it's not met then go ahead and do
it's not met then go ahead and do something else all right so we're going
something else all right so we're going to say
to say if
if and we're gonna just put in here dollar
and we're gonna just put in here dollar sign one
sign one is equal to nothing
is equal to nothing then we're gonna go ahead and just say
then we're gonna go ahead and just say then
then Echo
Echo you forgot and IP address
Echo syntax something like this we'll just
syntax something like this we'll just say
say IP
IP sweep.sh and we'll go
sweep.sh and we'll go 192.1684 like that
192.1684 like that okay
okay and then if we did do this correctly
and then if we did do this correctly if we do have an argument inside of
if we do have an argument inside of argument one then we're going to say
argument one then we're going to say else do all of this here
else do all of this here and be done and then we're going to end
and be done and then we're going to end our if statement with f i
our if statement with f i now this script or this resemblance of
now this script or this resemblance of this script is not one of my own by the
this script is not one of my own by the way this is goes credit to something
way this is goes credit to something I've modified over time but the original
I've modified over time but the original credit definitely goes to Georgia
credit definitely goes to Georgia Weidman I remember seeing this in her
Weidman I remember seeing this in her course a long long time ago when I was
course a long long time ago when I was first getting started and she did a
first getting started and she did a great job of teaching this this is just
great job of teaching this this is just a modification of this script so I just
a modification of this script so I just want to make sure that all credit goes
want to make sure that all credit goes to her but looking at this let's break
to her but looking at this let's break this down really quick before we run
this down really quick before we run this again we've got an if statement we
this again we've got an if statement we said if
said if argument one doesn't equal anything then
argument one doesn't equal anything then you're gonna Echo back out and say hey
you're gonna Echo back out and say hey you forgot an IP address here's the
you forgot an IP address here's the syntax
syntax if it does include something then we're
if it does include something then we're gonna go ahead and come in here and say
gonna go ahead and come in here and say let's run our for statement our for Loop
let's run our for statement our for Loop and run through it and then we're going
and run through it and then we're going to end our if here
to end our if here the only thing that I'm doing uniquely
the only thing that I'm doing uniquely here is I'm including this Ampersand
here is I'm including this Ampersand which is going to run this command
which is going to run this command um multiple times at once this is a good
um multiple times at once this is a good way to explain it basically we have a
way to explain it basically we have a couple ways of doing this we could say
couple ways of doing this we could say like this so we could put a command here
like this so we could put a command here and this will run one at a time it'll
and this will run one at a time it'll say okay four one four two four three
say okay four one four two four three this allows multiple instances of this
this allows multiple instances of this Loop to run at once and just speeds
Loop to run at once and just speeds things up I can show you the difference
things up I can show you the difference between that so I'm going to go ahead
between that so I'm going to go ahead and just Ctrl s save this
and just Ctrl s save this I'm going to go ahead and just run this
I'm going to go ahead and just run this script real quick now let's try running
script real quick now let's try running it with without anything here
it with without anything here okay now look it says you forgot an IP
okay now look it says you forgot an IP address so look we did that correctly
address so look we did that correctly now let's go ahead and add the 192.168.4
now let's go ahead and add the 192.168.4 run it and you can see okay it's
run it and you can see okay it's sweeping but it's taking its sweet time
sweeping but it's taking its sweet time especially for the IP addresses that are
especially for the IP addresses that are going to hang like
going to hang like um like if I don't have a DOT two or dot
um like if I don't have a DOT two or dot three it's going to take a while so I'm
three it's going to take a while so I'm going to control C and get out of this
going to control C and get out of this if it'll let me and it looks like it's
if it'll let me and it looks like it's actually going to hang so what we can do
actually going to hang so what we can do is we can come back in I'm going to open
is we can come back in I'm going to open a new tab real quick just while that's
a new tab real quick just while that's waiting and I'm just going to say mouse
waiting and I'm just going to say mouse pad and we're just going to go back into
pad and we're just going to go back into ipsweep dot sh fits in this folder there
ipsweep dot sh fits in this folder there we go okay
we go okay so from here I'm going to change this
so from here I'm going to change this back to the Ampersand and I'm going to
back to the Ampersand and I'm going to save it I just want you to see the
save it I just want you to see the difference really quick and why I run it
difference really quick and why I run it like this so ipsweep
.sh192168.4 you can see it's picking everything up really fast all right what
everything up really fast all right what I can do now is I can run this and then
I can do now is I can run this and then store this into like ips.txt something
store this into like ips.txt something like that just like found IP addresses
like that just like found IP addresses okay so now if I cat IPS dot txt I have
okay so now if I cat IPS dot txt I have all the IP addresses I just found and I
all the IP addresses I just found and I found them that fast
found them that fast versus this which may still be going and
versus this which may still be going and it is and I can't even kill I'm just
it is and I can't even kill I'm just going to close this out okay so this is
going to close this out okay so this is the big difference there with that
the big difference there with that Ampersand and the speed what it is
Ampersand and the speed what it is capable of doing so
capable of doing so with all that being said we could take
with all that being said we could take this and do one more thing so I want to
this and do one more thing so I want to show you how we can utilize a one-liner
show you how we can utilize a one-liner these are called one line statements in
these are called one line statements in um in bash and we can do similar to what
um in bash and we can do similar to what we just did and accomplish that in this
we just did and accomplish that in this command line so now we have an IP
command line so now we have an IP address we have a list of IP addresses
address we have a list of IP addresses let's say that we want to run nmap now
let's say that we want to run nmap now we haven't gotten to nmap yet you don't
we haven't gotten to nmap yet you don't need to really know about it just know
need to really know about it just know that it is a tool that allows us to go
that it is a tool that allows us to go out and do Port scanning okay so
out and do Port scanning okay so typically we would just say something
typically we would just say something like nmap and we might do something like
like nmap and we might do something like uh Dash T4 Dash a dash p dash like this
uh Dash T4 Dash a dash p dash like this this is just saying I want to run a map
this is just saying I want to run a map scan I want to look at everything and I
scan I want to look at everything and I want to scan all ports this is just an
want to scan all ports this is just an example you can just run mmap IP address
example you can just run mmap IP address like this and that would be fine too
like this and that would be fine too like we could just go 192.168 4.29 and
like we could just go 192.168 4.29 and we'll do a quick M map scan okay but
we'll do a quick M map scan okay but what we can't do here is we can't just
what we can't do here is we can't just say hey I want to run uh well we could
say hey I want to run uh well we could we could say I want to run nmap for
we could say I want to run nmap for everything in dot zero 24.
everything in dot zero 24. the issue is it's going to take time
the issue is it's going to take time looking and finding what IP addresses
looking and finding what IP addresses are valid here if we have a list we can
are valid here if we have a list we can automate this process quite a bit we can
automate this process quite a bit we can just come in here and we can say
just come in here and we can say something a little bit different we can
something a little bit different we can say hey for IP we're using the same kind
say hey for IP we're using the same kind of syntax in dollar sign and we're going
of syntax in dollar sign and we're going to put parentheses here we're going to
to put parentheses here we're going to say cat
say cat and then we're going to say ips.txt
and then we're going to say ips.txt and then we're just going to do this
and then we're just going to do this we're going to say do and map
we're going to say do and map dollar sign IP and then again we have
dollar sign IP and then again we have the option of doing done or we can do
the option of doing done or we can do Ampersand done just like this okay I'm
Ampersand done just like this okay I'm just going to do done here as an example
just going to do done here as an example and just show you so this is really easy
and just show you so this is really easy we're saying hey for every IP address in
we're saying hey for every IP address in this list and all we're doing is we're
this list and all we're doing is we're cutting out this IP list that we just
cutting out this IP list that we just had so it's going to take the first IP
had so it's going to take the first IP then run the M Maps again it's going to
then run the M Maps again it's going to come back run the next one so until this
come back run the next one so until this list is completely done it's going to
list is completely done it's going to keep going through this Loop that's all
keep going through this Loop that's all it is a simple Loop then we're going to
it is a simple Loop then we're going to say done it's going to take that IP
say done it's going to take that IP address it's going to start scanning it
address it's going to start scanning it it's going to go through and hopefully
it's going to go through and hopefully find information and go in a loop so
find information and go in a loop so this is a quick way to automate some of
this is a quick way to automate some of this process I actually do this with a
this process I actually do this with a lot of my scripts where I will do some
lot of my scripts where I will do some probing see if anything is out there
probing see if anything is out there that's alive put it into an IP file and
that's alive put it into an IP file and you're going to see this later in the
you're going to see this later in the course and then nmap scan that
course and then nmap scan that so think about this hopefully this gets
so think about this hopefully this gets your wheels spinning on what you can do
your wheels spinning on what you can do to really start scripting some of this
to really start scripting some of this stuff out and this is going to be the
stuff out and this is going to be the first time you get your hands dirty with
first time you get your hands dirty with scripting we're going to go on again
scripting we're going to go on again with this and we're going to get more
with this and we're going to get more advanced as we go but this should be a
advanced as we go but this should be a good introductory lesson to you on how
good introductory lesson to you on how we can build a simple tool and automate
we can build a simple tool and automate a lot of this process fairly easily with
a lot of this process fairly easily with just a little bit of command line syntax
just a little bit of command line syntax so we're going to go ahead and move on
so we're going to go ahead and move on to the next section and I will see you
to the next section and I will see you over there
welcome to this module on python so if you've never used python before or even
you've never used python before or even heard of python before python is a
heard of python before python is a coding and scripting language it is
coding and scripting language it is commonly used in ethical hacking and
commonly used in ethical hacking and it's commonly used all around the world
it's commonly used all around the world it is actually considered one of the
it is actually considered one of the best beginner languages to start with if
best beginner languages to start with if you've never learned coding before so
you've never learned coding before so that's exactly what we're going to do
that's exactly what we're going to do we're going to cover some of the basics
we're going to cover some of the basics of python so we'll cover everything you
of python so we'll cover everything you see on this screen here strings math
see on this screen here strings math functions we're going to get into
functions we're going to get into conditional statements and looping we'll
conditional statements and looping we'll get into some more advanced items and
get into some more advanced items and eventually we're going to build our own
eventually we're going to build our own tools so we're going to be building a
tools so we're going to be building a port scanner at the end of the lesson
port scanner at the end of the lesson and then when we get into the exploit
and then when we get into the exploit development section of this course we're
development section of this course we're going to use Python again to write our
going to use Python again to write our own exploits so it's going to be used
own exploits so it's going to be used throughout the course you're going to
throughout the course you're going to see it again as a ethical hacker as well
see it again as a ethical hacker as well well you're going to go on to websites
well you're going to go on to websites and you might need to download python
and you might need to download python code or something to utilize against a
code or something to utilize against a host or a client and it's just going to
host or a client and it's just going to be frequently seen for you so very
be frequently seen for you so very important topic to cover especially for
important topic to cover especially for the foundations one very big thing to
the foundations one very big thing to point out you do not have to be a
point out you do not have to be a developer to be successful in
developer to be successful in penetration testing the important thing
penetration testing the important thing is that you understand what you're
is that you understand what you're seeing and understand how to read code
seeing and understand how to read code if when you come away from this module
if when you come away from this module you have a better understanding on how
you have a better understanding on how to read what you are seeing in code
to read what you are seeing in code you'll be much better off by no means do
you'll be much better off by no means do you have to be a developer I am still to
you have to be a developer I am still to this day nowhere near a developer level
this day nowhere near a developer level and I'm very very successful in what I
and I'm very very successful in what I do you don't have to be a developer so
do you don't have to be a developer so the big takeaway here is to take very
the big takeaway here is to take very good notes understand what you're seeing
good notes understand what you're seeing if you need to watch a video multiple
if you need to watch a video multiple times in this section absolutely okay
times in this section absolutely okay just make sure you understand everything
just make sure you understand everything in front of you and understand that the
in front of you and understand that the lessons are going to build upon each
lessons are going to build upon each other and it should all come together in
other and it should all come together in the end and you're going to get to see
the end and you're going to get to see it over and over through the course
it over and over through the course especially in the exploit development
especially in the exploit development section where we write our own python
section where we write our own python script so I look forward to teaching you
script so I look forward to teaching you this module on Python and look forward
this module on Python and look forward to seeing you in the next video
okay on to our first lesson the first thing that we're going to cover is going
thing that we're going to cover is going to be strings
to be strings and in order to do that I'm going to go
and in order to do that I'm going to go ahead and make a directory on my Linux
ahead and make a directory on my Linux machine you can make a folder in your
machine you can make a folder in your Mac or your Windows machine if you're
Mac or your Windows machine if you're using those operating systems I'm just
using those operating systems I'm just going to go in here and just say make
going to go in here and just say make dirt Python and then I'm going to go
dirt Python and then I'm going to go ahead and go into that directory
ahead and go into that directory so from here I'm going to go ahead and
so from here I'm going to go ahead and make my first script so I'm going to
make my first script so I'm going to clear my screen with Ctrl l
clear my screen with Ctrl l and I'm going to say mouse pad
and I'm going to say mouse pad and I'm just going to call this script
and I'm just going to call this script first dot pi and I'm going to give it
first dot pi and I'm going to give it the Ampersand here at the end that's
the Ampersand here at the end that's just going to allow me to open up this
just going to allow me to open up this process of mouse pad and also have the
process of mouse pad and also have the terminal available to me when I need it
terminal available to me when I need it so you'll see why I do that here in a
so you'll see why I do that here in a little bit now if you're not on Linux
little bit now if you're not on Linux that's okay you can use something like
that's okay you can use something like notepad plus plus or code runner for Mac
notepad plus plus or code runner for Mac which we showed earlier in this course
which we showed earlier in this course so from here what I'm going to do is I'm
so from here what I'm going to do is I'm going to go ahead and enter in a shebang
going to go ahead and enter in a shebang which is a hash an exclamation forward
which is a hash an exclamation forward slash bin or slash python3
slash bin or slash python3 and this is important for Linux here
and this is important for Linux here because we are calling out the directory
because we are calling out the directory if you are familiar with Linux What's
if you are familiar with Linux What's Happening Here is we have two options we
Happening Here is we have two options we can come in here and we can say
can come in here and we can say python3 and we can say first.pi and
python3 and we can say first.pi and that'll execute our script or in theory
that'll execute our script or in theory we can come in here we can just do a DOT
we can come in here we can just do a DOT forward slash first dot pi and run it
forward slash first dot pi and run it that way if we run it like this our
that way if we run it like this our script will not know where to go unless
script will not know where to go unless we declare that so up here we're giving
we declare that so up here we're giving the shebang forward slash bin forward
the shebang forward slash bin forward slash python3 that is where python3 is
slash python3 that is where python3 is located in this machine so it will come
located in this machine so it will come up here and it will look for this first
up here and it will look for this first and say okay I'm going to execute this
and say okay I'm going to execute this based on python 3. so that is a little
based on python 3. so that is a little bit of a Linux Nuance here and something
bit of a Linux Nuance here and something you should know in case you are ever
you should know in case you are ever coding in Linux or an environment that
coding in Linux or an environment that is similar like Unix which Macs do run
is similar like Unix which Macs do run off of so from here if you've ever taken
off of so from here if you've ever taken a coding class the first thing you do in
a coding class the first thing you do in every single coding class is what is
every single coding class is what is known as hello world so we're going to
known as hello world so we're going to print out hello world and print it to
print out hello world and print it to our terminal so in order to do that
our terminal so in order to do that we're going to go ahead and do some
we're going to go ahead and do some thing like this we're going to say print
thing like this we're going to say print and then we'll do a parenthesis and
and then we'll do a parenthesis and we'll say hello
I'm gonna go ahead and save this and if we run this and I'm going to run
and if we run this and I'm going to run this with python3 if we run this python3
this with python3 if we run this python3 first.pi
first.pi you'll see that it says hello world
you'll see that it says hello world now one thing that we can do in here
now one thing that we can do in here is good practice for being a developer
is good practice for being a developer is add some notes in so we're going to
is add some notes in so we're going to add a comment in here we're going to do
add a comment in here we're going to do a
a #or a pound symbol and we're just going
#or a pound symbol and we're just going to say print string
to say print string now when we run this again this isn't
now when we run this again this isn't going to print out comments are just for
going to print out comments are just for us inside of the script and I can prove
us inside of the script and I can prove that to you by Saving this and running
that to you by Saving this and running it again you'll see all we have in here
it again you'll see all we have in here is Hello World perfect
is Hello World perfect so comments
so comments with a hash are just meant for whoever
with a hash are just meant for whoever is reading your script or your code and
is reading your script or your code and that could be you or
that could be you or bad scenario but what if you get hit by
bad scenario but what if you get hit by a bus tomorrow you're the main developer
a bus tomorrow you're the main developer and nobody knows how to read your code
and nobody knows how to read your code because you didn't leave any comments
because you didn't leave any comments that'd be very bad so good coding
that'd be very bad so good coding practice suggests to leave good comments
practice suggests to leave good comments and make sure that people can come in
and make sure that people can come in and read your code and understand what
and read your code and understand what is going on in here so we're going to
is going on in here so we're going to add comments along the way so that way
add comments along the way so that way we understand what we're doing and
we understand what we're doing and practice good habits as well so what
practice good habits as well so what you're seeing here is what's called a
you're seeing here is what's called a string you're seeing a string in
string you're seeing a string in quotations and you can see a string
quotations and you can see a string printed out
printed out with single quotes as well so we can
with single quotes as well so we can just do hello world
just do hello world I'll add the exclamation for consistency
I'll add the exclamation for consistency and if we save this and print this
and if we save this and print this you'll see that it also prints
you'll see that it also prints hello world
hello world so it really doesn't matter if you have
so it really doesn't matter if you have single quotes or double quotes until we
single quotes or double quotes until we get into more advanced strings and we'll
get into more advanced strings and we'll talk about those a little bit later on
talk about those a little bit later on in the course but for now just know that
in the course but for now just know that you can use single quotes or double
you can use single quotes or double quotes when printing out a string
quotes when printing out a string another thing that we can do with
another thing that we can do with strings is print on multiple lines so if
strings is print on multiple lines so if we say print
we say print and we do triple quotes like this we say
and we do triple quotes like this we say this string runs and then we hit enter
this string runs and then we hit enter multiple lines with an exclamation and
multiple lines with an exclamation and and add in three more double quotes
and add in three more double quotes there and close this off
there and close this off we can add a note here as well that says
we can add a note here as well that says triple quote for multi-line
triple quote for multi-line and if we save this with Ctrl s and we
and if we save this with Ctrl s and we run this again
run this again you're going to see this string runs
you're going to see this string runs multiple lines awesome another thing
multiple lines awesome another thing that we can do is concatenate strings so
that we can do is concatenate strings so we can print out something like
we can print out something like this string
this string is and now we're going to add a space at
is and now we're going to add a space at the end of it make sure you have a space
the end of it make sure you have a space right here
right here we're going to do a plus sign and then
we're going to do a plus sign and then we're going to say awesome
we're going to say awesome just like that and we can say we can
just like that and we can say we can also concat innate
also concat innate it's always hard for me to spell that so
it's always hard for me to spell that so what's going to happen here is it's
what's going to happen here is it's going to take this string
going to take this string plus this string when it prints out so
plus this string when it prints out so the reason we have a space is it's got
the reason we have a space is it's got to have the space because there's no
to have the space because there's no space here and this will just add a
space here and this will just add a space for us even though in our heads we
space for us even though in our heads we might want it to so we're going to go
might want it to so we're going to go ahead and save this print it out one
ahead and save this print it out one more time
more time and you can see that it concatenated and
and you can see that it concatenated and said this string is awesome
said this string is awesome now one last thing
now one last thing we can also print out a new line so we
we can also print out a new line so we can just do something like this
can just do something like this and we can use a single quote this time
and we can use a single quote this time just to do a proof of concept do a
just to do a proof of concept do a backslash n like this
backslash n like this and this will print out a new line
and this will print out a new line and we'll get familiar with that later
and we'll get familiar with that later on as we get into functions we'll write
on as we get into functions we'll write our own function to make a new line but
our own function to make a new line but for now if we wanted to add another line
for now if we wanted to add another line we could and then we can just print
we could and then we can just print test that new line out
and let's see if it actually gave us a line printed in between this
line printed in between this concatenation and this new print
concatenation and this new print statement here let's go ahead and save
statement here let's go ahead and save that
that print it and you can see there is a line
print it and you can see there is a line here so the backslash n will print out a
here so the backslash n will print out a new line for us
new line for us and that is all we need to know for
and that is all we need to know for basic string so we're going to go ahead
basic string so we're going to go ahead and move on to math you can go ahead and
and move on to math you can go ahead and leave this open we're going to run
leave this open we're going to run through this as we go and then you'll
through this as we go and then you'll have a long script which will also make
have a long script which will also make for very good notes let's go ahead and
for very good notes let's go ahead and move on to math
move on to math so math
so math python actually has a built-in math
python actually has a built-in math interpreter
interpreter so we can do a bunch of fun stuff with
so we can do a bunch of fun stuff with python and with math that's
python and with math that's automatically built in so I'm going to
automatically built in so I'm going to go ahead and just call this section math
go ahead and just call this section math and if you want to like keep track of
and if you want to like keep track of sections you can come up here and just
sections you can come up here and just call this strings
call this strings and just capitalize it like that and
and just capitalize it like that and then that way we kind of have an idea of
then that way we kind of have an idea of where we're at you can even add an extra
where we're at you can even add an extra line here if we want to so from here
line here if we want to so from here let's go ahead and play around with math
let's go ahead and play around with math just a little bit so if I wanted to do a
just a little bit so if I wanted to do a print of 50 plus 50
print of 50 plus 50 we can definitely add
we can definitely add we can also subtract so if you want to
we can also subtract so if you want to do 50 minus 50 you could do that
do 50 minus 50 you could do that and I'll give you some time to catch up
and I'll give you some time to catch up here in just a second
here in just a second I'm just going to do a few print
I'm just going to do a few print statements then we'll take a look at
statements then we'll take a look at them and then we'll move on to some more
them and then we'll move on to some more math as well we can also do 50 times 50.
math as well we can also do 50 times 50. and we'll just use the little star or
and we'll just use the little star or the asterisks we'll just say multiply
the asterisks we'll just say multiply and we'll also do 50 divided by 50.
and we'll also do 50 divided by 50. we'll just say divide
so if we save that you could take a second to catch up you could see we are
second to catch up you could see we are just doing Simple Math here we should
just doing Simple Math here we should expect 100 we should expect zero we
expect 100 we should expect zero we should expect one here and 2500 if my
should expect one here and 2500 if my math is mental math is correct so I'm
math is mental math is correct so I'm going to go ahead and print this out
okay we've got 100 0 2500 and 1.0 so this 1.0 is a little bit different this
this 1.0 is a little bit different this is what's known as a float everything
is what's known as a float everything else that is come out so far is just an
else that is come out so far is just an integer and we'll talk a little bit
integer and we'll talk a little bit about that here in just a few minutes
about that here in just a few minutes but know that integers are on the left
but know that integers are on the left hand side and if we don't have a decimal
hand side and if we don't have a decimal point here we're looking at integers and
point here we're looking at integers and on the right hand side when we see
on the right hand side when we see anything on the right hand side of the
anything on the right hand side of the decimal we're looking at what is called
decimal we're looking at what is called a float and that becomes very important
a float and that becomes very important depending on when we need it
depending on when we need it for now we're going to keep worrying
for now we're going to keep worrying about math we'll get into integers and
about math we'll get into integers and floats in just a little bit
floats in just a little bit so another thing that math built into
so another thing that math built into python can do
python can do is it can do PEMDAS if you've never
is it can do PEMDAS if you've never heard of PEMDAS please excuse my dear
heard of PEMDAS please excuse my dear Aunt Sally so parentheses exponents
Aunt Sally so parentheses exponents multiply divide add subtract
multiply divide add subtract you may have had it something different
you may have had it something different within your educational experience but
within your educational experience but it will do that for you so if you do 50
it will do that for you so if you do 50 plus 50 minus 50
plus 50 minus 50 times 50 divided by 50.
times 50 divided by 50. it will give you the answer
it will give you the answer I don't know that Mental Math off hand
I don't know that Mental Math off hand another thing that we can do are
another thing that we can do are exponents so we can print say 50 to the
exponents so we can print say 50 to the second power which is same thing as 50
second power which is same thing as 50 times 50 which would be 2500 as well and
times 50 which would be 2500 as well and we can get exponents out of this
we can get exponents out of this and we'll actually go ahead and save
and we'll actually go ahead and save this and run this here because the next
this and run this here because the next step I want to be able to lay out
step I want to be able to lay out clearly
clearly you can see that we have successfully
you can see that we have successfully done the math here and did it for us
done the math here and did it for us awesome and it also did the exponent for
awesome and it also did the exponent for us as well
us as well so now a couple weird things with the
so now a couple weird things with the vision so you saw the 1.0 before
vision so you saw the 1.0 before well we have a few things that we can do
well we have a few things that we can do for example the 50 divided by 6 but
for example the 50 divided by 6 but using a percentage sign is what's called
using a percentage sign is what's called a medullo
a medullo and that it just takes what is left over
and that it just takes what is left over so 50 divided by 6 is not divisible
so 50 divided by 6 is not divisible there is a leftover so if we print that
there is a leftover so if we print that you'll see we get a leftover of two
you'll see we get a leftover of two which makes sense because 6 goes into 58
which makes sense because 6 goes into 58 times 6 times 8 is 48 and then we have 2
times 6 times 8 is 48 and then we have 2 left over so if we want to know what the
left over so if we want to know what the remainder is we can use a percentage
remainder is we can use a percentage sign here
sign here we can also do something like 50 divided
we can also do something like 50 divided by 6 like we saw earlier and this will
by 6 like we saw earlier and this will have division with remainder
have division with remainder so we can say or or float
so we can say or or float we'll save that and take a look at that
we'll save that and take a look at that really quick
you can see we get 8.3 and then it rounds up eventually to a four
and lastly what if we wanted no remainder so if we just did 50 divided
remainder so if we just did 50 divided by 6
by 6 we say no remainder
we say no remainder we could do this and we should get
we could do this and we should get eight here
eight here so depending on the situation and what
so depending on the situation and what we want we might want a situation where
we want we might want a situation where we only want the integer
we only want the integer or we only might want what's left over
or we only might want what's left over or perhaps we actually want the whole
or perhaps we actually want the whole number of what's being divided so there
number of what's being divided so there are a few different ways to divide with
are a few different ways to divide with math in Python and it's good to know all
math in Python and it's good to know all of them depending on the situation that
of them depending on the situation that you run into so for now just take notes
you run into so for now just take notes on this and know that there are a few
on this and know that there are a few ways to do math and division and you can
ways to do math and division and you can do PEMDAS and exponents and all kinds of
do PEMDAS and exponents and all kinds of fun stuff and this is just scratching
fun stuff and this is just scratching the surface of math with python
the surface of math with python so that's it for this lesson we're going
so that's it for this lesson we're going to go ahead and move on to the next one
to go ahead and move on to the next one which is going to start covering
which is going to start covering variables and methods
so I'm going to come in here and I'm just going to
call this section variables and methods and if we want to make our script a
and if we want to make our script a little bit clean we can just come in
little bit clean we can just come in here and copy this new line
here and copy this new line it'll be a lot easier once we write a
it'll be a lot easier once we write a function for this but we haven't gotten
function for this but we haven't gotten there quite yet so we're going to print
there quite yet so we're going to print out this new line and that way when we
out this new line and that way when we print this out
print this out you can see that we have kind of gaps in
you can see that we have kind of gaps in between the sections that we're working
between the sections that we're working on
on so now we're going to work on variables
so now we're going to work on variables and methods
and methods so variables
so variables variable means something can vary it can
variable means something can vary it can change and we're going to look at that
change and we're going to look at that here in a second so if we have something
here in a second so if we have something like quote and we make quote equal to
like quote and we make quote equal to All is fair in Love and War
All is fair in Love and War and this is what this is a string we are
and this is what this is a string we are storing the string inside of this
storing the string inside of this variable
variable called quote
called quote and we can just come in here now we can
and we can just come in here now we can print out whoa
print out whoa and if we do that we should get this
and if we do that we should get this returned back to us
returned back to us you can see all is fair and Love and War
you can see all is fair and Love and War if we didn't print this just go ahead
if we didn't print this just go ahead actually we'll just comment this out
actually we'll just comment this out this is a great way to test the script
this is a great way to test the script if we just save this now with a comment
if we just save this now with a comment and we hit enter there's nothing here we
and we hit enter there's nothing here we haven't given it any instructions to
haven't given it any instructions to actually print out so now we can print
actually print out so now we can print this out and it's printing whatever is
this out and it's printing whatever is stored inside of that variable in this
stored inside of that variable in this instance we have a string stored in
instance we have a string stored in there
there now when we talk about methods
now when we talk about methods methods are just functions that are
methods are just functions that are available for a given object now you
available for a given object now you could think of functions as something
could think of functions as something built in to python that allows us to do
built in to python that allows us to do something and it'll make sense here when
something and it'll make sense here when we get into using methods so we have
we get into using methods so we have this quote All is fair in Love and War
this quote All is fair in Love and War well what if we wanted to print this in
well what if we wanted to print this in a few different ways well we can use
a few different ways well we can use methods to do that for example we can
methods to do that for example we can print quote in uppercase and just do
print quote in uppercase and just do upper like that
upper like that and this is going to make it all
and this is going to make it all uppercase because we're giving it this
uppercase because we're giving it this period upper and then open close
period upper and then open close parentheses right here and that is
parentheses right here and that is allowing us to use that method so we can
allowing us to use that method so we can say uppercase
say uppercase and we can also print in lowercase if we
and we can also print in lowercase if we do lower
and just for one more we can also do print
print and we'll say quote dot title
and we'll say quote dot title and this is what's known as title cakes
and this is what's known as title cakes and title case will capitalize every
and title case will capitalize every single letter like it is the title uh in
single letter like it is the title uh in this instance here we're going to get
this instance here we're going to get like the a capitalize which wouldn't
like the a capitalize which wouldn't really be true in a title but still just
really be true in a title but still just know that title case is meant to
know that title case is meant to capitalize every first letter within
capitalize every first letter within your string or your sentence in this
your string or your sentence in this case we're going to call this lowercase
case we're going to call this lowercase here
here okay so let's go ahead and save this and
okay so let's go ahead and save this and we're going to print this out
and you can see the differences that we have we have it here
have we have it here in its normal quote and then we have it
in its normal quote and then we have it in uppercase all lowercase and then
in uppercase all lowercase and then every single first letter capitalized
every single first letter capitalized perfect these are methods these are just
perfect these are methods these are just a small example methods we're going to
a small example methods we're going to get into more a little bit later
get into more a little bit later here's another example what if we wanted
here's another example what if we wanted to print the length of quote
to print the length of quote let's say we wanted to know how many
let's say we wanted to know how many characters were within this sentence so
characters were within this sentence so this is going to count the characters
this is going to count the characters and this will also count spaces so we're
and this will also count spaces so we're trying to get a total count of what's
trying to get a total count of what's going on inside this string we print
going on inside this string we print that you'll see that we get 28 return so
that you'll see that we get 28 return so if you want to check that you can go
if you want to check that you can go count every single character within here
count every single character within here and you'll get the length of that and
and you'll get the length of that and that could become important as you're
that could become important as you're doing python later on and this is just
doing python later on and this is just yet another example of a method now
yet another example of a method now let's go back to looking at variables
let's go back to looking at variables and why they're called variables
and why they're called variables so let's say that we have a variable of
so let's say that we have a variable of a name and in this instance I'm going to
a name and in this instance I'm going to use my name and I'm going to make it a
use my name and I'm going to make it a string
string and I'm going to use my age
and I'm going to use my age I am 33 and
I am 33 and here we're going to say string just so
here we're going to say string just so we can make sure we notate the
we can make sure we notate the differences this is an INT or an integer
differences this is an INT or an integer and we're also going to give a GPA let's
and we're also going to give a GPA let's say I went to school I'm going to use
say I went to school I'm going to use the American grading system let's say I
the American grading system let's say I had a 3.7 GPA
had a 3.7 GPA and this is what's known as a float
and this is what's known as a float and that has a decimal so make sure you
and that has a decimal so make sure you notate that
notate that so if we print these out if we print out
so if we print these out if we print out the integer of age
the integer of age that'll still print
that'll still print 33.
33. what if we print out the integer of
what if we print out the integer of 30.1 save that
30.1 save that take a look
take a look and you'll see that we just get
and you'll see that we just get 30.
30. all right
all right and you can see that this rounded down
and you can see that this rounded down again integer just the first number just
again integer just the first number just what's on the left side of the decimal
what's on the left side of the decimal point
point doesn't care about the right side what
doesn't care about the right side what if we printed integer
if we printed integer of 30.9
will it round will it round
will it round no
no so if we save that
so if we save that and we print again you'll see it's still
and we print again you'll see it's still 30. it doesn't care what's on the right
30. it doesn't care what's on the right side of the number it's only going to
side of the number it's only going to take what the integer is so anytime you
take what the integer is so anytime you print an integer you're only going to
print an integer you're only going to get the first or what's on the left hand
get the first or what's on the left hand side of the decimal point so make sure
side of the decimal point so make sure you know that
you know that now a few cool things that we can do
now a few cool things that we can do let's say that we wanted to print
let's say that we wanted to print something like this if we print
something like this if we print my name is with a space
my name is with a space and then we'll do plus name
and then we'll do plus name and we'll say
and we'll say space again and I
space again and I m space
m space age
age Plus
Plus space years old make sure you have your
space years old make sure you have your spacing in there properly that way you
spacing in there properly that way you can account for the spaces before and
can account for the spaces before and after these variables but what are we
after these variables but what are we doing here we are concatenating
doing here we are concatenating variables now if I try to run this I'm
variables now if I try to run this I'm actually going to get an error if I run
actually going to get an error if I run it
it we're getting a type error and this is a
we're getting a type error and this is a great example by the way of
great example by the way of understanding what python is telling you
understanding what python is telling you I get emails all the time from students
I get emails all the time from students saying I don't understand why my script
saying I don't understand why my script isn't working and the first thing I'll
isn't working and the first thing I'll ask them is I will say did you read the
ask them is I will say did you read the output of the error because it tells you
output of the error because it tells you it says Hey on line 44 by control tab
it says Hey on line 44 by control tab look this is line 44 it tells you where
look this is line 44 it tells you where your mistake is and then it also says it
your mistake is and then it also says it only concatenate string not int to
only concatenate string not int to string so if you didn't know what this
string so if you didn't know what this meant and maybe you don't you can copy
meant and maybe you don't you can copy this go to Google and search it and I
this go to Google and search it and I promise you somebody will have had this
promise you somebody will have had this error before
error before as much as if we wish to be special uh
as much as if we wish to be special uh there's not in many situations that will
there's not in many situations that will come up where there hasn't been this
come up where there hasn't been this error or an issue that we run into that
error or an issue that we run into that somebody hasn't already had before so
somebody hasn't already had before so with that in mind
with that in mind we can fix this so it's saying that it
we can fix this so it's saying that it can only concatenate strings not
can only concatenate strings not integers well name is a string but age
integers well name is a string but age is an integer so we need to make in this
is an integer so we need to make in this situation age or string so what we're
situation age or string so what we're going to do is just say Str like this
going to do is just say Str like this and give it like that
and give it like that and now if we print this save it print
and now if we print this save it print it
it you can see my name is Heath and I am 33
you can see my name is Heath and I am 33 years old perfect
years old perfect now what happens if I am a year older
now what happens if I am a year older well I could take age and do something
well I could take age and do something like plus equals one
like plus equals one something like that
something like that and if I print age now hopefully
and if I print age now hopefully we are seeing 34. you could see 34. now
we are seeing 34. you could see 34. now this is what comes into play this is a
this is what comes into play this is a variable variables can change
variable variables can change at this point in the script we Define
at this point in the script we Define that we are 33 and as we run through it
that we are 33 and as we run through it I am still 33 when I print this
I am still 33 when I print this statement out however I've had a
statement out however I've had a birthday now age has increased by one
birthday now age has increased by one printing age out now will say that I'm
printing age out now will say that I'm 34.
34. so variables can change variables can
so variables can change variables can store different numbers at different
store different numbers at different times that's why they are called
times that's why they are called variables because they vary now
variables because they vary now we could also do something like birthday
we could also do something like birthday and set birthday equal to one and I
and set birthday equal to one and I could say age plus equals birthday
could say age plus equals birthday and then print days and guess what now
and then print days and guess what now it's going to return
it's going to return 35.
35. so just know that you can store a number
so just know that you can store a number within a variable we've shown that
within a variable we've shown that before already we can add two integers
before already we can add two integers together and we can print them out so
together and we can print them out so we're adding those together and it's
we're adding those together and it's taking that total and adding that to age
taking that total and adding that to age and now
and now it's saying we're 35 years old
it's saying we're 35 years old so that is it for this lesson we're
so that is it for this lesson we're going to go ahead and move on to
going to go ahead and move on to functions and fix this new line issue
functions and fix this new line issue that we've had plus write some pretty
that we've had plus write some pretty cool stuff out and build some other cool
cool stuff out and build some other cool functions out as well so I'll go ahead
functions out as well so I'll go ahead and see you over in the next lesson
and see you over in the next lesson all right moving on to functions so
all right moving on to functions so let's go ahead and print out a new line
let's go ahead and print out a new line really quick
and we're going to call this functions now I like to think of functions as many
now I like to think of functions as many programs what they are is an organized
programs what they are is an organized block of code that you define and then
block of code that you define and then you can call it later instead of
you can call it later instead of repeatedly typing the code out
repeatedly typing the code out so we're going to take a look at some
so we're going to take a look at some examples of that
examples of that so let's go ahead and write a function
so let's go ahead and write a function so let's do a Define Def and that's how
so let's do a Define Def and that's how we start a function and in this one I'm
we start a function and in this one I'm going to say who am I
going to say who am I and I'm going to do closed parentheses
and I'm going to do closed parentheses and here we're going to say
and here we're going to say this is a function without parameters
this is a function without parameters and we'll talk about that here in just a
and we'll talk about that here in just a little bit
little bit now indentation is incredibly important
now indentation is incredibly important in Python if we do not indent we will
in Python if we do not indent we will throw an error here and you're going to
throw an error here and you're going to see a lot of situations where
see a lot of situations where indentation becomes incredibly important
indentation becomes incredibly important it's one of the most important things in
it's one of the most important things in python python does not have a lot of
python python does not have a lot of rules that apply to it but indentation
rules that apply to it but indentation is one of them that you must follow so
is one of them that you must follow so we're going to go ahead and hit the tab
we're going to go ahead and hit the tab to indent and I'm going to say my name
to indent and I'm going to say my name is Heath
and this is what is known as a local variable we'll talk about that here in a
variable we'll talk about that here in a second as well
second as well age is equal to 30.
age is equal to 30. and we're going to go ahead and print
and we're going to go ahead and print same thing we did before we can actually
same thing we did before we can actually just kind of copy this up here we'll say
just kind of copy this up here we'll say my name is
my name is just like this okay copy all that paste
just like this okay copy all that paste it and then
it and then add the closed parentheses there I'll
add the closed parentheses there I'll let you catch up
let you catch up and then we can just call down here
and then we can just call down here who am I
so what's going on in here well we have a function that we're
well we have a function that we're defining we're calling it who am I
defining we're calling it who am I and it has no parameters we'll get into
and it has no parameters we'll get into parameters here in just a second
parameters here in just a second now we're giving it some items within
now we're giving it some items within this in this instance what we're doing
this in this instance what we're doing is we're giving this local variables
is we're giving this local variables we're saying hey
we're saying hey in this instance when we have a variable
in this instance when we have a variable of name it's going to be Heat and the
of name it's going to be Heat and the age is going to be 30.
age is going to be 30. well whatever is stored in here is only
well whatever is stored in here is only stored within the function
stored within the function that's why this is a local variable if
that's why this is a local variable if we print
we print age
age as well we'll see that so we know that
as well we'll see that so we know that age was 35 we called age over here is 30
age was 35 we called age over here is 30 and let's see what happens first of all
and let's see what happens first of all we called our function here we said who
we called our function here we said who am I called that and all it does is run
am I called that and all it does is run our mini program our mini program says
our mini program our mini program says hey I'm going to print out
hey I'm going to print out these variables into this string here
these variables into this string here okay and that's exactly what it did but
okay and that's exactly what it did but when we printed age again you could see
when we printed age again you could see that we're actually still 35 so this
that we're actually still 35 so this variable or the variables that are
variable or the variables that are within a function are local and do not
within a function are local and do not apply outside of the function so make
apply outside of the function so make sure to remember that okay so I'm going
sure to remember that okay so I'm going to delete this print statement we don't
to delete this print statement we don't need it
need it and we're going to write some more
and we're going to write some more functions so let's do one where we add
functions so let's do one where we add some parameters
some parameters so we're going to do add 100
so we're going to do add 100 and we're going to give this a parameter
and we're going to give this a parameter of num n-u-m and that's just going to
of num n-u-m and that's just going to stand for number
stand for number okay we're going to indent make sure we
okay we're going to indent make sure we indent and all we're going to do is
indent and all we're going to do is print num Plus 100.
print num Plus 100. so when we call our function we say add
so when we call our function we say add 100
100 just like last time
just like last time this time we have to actually give it
this time we have to actually give it what is called an argument so our
what is called an argument so our argument goes with our parameter here
argument goes with our parameter here when we're calling it so our argument is
when we're calling it so our argument is going to be a hundred and when we print
going to be a hundred and when we print this out this is going to be 200
this out this is going to be 200 hopefully so we'll save this
hopefully so we'll save this run it
run it you can see that we got 200 because
you can see that we got 200 because we're doing print 100 plus 100. that's
we're doing print 100 plus 100. that's all we're doing is this mini program
all we're doing is this mini program okay let's try another one let's say we
okay let's try another one let's say we want to have multiple parameters
want to have multiple parameters let's do Define
add and we're just going to add X and Y this one's going to be easy we're just
this one's going to be easy we're just going to say print
going to say print X Plus y
X Plus y and now we can add whatever we want so
and now we can add whatever we want so let's add Seven and Seven
let's add Seven and Seven and one will take the place of X the
and one will take the place of X the other one will take the place of Y
other one will take the place of Y X Plus y 7 plus 7 should be 14. let's go
X Plus y 7 plus 7 should be 14. let's go ahead and run that
ahead and run that you'll see we get 14 here beautiful
you'll see we get 14 here beautiful all right let's make it a little bit
all right let's make it a little bit more complicated then
more complicated then all right let's try adding in here
all right let's try adding in here another function this time we're going
another function this time we're going to do multiply we're going to do X and Y
to do multiply we're going to do X and Y again
again and instead of doing a print I want to
and instead of doing a print I want to show you something a little bit
show you something a little bit different let's say we just return
different let's say we just return X
X times y
times y and now in this instance
and now in this instance if we multiply
7 times 7 do we get 49
do we get 49 we don't
we don't okay
okay there's a reason for this this is just
there's a reason for this this is just calling back so when this is saying
calling back so when this is saying return this isn't saying print remember
return this isn't saying print remember this says print this is going to return
this says print this is going to return x times y so we can call this here this
x times y so we can call this here this function and it knows that this function
function and it knows that this function is equal to 49 and perhaps we can put
is equal to 49 and perhaps we can put that into something else like we could
that into something else like we could put that maybe into a variable or
put that maybe into a variable or whatever it is we might want to do with
whatever it is we might want to do with it however if we wanted to return to the
it however if we wanted to return to the screen we actually have to call that so
screen we actually have to call that so sometimes we're going to actually store
sometimes we're going to actually store something instead of printing it we do a
something instead of printing it we do a lot of printing in Python tutorials just
lot of printing in Python tutorials just so that you can see it on the screen and
so that you can see it on the screen and make sure that you're seeing what you're
make sure that you're seeing what you're doing and that everything's printing out
doing and that everything's printing out okay so that's why we're doing this but
okay so that's why we're doing this but please understand that the return option
please understand that the return option does exist and is used quite frequently
does exist and is used quite frequently so I'm going to save this
so I'm going to save this and run this you can see now that we get
and run this you can see now that we get 49. perfect
49. perfect okay two more
okay two more let's say we want to do a square root
let's say we want to do a square root okay so let's define square root
okay so let's define square root and we're just going to give it one
and we're just going to give it one parameter
parameter and in this instance we're going to
and in this instance we're going to print out the square root so we're going
print out the square root so we're going to take X
to take X and a square root an exponent format is
and a square root an exponent format is just to
just to the power of 0.5
the power of 0.5 that's all we're doing and we can test
that's all we're doing and we can test that theory by doing something like
that theory by doing something like square root
square root of 64.
which we should return as 8 because 8 times 8 is 64. so if we save that
times 8 is 64. so if we save that come in here print it and you can see we
come in here print it and you can see we get a float of 8.0
get a float of 8.0 now I told you we would create our own
now I told you we would create our own function for a new line and we're going
function for a new line and we're going to do just that
to do just that let's go ahead and Define new line
let's go ahead and Define new line and we could call this like new line if
and we could call this like new line if we wanted to or whatever but I think to
we wanted to or whatever but I think to make it simple as long as we understand
make it simple as long as we understand what it is we can make comments and
what it is we can make comments and notes in here if we wanted to we could
notes in here if we wanted to we could just say defined NL
just say defined NL and then we can just say that when we do
and then we can just say that when we do that we're just going to print out
our n for our new line and then we call a new line we'll get
and then we call a new line we'll get one very simple so we can just even say
one very simple so we can just even say in here
in here new line okay so now we know and we save
new line okay so now we know and we save that and we can print it
that and we can print it you'll see it
you'll see it it's here but we really don't have
it's here but we really don't have anything after it to really show it but
anything after it to really show it but we do have that space there
we do have that space there so that is it for this lesson I'll go
so that is it for this lesson I'll go ahead and see you over in the next one
ahead and see you over in the next one next up we're going to learn about
next up we're going to learn about Boolean expressions and also relational
Boolean expressions and also relational and Boolean operators
and Boolean operators so let's go ahead and type in here
so let's go ahead and type in here Boolean expressions
Boolean expressions and when we think of these we can just
and when we think of these we can just think that this as true or false
think that this as true or false that's really what it is
that's really what it is so from here let's do a few variables so
so from here let's do a few variables so we could set Bowl one equal to true
we could set Bowl one equal to true we're just going to say hey this
we're just going to say hey this variable is true
variable is true bull 2 we could set equal to three times
bull 2 we could set equal to three times three
three is equal to 9. so the double equals
is equal to 9. so the double equals means that something is equal to
means that something is equal to something so we have three times three
something so we have three times three that's nine equal equal that means that
that's nine equal equal that means that equals nine do not confuse that with
equals nine do not confuse that with setting up your variable this is saying
setting up your variable this is saying hey my variable is equal to this but
hey my variable is equal to this but this is saying this is equal to this
this is saying this is equal to this number okay and that is a true statement
number okay and that is a true statement we could also say Bool 3 and make that
we could also say Bool 3 and make that false
false or we can give it a statement that makes
or we can give it a statement that makes it false so something like 3 times 3
it false so something like 3 times 3 does not equal nine exclamation equals
does not equal nine exclamation equals means does not equal nine
means does not equal nine now if we print it out
now if we print it out bull one bull two bull three ample four
bull one bull two bull three ample four just like that
just like that and save it
and save it and if we come
and if we come in here you'll see that it says true
in here you'll see that it says true true false false
true false false again Boolean Expressions is something
again Boolean Expressions is something true is something false
true is something false why do we need to know this well we need
why do we need to know this well we need to know if something is true
to know if something is true then we might want to continue on or if
then we might want to continue on or if something is false we might want to do
something is false we might want to do something and we'll get into that when
something and we'll get into that when we get into conditional statements like
we get into conditional statements like if something is true then go ahead and
if something is true then go ahead and do this if something is false do this or
do this if something is false do this or there's something called while Loops
there's something called while Loops which will allow us to continue as long
which will allow us to continue as long as something is true we're going to get
as something is true we're going to get there when we get to conditional
there when we get to conditional statements as well or looping I should
statements as well or looping I should say and we'll talk about that but that
say and we'll talk about that but that is why we might want to know these
is why we might want to know these things among other stuff we might want
things among other stuff we might want to know if something's true or set that
to know if something's true or set that parameter or that variable to True until
parameter or that variable to True until it becomes false
it becomes false etc etc so right now just understand
etc etc so right now just understand that Boolean expressions are true or
that Boolean expressions are true or false and we're going to come in here
false and we're going to come in here and we're going to print
and we're going to print and we're going to say type
and we're going to say type and we're going to do Bowl One
and we're going to do Bowl One okay and this will tell us now this is a
okay and this will tell us now this is a nice thing so if we come in here and say
nice thing so if we come in here and say type it'll give us the class this class
type it'll give us the class this class is Boolean awesome and another example
is Boolean awesome and another example of that is if we say like Rule 5 is
of that is if we say like Rule 5 is equal to true and we print the type so
equal to true and we print the type so if you see true and you're like I wonder
if you see true and you're like I wonder what that is is that Boolean or is it
what that is is that Boolean or is it actually just a string we come in here
actually just a string we come in here and say pull five let's save that
and say pull five let's save that save that there and then you should see
save that there and then you should see that that class is actually a string
that that class is actually a string here so you can check with the type to
here so you can check with the type to see what is this okay so the type
see what is this okay so the type feature is very nice and we can see that
feature is very nice and we can see that we are dealing with a Boolean here and
we are dealing with a Boolean here and this one is actually a straight so
this one is actually a straight so please note that if you put it in
please note that if you put it in quotations that makes the string
quotations that makes the string you leave it like this that makes it a
you leave it like this that makes it a Boolean expression
Boolean expression let's go ahead and make a new line
let's go ahead and make a new line and we're going to talk about
and we're going to talk about relational
relational and Boolean operators
okay so we can think of that as let's make a
so we can think of that as let's make a variable here we say
variable here we say greater than
we say 7 is greater than 5. well that would be true
would be true and we are using an operator here so the
and we are using an operator here so the operator is the greater than sign
operator is the greater than sign we're also using a Boolean expression
we're also using a Boolean expression because it's going to result in a true
because it's going to result in a true return if we were to print that out
return if we were to print that out now we can do a few other things we can
now we can do a few other things we can say like less than
say like less than is equal to 5 is less than seven we can
is equal to 5 is less than seven we can do greater than
do greater than or equal to
or equal to which would be 7 is greater than or
which would be 7 is greater than or equal to seven that's true
equal to seven that's true we can also do less than or equal to
we can also do less than or equal to and in that case we can do 7 is less
and in that case we can do 7 is less than or equal to seven which is also
than or equal to seven which is also true
true so all of these statements here are true
so all of these statements here are true now we can get into some other type of
now we can get into some other type of operators and statements here what if we
operators and statements here what if we did
did and so let's just call this test and
and so let's just call this test and we're going to do test and
we're going to do test and we say 7 is greater than five well
we say 7 is greater than five well that's true
that's true and
and 5 is less than seven that's also true
5 is less than seven that's also true both statements are true thus this is
both statements are true thus this is true
true do another one
do another one test and two
test and two and for some students this does take a
and for some students this does take a little bit to get your head wrapped
little bit to get your head wrapped around I'm going to provide a table for
around I'm going to provide a table for you here just in a second but just
you here just in a second but just follow along and I'll explain this as we
follow along and I'll explain this as we go let's say we have 7 is greater than
go let's say we have 7 is greater than five
five and
and five is greater than seven
five is greater than seven all right let me fix that syntax five is
all right let me fix that syntax five is greater than seven this now becomes
greater than seven this now becomes false
false why well seven is greater than five
why well seven is greater than five and 5 is greater than seven that's not
and 5 is greater than seven that's not true so because it's not true because
true so because it's not true because all statements are not true
all statements are not true this becomes false
this becomes false there's an alternative to this what if
there's an alternative to this what if we had an or we said or so 7 is greater
we had an or we said or so 7 is greater than 5 or
than 5 or 5 is less than seven well both
5 is less than seven well both statements are true thus this is true
statements are true thus this is true but we can have the same situation as
but we can have the same situation as before where we have 7 is greater than 5
before where we have 7 is greater than 5 or 5 is greater than seven and guess
or 5 is greater than seven and guess what this statement is actually true
what this statement is actually true because all we need is one condition to
because all we need is one condition to be true for this to be true so in this
be true for this to be true so in this situation this is true
situation this is true or if this is true then the whole thing
or if this is true then the whole thing becomes true
becomes true so just because this is false this would
so just because this is false this would also have to be false for this to be
also have to be false for this to be false
false hopefully that makes sense one other
hopefully that makes sense one other thing here before I show you the cool
thing here before I show you the cool little table is we could do test not so
little table is we could do test not so if we said something was not true
if we said something was not true guess what that becomes false
guess what that becomes false same thing if we said it was not false
same thing if we said it was not false then it's true not is just the opposite
then it's true not is just the opposite so not true in this situation is false
so not true in this situation is false now if we go out to the internet
now if we go out to the internet and we go to Google
and we go to Google we could come in here and we can just
we could come in here and we can just search something like python truth table
search something like python truth table and if we go to images we should be able
and if we go to images we should be able to find one that works out pretty well
to find one that works out pretty well in our favor here's a good example right
in our favor here's a good example right here
here so if you ever take a coding class you
so if you ever take a coding class you might be quizzed on this
might be quizzed on this this will tell you truth tables right
this will tell you truth tables right here so if it's not false it's true it's
here so if it's not false it's true it's not true it's false we can look at or
not true it's false we can look at or statements so true or false is true the
statements so true or false is true the only situation and or statement becomes
only situation and or statement becomes false is when both are false now the and
false is when both are false now the and we looked at that if it's true and false
we looked at that if it's true and false it's false if it's false and true or
it's false if it's false and true or false and false it's still False only
false and false it's still False only situation for and where it can be true
situation for and where it can be true is when both are true there's also not
is when both are true there's also not or not and
or not and there is does not equal or equals so
there is does not equal or equals so it's good to know these types of Truth
it's good to know these types of Truth tables and you can come and just again
tables and you can come and just again Google python truth table and come look
Google python truth table and come look at this pretty straightforward once you
at this pretty straightforward once you get the hang of it but it's completely
get the hang of it but it's completely okay for right now for it to be
okay for right now for it to be confusing just wanted you to know that
confusing just wanted you to know that these are out there and exist in case
these are out there and exist in case you are a little bit confused by this
you are a little bit confused by this lesson
lesson so we're going to go ahead and move on
so we're going to go ahead and move on to the next lesson which is going to
to the next lesson which is going to cover conditional statements
cover conditional statements okay we'll come in here we'll do a new
okay we'll come in here we'll do a new line
line and we'll just say conditional
and we'll just say conditional statements
statements and we can think of this as if then
and we can think of this as if then or if then else or if else either way
or if then else or if else either way you want to write this this is fine
you want to write this this is fine so think about this
so think about this if you go to the store and you want to
if you go to the store and you want to buy a drink and that drink is two
buy a drink and that drink is two dollars
dollars if you have two dollars or more you can
if you have two dollars or more you can buy the drink
buy the drink if you do not have two dollars you will
if you do not have two dollars you will not be able to buy the drink
not be able to buy the drink so let's take a look at that
so let's take a look at that so if we write a function and we call it
so if we write a function and we call it Define drink
Define drink and we give it a parameter of money we
and we give it a parameter of money we come in here and we say if
come in here and we say if money
money is greater than or equal to two
is greater than or equal to two then we're going to return
then we're going to return look at the indentation again
look at the indentation again we need an indent here after our
we need an indent here after our function and we need an indent after our
function and we need an indent after our if statement so make sure you're
if statement so make sure you're indenting correctly
indenting correctly return you
return you got yourself a drink
got yourself a drink and here we come back we can say else
and here we come back we can say else we're going to return
kind of like Seinfeld no soup for you all right so if we come in here and we
all right so if we come in here and we print drink
print drink of three meaning we had three dollars at
of three meaning we had three dollars at the time and we print drink of one
the time and we print drink of one meaning we had one dollar at the time
meaning we had one dollar at the time we're gonna have two different results
we're gonna have two different results if we have two or more dollars we're
if we have two or more dollars we're going to return you've got yourself a
going to return you've got yourself a drink otherwise if we have less than two
drink otherwise if we have less than two dollars we're gonna say no drink for you
dollars we're gonna say no drink for you let's save that
you've got yourself a drink when we print out three dollars because we had
print out three dollars because we had enough money here you can see with one
enough money here you can see with one dollar we did not have enough money thus
dollar we did not have enough money thus no drink or us
no drink or us okay let's take a look at a little bit
okay let's take a look at a little bit more of a complicated one we're gonna
more of a complicated one we're gonna come in here we're gonna say Define now
come in here we're gonna say Define now I'm going to make this alcoholic
I'm going to make this alcoholic beverages if you do not drink that's
beverages if you do not drink that's okay you can just follow along still you
okay you can just follow along still you can change it into whatever you want to
can change it into whatever you want to be I think this is a good example
be I think this is a good example because we have a couple parameters and
because we have a couple parameters and we can use those to make different sort
we can use those to make different sort of conditional statements so let's
of conditional statements so let's define alcohol
define alcohol now in the United States
now in the United States we have two things that we need in order
we have two things that we need in order to purchase alcohol one we have to be
to purchase alcohol one we have to be old enough
old enough we also have to have enough money
we also have to have enough money similar to the drink before that was
similar to the drink before that was non-alcoholic we assume
non-alcoholic we assume well we have to actually be old enough
well we have to actually be old enough to purchase the strength in the United
to purchase the strength in the United States you have to be 21. so if
our age is greater than or equal to 21. they put a space here by the way sorry
and look the and is coming into play money
look the and is coming into play money is greater than or equal to five
we're getting a drink all right
all right now we're gonna say else if
now we're gonna say else if because there's a few situations that we
because there's a few situations that we can be in there's actually four
can be in there's actually four situations here so we're going to say
situations here so we're going to say e-l-i-f which stands for else if
e-l-i-f which stands for else if what happens if our age is greater than
what happens if our age is greater than or equal to 21
or equal to 21 and we don't have enough money so we say
and we don't have enough money so we say money is less than five
money is less than five well in that situation we're going to
well in that situation we're going to return
return come back with more money
okay and then what if we have another situation where we say
situation where we say age is less than 21.
age is less than 21. and we actually have money
and we actually have money we're just an underage person trying to
we're just an underage person trying to buy a drink and we say five dollars
buy a drink and we say five dollars well we're gonna return
nice try kid and then lastly if we have no monies and
and then lastly if we have no monies and we're not old enough well then we can
we're not old enough well then we can just return something like your
just return something like your too young
too young and two poor
and two poor yay and then let's try these out so
yay and then let's try these out so we've got these different situations
we've got these different situations here again if we have our age and money
here again if we have our age and money we meet both criteria we're getting a
we meet both criteria we're getting a drink
drink otherwise if we meet the age but no
otherwise if we meet the age but no money let's come back with more money we
money let's come back with more money we don't meet the age but we have the money
don't meet the age but we have the money nice try kid and then lastly if you
nice try kid and then lastly if you don't have the money and you're not old
don't have the money and you're not old enough you're gonna be too young and too
enough you're gonna be too young and too poor so we're gonna print out a few
poor so we're gonna print out a few different
different statements here of this function so
statements here of this function so let's give it 21 and 5.
let's give it 21 and 5. we'll print alcohol again of 21 and 4.
we'll print alcohol again of 21 and 4. friends alcohol of 20 and 5.
friends alcohol of 20 and 5. and these should all meet different
and these should all meet different criteria alcohol of 20 and 4.
criteria alcohol of 20 and 4. so we should expect to get these in
so we should expect to get these in order we meet what we need here we don't
order we meet what we need here we don't we don't we don't different criteria for
we don't we don't different criteria for each of these we'll save this go ahead
each of these we'll save this go ahead and run this
and you can see it says no drink for you actually that's the last one uh we're
actually that's the last one uh we're getting a drink come back with more
getting a drink come back with more money nice try kid and you're too young
money nice try kid and you're too young and too poor
and too poor so you can see that we can make
so you can see that we can make conditional statements based on
conditional statements based on everything that we're starting to put
everything that we're starting to put together here we have now used a
together here we have now used a function we've used multiple parameters
function we've used multiple parameters we've used the conditional statement
we've used the conditional statement we've used relational operators
we've used relational operators okay we've got the Boolean right this is
okay we've got the Boolean right this is true and true we're returning something
true and true we're returning something this is
this is true and true in this situation then
true and true in this situation then we're going to return something else so
we're going to return something else so we have different situations that can
we have different situations that can come back
come back so we need to meet those criteria and
so we need to meet those criteria and we're starting to use that look we're
we're starting to use that look we're using the return instead of the print
using the return instead of the print feature there's a bunch of different
feature there's a bunch of different things that we're doing here that's all
things that we're doing here that's all starting to tie in and hopefully that's
starting to tie in and hopefully that's starting to make sense why we do things
starting to make sense why we do things we're starting to build upon it and it's
we're starting to build upon it and it's starting to get a little bit more fun
starting to get a little bit more fun so from here we're going to go ahead and
so from here we're going to go ahead and move on to lists and move on with our
move on to lists and move on with our journey into python so I'll see you in
journey into python so I'll see you in the next lesson
the next lesson let's move on to lists so let's go ahead
let's move on to lists so let's go ahead and do our new line
and do our new line and we'll call it lists
and we'll call it lists and the best way to think of lists in my
and the best way to think of lists in my opinion is that they have brackets
opinion is that they have brackets something like this
something like this now lists are data structures they are
now lists are data structures they are changeable we can reorder them they are
changeable we can reorder them they are basically just a group of elements
basically just a group of elements now everything within a list is called
now everything within a list is called an item and as I mentioned the best way
an item and as I mentioned the best way to think about lists is that they have
to think about lists is that they have brackets just like a string might have
brackets just like a string might have quotes around it lists will have
quotes around it lists will have brackets around it
brackets around it now again we need to remember these are
now again we need to remember these are changeable we'll talk about something
changeable we'll talk about something here in a little bit that is not
here in a little bit that is not changeable which is called the Tuple now
changeable which is called the Tuple now here
here let's go ahead and declare a list we're
let's go ahead and declare a list we're going to say movies and I'm just going
going to say movies and I'm just going to list out some movies that I like
to list out some movies that I like and we can do a bracket and I can say
and we can do a bracket and I can say when Harry
when Harry Met Sally we'll just give these as
Met Sally we'll just give these as strings
strings I like The Hangover
I like The Hangover and I like
and I like The Perks of Being a Wallflower now you
The Perks of Being a Wallflower now you can add whatever you like here and my
can add whatever you like here and my hangover here by the way that I have to
hangover here by the way that I have to hang over here my hangover on the line
hang over here my hangover on the line here is just because my notepad here is
here is just because my notepad here is not wide enough if I made it wider it
not wide enough if I made it wider it would actually just continue on so a
would actually just continue on so a don't confuse this if I hit enter you'll
don't confuse this if I hit enter you'll see it goes to 148 so my wrapping does
see it goes to 148 so my wrapping does not mean I went into a new line
not mean I went into a new line and lastly we'll just say The Exorcist
and we'll close the list off with a close bracket
close bracket so if I wanted to print
so if I wanted to print the first movie in the list
the first movie in the list I wanted to print When Harry Met Sally
I wanted to print When Harry Met Sally I come in here and I print movies and I
I come in here and I print movies and I wanted to say one do we think that would
wanted to say one do we think that would print the first item in the list go
print the first item in the list go ahead and hit save print
ahead and hit save print and you're going to see that it actually
and you're going to see that it actually prints The Hangover so what am I doing
prints The Hangover so what am I doing here I am calling an index
here I am calling an index and our index actually starts with the
and our index actually starts with the number zero so when we look at an index
number zero so when we look at an index we need to think of it as 0 1 2 3.
we need to think of it as 0 1 2 3. always count starting with zero not one
always count starting with zero not one otherwise you can return the wrong
otherwise you can return the wrong numbers and this can get very confusing
numbers and this can get very confusing let's make sure we add no to this
let's make sure we add no to this Returns the second
Returns the second item in the list okay we're looking at
item in the list okay we're looking at the second item with the index of one if
the second item with the index of one if we printed
we printed for example movies and we gave it zero
for example movies and we gave it zero then we would see that this will return
then we would see that this will return the first item in the list
the first item in the list okay we'll save that take a look real
okay we'll save that take a look real quick
quick you could see that the first item is
you could see that the first item is When Harry Met Sally and that's exactly
When Harry Met Sally and that's exactly what we're getting returned which is
what we're getting returned which is what we want
what we want now let's look at a few tricks to
now let's look at a few tricks to splicing an index or indices uh we can
splicing an index or indices uh we can say something like print movies and if
say something like print movies and if we printed movies one to three what
we printed movies one to three what would happen here
would happen here well what's gonna happen is it's going
well what's gonna happen is it's going to return
to return the first
the first item given
item given so this is going to be index number one
so this is going to be index number one which is item two so first I should say
which is item two so first I should say first index number given
first index number given right until
right until the last number given it's not going to
the last number given it's not going to include the last number
include the last number well let's even say but not include the
well let's even say but not include the last number
last number so
so no it's a lot it's just printed out take
no it's a lot it's just printed out take a look so one to three will print The
a look so one to three will print The Hangover starting at one and The Perks
Hangover starting at one and The Perks of Being a Wallflower which is two it
of Being a Wallflower which is two it will not print three
will not print three okay so make sure you understand if you
okay so make sure you understand if you go one to three you're only going to
go one to three you're only going to include two items three items
include two items three items now you can also do one to four which
now you can also do one to four which would print all of those
would print all of those if you wanted to print everything from
if you wanted to print everything from the beginning of a number so say we've
the beginning of a number so say we've wanted to print movies one and we wanted
wanted to print movies one and we wanted to go all the way to the end we could
to go all the way to the end we could just do something like this
just do something like this so you can start from a certain point in
so you can start from a certain point in index print The Hangover versus Being a
index print The Hangover versus Being a Wallflower The Exorcist and we're
Wallflower The Exorcist and we're skipping When Harry Met Sally because
skipping When Harry Met Sally because we're not stirring at zero
we're not stirring at zero okay
okay we could also do in the opposite of that
we could also do in the opposite of that movies
movies and remember if we go to one it's not
and remember if we go to one it's not going to include one it's only going to
going to include one it's only going to include
include the first item here everything before so
the first item here everything before so When Harry Met Sally everything up until
When Harry Met Sally everything up until this point is another way to think about
this point is another way to think about it
it okay so we wanted to print two items
okay so we wanted to print two items we'd actually have to add a second or
we'd actually have to add a second or put the number two here and that would
put the number two here and that would include The Hangover that's what we
include The Hangover that's what we wanted to do
wanted to do now another thing that we can do is if
now another thing that we can do is if we wanted to print the very last item
we wanted to print the very last item we could do a movies
we could do a movies negative one and you don't need to
negative one and you don't need to commit All This to Memory right now
commit All This to Memory right now especially if you're not working with
especially if you're not working with lists but if you ever do work with lists
lists but if you ever do work with lists you need to pull specific items down
you need to pull specific items down from the list this becomes very
from the list this becomes very important so important to know that
important so important to know that indexes or indices exist you start at
indexes or indices exist you start at zero and then you move forward and then
zero and then you move forward and then the way that you can spice these just
the way that you can spice these just depends on how you call these now this
depends on how you call these now this will return last item in list we save
will return last item in list we save that
that take a look
take a look you'll see It'll return The Exorcist
you'll see It'll return The Exorcist here
here now we can apply methods to lists just
now we can apply methods to lists just like printing length of movies
like printing length of movies we'll print count the items in the list
we'll print count the items in the list right and the list and we'll save that
right and the list and we'll save that just take a quick look
I never close this sorry so you can see it tells you your mistakes and even I
it tells you your mistakes and even I make mistakes come in here try it again
make mistakes come in here try it again you can see that we have four items
you can see that we have four items within our list
within our list all right so and that is true we have
all right so and that is true we have four items in the list
four items in the list we can also
we can also add to the list so we can use something
add to the list so we can use something like movies dot append we'll add to
like movies dot append we'll add to lists and if we wanted to add the movie
lists and if we wanted to add the movie Jaws we could
Jaws we could and if we printed movies you'll see
and if we printed movies you'll see that this appends to the end of the list
that this appends to the end of the list let's go ahead and save that
and you'll see now that Jaws is here at the end
the end now we could also insert a movie into
now we could also insert a movie into the list so if we did movies dot insert
the list so if we did movies dot insert and we wanted to put in a specific spot
and we wanted to put in a specific spot so say we want to put it in index two we
so say we want to put it in index two we could say two and then we could give it
could say two and then we could give it a movie Hustle the movie I just watched
a movie Hustle the movie I just watched recently and really liked and we can
recently and really liked and we can come in here and print movies now we
come in here and print movies now we save that
save that you can see that we can actually insert
you can see that we can actually insert hustle here into position two on the
hustle here into position two on the index so pretty neat
index so pretty neat now we can also remove movies we did
now we can also remove movies we did movies.pop
movies.pop come in here and that will remove
so if we come in here add a print statement
come in here add a print statement really quick save that and then print
really quick save that and then print this out
this out you'll see that Jaws is now gone
we can also specify specific spots we want to remove so if we want to remove
want to remove so if we want to remove index 0 we could and then this will
index 0 we could and then this will remove
remove the first item
the first item print movies
print movies save
save go ahead
go ahead and When Harry Met Sally is now gone
and When Harry Met Sally is now gone from our list
from our list we can also combine two lists so if we
we can also combine two lists so if we come in here and let's say that my wife
come in here and let's say that my wife has favorite movies and she definitely
has favorite movies and she definitely does
does and we'll just go with a couple of her
and we'll just go with a couple of her favorite movies she likes
favorite movies she likes Just Go With It
Just Go With It and she also likes 50 First Dates
and she also likes 50 First Dates come in here and close that off well we
come in here and close that off well we can combine movies let's say we wanted
can combine movies let's say we wanted to know our favorite movies
to know our favorite movies what we can do we can combine lists I
what we can do we can combine lists I should say come in here and I could say
should say come in here and I could say I want to add movies plus
I want to add movies plus Amber movies
Amber movies and I can print
and I can print our favorite
our favorite movies and then I have now combined
movies and then I have now combined lists let's go ahead and take a look at
lists let's go ahead and take a look at that hopefully I did it right
that hopefully I did it right and you can see now the hangover hustle
and you can see now the hangover hustle perks a big Wildfire Exorcist just go
perks a big Wildfire Exorcist just go with the 50 First Dates you could also
with the 50 First Dates you could also just come in here if you copied this by
just come in here if you copied this by the way
the way and just pasted this you don't have to
and just pasted this you don't have to put it into a variable you could totally
put it into a variable you could totally do it like that but I think storing in
do it like that but I think storing in variables is a better practice so I'm
variables is a better practice so I'm going to go ahead and just Ctrl Z here
going to go ahead and just Ctrl Z here and
and one more thing so we can also have what
one more thing so we can also have what are called 2D lists
are called 2D lists so two dimensional lists so let's say
so two dimensional lists so let's say for example we have grades
for example we have grades and we have a list of grades and we're
and we have a list of grades and we're going to say that
going to say that inside this list we have Bob and his
inside this list we have Bob and his grade is an 82.
grade is an 82. and then we have
and then we have Alice
and she has a 90.
a 90. okay and then we've got Jeff
okay and then we've got Jeff 's not doing so hot Jeff's got a 73.
's not doing so hot Jeff's got a 73. okay
okay and let's say we wanted to pull down
and let's say we wanted to pull down Bob's grade we could make a variable
Bob's grade we could make a variable like it's called Bob's grade
like it's called Bob's grade and we could set that to grades and then
and we could set that to grades and then do something like zero one like this and
do something like zero one like this and what are we doing here well we're saying
what are we doing here well we're saying I want to pull from the first index
I want to pull from the first index okay index one or zero right
okay index one or zero right first index 0 1 2 so I'm pulling from
first index 0 1 2 so I'm pulling from zero
zero and within that I want to pull the
and within that I want to pull the second item which is this zero one so we
second item which is this zero one so we have a two dimensional index here and if
have a two dimensional index here and if we went ahead and printed
we went ahead and printed Bob's grade you can see now we save this
we get an 82. well that's correct what if we screwed
well that's correct what if we screwed up Bob's grade and we wanted to fix it
up Bob's grade and we wanted to fix it well we could also do something like
well we could also do something like grades 0 1 just kind of like we called
grades 0 1 just kind of like we called and we could just set it equal to 83
and we could just set it equal to 83 maybe it wasn't 83.
maybe it wasn't 83. okay we come in here and we print out
okay we come in here and we print out grades
grades you should see that this has changed so
you should see that this has changed so let's go ahead and print this you can
let's go ahead and print this you can see now Bob has an 83. so we can modify
see now Bob has an 83. so we can modify our 2D lists as well
our 2D lists as well so that is it for list remember lists
so that is it for list remember lists have brackets lists are data structures
have brackets lists are data structures we can change lists as you saw we were
we can change lists as you saw we were able to append pop insert remove okay we
able to append pop insert remove okay we can modify many different ways we're
can modify many different ways we're going to move on here in a second to
going to move on here in a second to what are called tuples and tuples cannot
what are called tuples and tuples cannot be changed even though they look very
be changed even though they look very much like lists they are different so
much like lists they are different so I'll go ahead and see you over in the
I'll go ahead and see you over in the next lesson when we cover duples
next lesson when we cover duples okay let's talk about tuples very
okay let's talk about tuples very quickly and then we're gonna move on so
quickly and then we're gonna move on so do a new line
do a new line say tuples
say tuples and these are like lists but they do not
and these are like lists but they do not change we'll say do not change
change we'll say do not change and then they get parentheses as opposed
and then they get parentheses as opposed to getting brackets
to getting brackets okay so we might want to have something
okay so we might want to have something that doesn't change and when something
that doesn't change and when something can't change we say that they are not
can't change we say that they are not mutable
mutable m-u-t-a-b-l-e they're not mutable so
m-u-t-a-b-l-e they're not mutable so that means that they're immutable and
that means that they're immutable and tuples are immutable meaning we can't
tuples are immutable meaning we can't change them so we think of list list
change them so we think of list list mutable tuples not mutable or immutable
mutable tuples not mutable or immutable so if we have a tuple of grades we can
so if we have a tuple of grades we can say something like grades are equal to a
say something like grades are equal to a b
b see this is the American grading system
see this is the American grading system d
d and F
and F coming here if we did something like
coming here if we did something like grades.pop like we saw before
grades.pop like we saw before or grades dot append something like that
or grades dot append something like that neither of these are not going to work
neither of these are not going to work or neither of these will work I should
or neither of these will work I should say proper English what's going to
say proper English what's going to happen is they're not mutable we can't
happen is they're not mutable we can't change them once we have this and we
change them once we have this and we store it it does not change so if we
store it it does not change so if we want something that is like a list but
want something that is like a list but we don't want it to change it's better
we don't want it to change it's better to use a tuple we can set something in
to use a tuple we can set something in stone like our grade letterings and then
stone like our grade letterings and then we can call those when we need to we can
we can call those when we need to we can just say something like print grades
just say something like print grades and give it a one
and give it a one and save it and we should get a B back
and save it and we should get a B back okay and we get a B back so that's it
okay and we get a B back so that's it just know the difference between tuples
just know the difference between tuples and lists and that tuples do not change
and lists and that tuples do not change but they are very similar in how they
but they are very similar in how they can function and there are pros and cons
can function and there are pros and cons to each of those
to each of those so we're gonna go ahead and move on to
so we're gonna go ahead and move on to the next lesson which is going to be
the next lesson which is going to be looping
looping okay so let's come in here make a new
okay so let's come in here make a new line
line and we're going to call this looping
and we're going to call this looping so we're going to talk about two
so we're going to talk about two different types of Loops the first type
different types of Loops the first type of loop that we're going to talk about
of loop that we're going to talk about is what's called a for Loop
is what's called a for Loop and four Loops are start to finish of an
and four Loops are start to finish of an iterate
iterate and here's what a loop looks like and
and here's what a loop looks like and we'll take a look so let's go ahead and
we'll take a look so let's go ahead and get a list we're going to say vegetables
get a list we're going to say vegetables and you can put whatever vegetables you
and you can put whatever vegetables you want in here I'm going to go with a
want in here I'm going to go with a cucumber
cucumber I'll do some spinach
I'll do some spinach and then we'll do some cabbage as well
and then we'll do some cabbage as well and now what we're gonna do is we're
and now what we're gonna do is we're gonna come in here and we're going to
gonna come in here and we're going to write a four Loop we're going to say 4 x
write a four Loop we're going to say 4 x and x could be whatever you want it to
and x could be whatever you want it to be you could say for veggies
be you could say for veggies it could be whatever you want to call it
it could be whatever you want to call it in this instance I'm just going to call
in this instance I'm just going to call it X
it X in vegetables
in vegetables the 4X in this list
the 4X in this list we're going to go ahead and print out
we're going to go ahead and print out so what do you think this is going to do
so what do you think this is going to do all this is going to do is just Loop
all this is going to do is just Loop through the iterates start to finish up
through the iterates start to finish up and iterate so it's going to say
and iterate so it's going to say cucumber spinach cabbage go ahead and
cucumber spinach cabbage go ahead and give it a go save it print it
give it a go save it print it cucumber spinach cabbage all we did was
cucumber spinach cabbage all we did was go through a list iterate through it
go through a list iterate through it until we reached the end of the list and
until we reached the end of the list and then it stopped so that is a for Loop
then it stopped so that is a for Loop another good example of a loop if you
another good example of a loop if you want to think about it might be trying
want to think about it might be trying to Ping an IEP address like a 192 168
to Ping an IEP address like a 192 168 1.1 or maybe you have 1.x maybe there's
1.1 or maybe you have 1.x maybe there's a whole slew of ips that you want to
a whole slew of ips that you want to Ping maybe it's one through 254. okay if
Ping maybe it's one through 254. okay if you wanted to Ping all of those you
you wanted to Ping all of those you might want to do something like a 4X in
might want to do something like a 4X in IP and where IP is just equal to like a
IP and where IP is just equal to like a sequence like say IP is like a sequence
sequence like say IP is like a sequence of one to 254 and don't worry about this
of one to 254 and don't worry about this I'm just logically writing this out so
I'm just logically writing this out so if you say IPS 1 to 254 for x and IEP
if you say IPS 1 to 254 for x and IEP and then you want to do something you
and then you want to do something you might want to like Ping
192.168.1.x and then X will be one then two then three then four okay so you
two then three then four okay so you could write something like this for a
could write something like this for a pink sweeper again it's the start to
pink sweeper again it's the start to finish of an iterate one through two
finish of an iterate one through two fifty four with a stop at 254 when the
fifty four with a stop at 254 when the iterate is done now another example of
iterate is done now another example of this or another example of a loop is
this or another example of a loop is what we call a while loop let me say
what we call a while loop let me say wall loops
wall loops these execute as long
these execute as long as true
as true I should probably capitalize true so
I should probably capitalize true so that way it makes sense that we're
that way it makes sense that we're talking booleans so let's think about
talking booleans so let's think about this situation what about we set I equal
this situation what about we set I equal to one so we've got a variable of I
to one so we've got a variable of I equal to one
equal to one while I is less than 10.
while I is less than 10. we're going to go ahead and print out I
we're going to go ahead and print out I and then we're going to say I Plus
and then we're going to say I Plus equals 1.
equals 1. so what's going to happen
so what's going to happen well while I is less than 10
well while I is less than 10 . so right now I is equal to 1 1 is less
. so right now I is equal to 1 1 is less than 10 that is true we're going to go
than 10 that is true we're going to go ahead and print I increase the value of
ahead and print I increase the value of I by 1. so the next time it Loops
I by 1. so the next time it Loops through it's going to be 2 and it's
through it's going to be 2 and it's going to continue on until this is no
going to continue on until this is no longer true so if we save this this
longer true so if we save this this should print out one through nine
should print out one through nine because we're not looking for 10 just
because we're not looking for 10 just one through nine so we're going to say
one through nine so we're going to say that hit enter one two three four five
that hit enter one two three four five six seven eight nine and it looks like
six seven eight nine and it looks like the loop actually did its job so again
the loop actually did its job so again we have two types of Loops all we need
we have two types of Loops all we need to know about right now is we have a
to know about right now is we have a start to finish of an iterate that's the
start to finish of an iterate that's the for Loop a little while loop executes as
for Loop a little while loop executes as long as true we may see these later on
long as true we may see these later on as we do our project work so keep these
as we do our project work so keep these in mind as we go on through the course
in mind as we go on through the course so from here we're going to go ahead and
so from here we're going to go ahead and move on to Advanced strings so I'll see
move on to Advanced strings so I'll see you over in the next lesson
you over in the next lesson okay let's take a look at some Advanced
okay let's take a look at some Advanced strings so if we come in here
strings so if we come in here again we do a new line
again we do a new line go ahead and enter Advanced strings
go ahead and enter Advanced strings and let's create a variable of my name
and let's create a variable of my name I'm going to say my name is Heath
I'm going to say my name is Heath now let's say we wanted to print
now let's say we wanted to print my name and we wanted to grab the first
my name and we wanted to grab the first letter of my name how do you think we
letter of my name how do you think we might do that
might do that well if you're saying index of 0 you are
well if you're saying index of 0 you are absolutely correct
absolutely correct and we can say in here first letter
and we can say in here first letter what about printing the last letter of
what about printing the last letter of my name
my name well if you say negative one you have
well if you say negative one you have remembered your index lessons great job
remembered your index lessons great job that's going to be the last letter
that's going to be the last letter we can save this and we can go ahead and
we can save this and we can go ahead and print
and if I made this a string that would be very helpful go ahead and save this
be very helpful go ahead and save this you can see that we get the capital H
you can see that we get the capital H and the lowercase H here because my name
and the lowercase H here because my name starts with an h and ends with an H
starts with an h and ends with an H so another thing to note about strings
so another thing to note about strings much like tuples they are also immutable
much like tuples they are also immutable you cannot change a string we cannot
you cannot change a string we cannot modify the string we can join strings we
modify the string we can join strings we could split strings and we'll talk about
could split strings and we'll talk about that here in a second but once I have
that here in a second but once I have set this variable in this string this
set this variable in this string this string is here forever I can always
string is here forever I can always change the value of this variable but
change the value of this variable but you cannot change this string so again
you cannot change this string so again strings are immutable
strings are immutable now let's go ahead and say we have a
now let's go ahead and say we have a sentence
sentence we give that
we give that something like this is a sentence
something like this is a sentence if I can type today
if I can type today and we print out sentence
with something like this what do we think that's going to look
what do we think that's going to look like let's save this print it
like let's save this print it you can see that we get this what are we
you can see that we get this what are we doing well we're just grabbing this
doing well we're just grabbing this first word however we have the benefit
first word however we have the benefit of knowing what the first word is and
of knowing what the first word is and how long it is so we went 0 1 2 3.
how long it is so we went 0 1 2 3. remember we stopped at four so we grab
remember we stopped at four so we grab the word this
the word this well what if we were in a situation
well what if we were in a situation where we didn't know what the word was
where we didn't know what the word was or how long the first word was we could
or how long the first word was we could use something like a delimiter so we
use something like a delimiter so we could say print
could say print we could do sentence dot split
we could do sentence dot split and if we do a DOT split we can just do
and if we do a DOT split we can just do it like this and then this is a
it like this and then this is a delimiter and a delimiter says we're
delimiter and a delimiter says we're going to take something and we're going
going to take something and we're going to split based on that now the default
to split based on that now the default delimiter in Python if we just give it a
delimiter in Python if we just give it a split is a space
split is a space if we save this
if we save this come in here
come in here this is a sentence now look at it it's
this is a sentence now look at it it's in a list we could pull the first item
in a list we could pull the first item if we wanted to and know the first word
if we wanted to and know the first word instead of having to split it like this
instead of having to split it like this or pull it out like that
or pull it out like that so
so we could do something like this as well
we could do something like this as well this is just a proof of concept that's a
this is just a proof of concept that's a little bit fun we go sentence
little bit fun we go sentence split
split and we say that is equal to sentence
and we say that is equal to sentence dot split
dot split okay and then we also create another
okay and then we also create another variable we call that sentence join and
variable we call that sentence join and we say that is equal to
we say that is equal to space we're giving it a delimiter to
space we're giving it a delimiter to join on actually we're telling you what
join on actually we're telling you what to add in between the different words
to add in between the different words that we're pulling out so we're adding a
that we're pulling out so we're adding a space here and we're going to say join
space here and we're going to say join sentence split like this
sentence split like this and if we print out
and if we print out sentence join what do you think we're
sentence join what do you think we're gonna actually have happen here let's
gonna actually have happen here let's save it
save it guess what this is a sentence so all we
guess what this is a sentence so all we did was deconstruct this sentence based
did was deconstruct this sentence based on the delimiter it came out to this is
on the delimiter it came out to this is a sentence and then we joined it back
a sentence and then we joined it back together with a space so every one of
together with a space so every one of those got a space in between and that's
those got a space in between and that's it so that's just a Nifty little way to
it so that's just a Nifty little way to show you that splitting and joining is
show you that splitting and joining is possible and again this is still
possible and again this is still immutable even though we're messing
immutable even though we're messing around with the strings the strings are
around with the strings the strings are immutable let's take a look at a few
immutable let's take a look at a few other things here
other things here I mentioned in the beginning of the
I mentioned in the beginning of the first lesson when we were talking about
first lesson when we were talking about strings initially that we might have
strings initially that we might have different ways of using single quotes
different ways of using single quotes and double quotes and think about this
and double quotes and think about this like what if we had a situation of quote
like what if we had a situation of quote and we wanted to say something like he
and we wanted to say something like he said
said give me all your money
give me all your money well with this situation what are we
well with this situation what are we gonna do what if we wanted to add quotes
gonna do what if we wanted to add quotes here and say give me all your money we
here and say give me all your money we do that because that is a quote well
do that because that is a quote well looks like it's kind of messed up we're
looks like it's kind of messed up we're not seeing it in green it kind of looks
not seeing it in green it kind of looks funny what we can do in this situation
funny what we can do in this situation is we can use single quotes if we wanted
is we can use single quotes if we wanted to
to or we could flip this around by the way
or we could flip this around by the way we could use single quotes on the
we could use single quotes on the outside and then double quotes on the
outside and then double quotes on the inside if we wanted to use double quotes
inside if we wanted to use double quotes here and I could save this so let's
here and I could save this so let's print out quote just to show you and
print out quote just to show you and then we can save this
another thing that we can do though is we can say something like quote
and then we can just do he said and we can do character escaping so we can do
can do character escaping so we can do give me all your money like this
give me all your money like this and now python knows that everything
and now python knows that everything within these escaped characters
within these escaped characters is ignoring it's ignoring this double
is ignoring it's ignoring this double quote here and ignoring this double
quote here and ignoring this double quote here so we're escaping that and
quote here so we're escaping that and then we can print it
then we can print it and hopefully we did this right go ahead
and hopefully we did this right go ahead and print
and print you can see now it says he said give me
you can see now it says he said give me all your money in double quotes while we
all your money in double quotes while we also use double quotes on the outside so
also use double quotes on the outside so we can use character escaping if we want
we can use character escaping if we want to just know that we'll have to use this
to just know that we'll have to use this backslash in front of each of the
backslash in front of each of the characters that we want to escape okay
characters that we want to escape okay let's take a few more examples here so
let's take a few more examples here so if we say
if we say something like a variable of too much
something like a variable of too much space what happens in the situation
space what happens in the situation where we have
where we have like you can just add as much space as
like you can just add as much space as you want in here it doesn't really
you want in here it doesn't really matter we have a string with a lot of
matter we have a string with a lot of space in there well we can strip this
space in there well we can strip this out we can print too much space and then
out we can print too much space and then we can do a DOT strip
we can do a DOT strip and the strip is going to take the
and the strip is going to take the delimiter of a space as default
delimiter of a space as default and that will also strip this out you
and that will also strip this out you can see there's just hello there nothing
can see there's just hello there nothing else so that's kind of nice
else so that's kind of nice few more items what if we have the
few more items what if we have the letter of a
letter of a and we have the word
and we have the word of
of Apple
Apple okay
okay well what if we wanted to know something
well what if we wanted to know something like this let's actually go up a little
like this let's actually go up a little bit
bit and let's say we wanted to know like
and let's say we wanted to know like print
print a and Apple
a and Apple okay what is this going to return
okay what is this going to return go ahead and if I could type sorry
go ahead and if I could type sorry and this is going to return something
and this is going to return something let's go ahead and save that
let's go ahead and save that that's going to return true
that's going to return true so we'll just say true
so we'll just say true now if we print
now if we print a in apple
you're going to see that this is going to return false
to return false save this
save this y
y well this here is a lowercase a and that
well this here is a lowercase a and that does not exist with an apple so even
does not exist with an apple so even though we're looking for a specific
though we're looking for a specific letter Within A Word we have to match
letter Within A Word we have to match case sensitivity in order for that to
case sensitivity in order for that to return true so if we wanted to know if
return true so if we wanted to know if the letter A was in the word apple and
the letter A was in the word apple and we weren't concerned about case
we weren't concerned about case sensitivity then what do we do in that
sensitivity then what do we do in that situation
situation well this brings something up that we
well this brings something up that we did a little bit early on which is using
did a little bit early on which is using lowercase remember the lowercase method
lowercase remember the lowercase method we can say print
we can say print and then we can come in here and say
and then we can come in here and say letter dot lower you could also do upper
letter dot lower you could also do upper if you wanted to but what we're doing is
if you wanted to but what we're doing is we're converting all of this to
we're converting all of this to lowercase so this is not going to be a
lowercase so this is not going to be a lowercase a and then we could say in
lowercase a and then we could say in word dot lower
word dot lower and we can just say this is an improved
and we can just say this is an improved way of doing this
way of doing this so if we print that out we save this
so if we print that out we save this this should come back as true
this should come back as true so think about when you're trying to
so think about when you're trying to match a word or a string or anything and
match a word or a string or anything and if somebody came in and you were
if somebody came in and you were expecting like I don't know like think
expecting like I don't know like think about school and we're thinking about uh
about school and we're thinking about uh a word maybe like
a word maybe like Manhattan I don't know and somebody
Manhattan I don't know and somebody types in
types in Manhattan like this
Manhattan like this okay we still want to be able to accept
okay we still want to be able to accept that answer is true even though they may
that answer is true even though they may have screwed up a little bit on the
have screwed up a little bit on the punctuation now there could be instances
punctuation now there could be instances where we want a capitalized letter and
where we want a capitalized letter and it has to be very specific in that case
it has to be very specific in that case this kind of syntax works but if we're
this kind of syntax works but if we're looking to just accept an answer like
looking to just accept an answer like Manhattan for Manhattan then we might
Manhattan for Manhattan then we might want to consider using lowercase or
want to consider using lowercase or uppercase in that situation just to
uppercase in that situation just to match those words or letters or whatever
match those words or letters or whatever it might be
it might be so one more thing let's look at what is
so one more thing let's look at what is called string formatting so if we do
called string formatting so if we do something like movie we'll pick the
something like movie we'll pick the hangover again
hangover again we say The Hangover you can pick
we say The Hangover you can pick whatever movie you want here there's a
whatever movie you want here there's a few ways that we can print this out
few ways that we can print this out remember we concatenated early on and we
remember we concatenated early on and we said like print
said like print we did something like my favorite movie
we did something like my favorite movie [Music]
[Music] is space
is space plus
plus you know movie something like that right
you know movie something like that right well we can actually write this in a
well we can actually write this in a certain way that is a little bit easier
certain way that is a little bit easier so there's a few things that we can do
so there's a few things that we can do for example we can do my favorite movie
for example we can do my favorite movie is add a couple brackets in here like
is add a couple brackets in here like that
that and then we can add
and then we can add period at the end just because we're
period at the end just because we're going to close our sentence we'll say
going to close our sentence we'll say dot format
dot format and we'll say movie and close that off
and we'll say movie and close that off that's one way of doing it
that's one way of doing it if we save that
if we save that it's a my favorite movie is The Hangover
it's a my favorite movie is The Hangover okay this is called using the string
okay this is called using the string format method now what we can do there's
format method now what we can do there's another type of method we can use is we
another type of method we can use is we could say print my favorite movie is
could say print my favorite movie is percent s
percent s and we say
and we say percent really
percent really just like this
just like this save that
save that this is using percent formatting and
this is using percent formatting and look the same thing happens I just
look the same thing happens I just forgot my period in there
forgot my period in there so no big deal
so no big deal lastly if we print out
lastly if we print out an F in the front this is called an F
an F in the front this is called an F string or what's known as a string
string or what's known as a string literal we can do my favorite movie is
literal we can do my favorite movie is and then just do a movie like this
and then just do a movie like this super easy
super easy and we have moved off of using the
and we have moved off of using the format method and the percent method
format method and the percent method into this F string or string literal let
into this F string or string literal let me come in here we save this
me come in here we save this tab up print and you can see my favorite
tab up print and you can see my favorite movie is The Hangover that worked out
movie is The Hangover that worked out perfectly well you can use any of these
perfectly well you can use any of these to format but just know that the F
to format but just know that the F strings are the latest and the greatest
strings are the latest and the greatest way of doing it in Python 3.
way of doing it in Python 3. so that is it for this lesson we're
so that is it for this lesson we're going to go ahead and move on to
going to go ahead and move on to dictionaries
dictionaries okay so we'll add new lines in here
okay so we'll add new lines in here and we'll say dictionaries
and we'll say dictionaries and we could think of these as key value
and we could think of these as key value pairs
and also think of these with the curly braces like this so we've seen lists
braces like this so we've seen lists like that we've seen tuples now we can
like that we've seen tuples now we can think of dictionaries with the curly
think of dictionaries with the curly braces
braces so let's go ahead and we're going to put
so let's go ahead and we're going to put some drinks and again I'm going to use
some drinks and again I'm going to use alcoholic beverages you do not have to
alcoholic beverages you do not have to do that you can use whatever drinks and
do that you can use whatever drinks and prices in here that you want but we're
prices in here that you want but we're going to have a key value pair so our
going to have a key value pair so our key is going to be the drink so first
key is going to be the drink so first drink I'm going to pick up is a White
drink I'm going to pick up is a White Russian
Russian and the value is going to be seven let's
and the value is going to be seven let's say that a White Russian costs seven
say that a White Russian costs seven dollars
dollars if we do an Old Fashioned
if we do an Old Fashioned we're going to say that this costs ten
we're going to say that this costs ten dollars
dollars and we'll do one more we'll do a lemon
and we'll do one more we'll do a lemon drop and we'll just say that this costs
drop and we'll just say that this costs eight dollars
eight dollars okay and we can make a note here to
okay and we can make a note here to ourselves that drink is the key
ourselves that drink is the key price is the value remember key value
price is the value remember key value pairs key value
pairs key value all right so we've got our drinks we can
all right so we've got our drinks we can print our drinks
print our drinks save this go ahead print
save this go ahead print and you can see we print out our
and you can see we print out our dictionary here
dictionary here now
now let's give it another example
let's give it another example let's say that we have employees
let's say that we have employees and this could be a good example so we
and this could be a good example so we say we have employees and I really like
say we have employees and I really like the show Bob's Burgers so I'm going to
the show Bob's Burgers so I'm going to use Bob's Burgers here as an example
use Bob's Burgers here as an example let's say we have different departments
let's say we have different departments we've got the finance department
we've got the finance department and in the finance department
and in the finance department we actually have a list of people what
we actually have a list of people what if we've got we've got Bob oops we've
if we've got we've got Bob oops we've got Linda
got Linda and we've got Tina
and we've got Tina all in finance
all in finance we can also have another department
we can also have another department let's have it
let's have it so again that's the key
so again that's the key and the value is going to be this list
and the value is going to be this list that we're putting in there so Gene
that we're putting in there so Gene Louise
Louise and we'll throw our Teddy in there as
and we'll throw our Teddy in there as well
well and that one and let's do one more we'll
and that one and let's do one more we'll do HR
do HR so HR and we'll put in here
so HR and we'll put in here Jimmy Jr
Jimmy Jr and we'll also put in Mort
and we'll also put in Mort again you can put whatever you want in
again you can put whatever you want in here and if you need to pause if you're
here and if you need to pause if you're trying to follow line for line word for
trying to follow line for line word for word you need to pause and type this out
word you need to pause and type this out feel free to do that
feel free to do that I'm gonna go ahead and print out our
I'm gonna go ahead and print out our employees just to show this make sure I
employees just to show this make sure I type this all right because this is a
type this all right because this is a lot of syntax
lot of syntax and we've got Finance it and HR looks
and we've got Finance it and HR looks like we did a great job awesome
like we did a great job awesome so let's say I wanted to add a new key
so let's say I wanted to add a new key value pair I could do that in a couple
value pair I could do that in a couple of different ways we can do something
of different ways we can do something like employees
like employees and we can just say something like we
and we can just say something like we want to add a legal department
want to add a legal department all right and in the legal department
all right and in the legal department we're gonna have
we're gonna have just one person we'll just have Mr frond
just one person we'll just have Mr frond he's our legal team
he's our legal team okay we'll just say it adds new e value
okay we'll just say it adds new e value pair
pair save that actually let's print employees
save that actually let's print employees so that way we can actually
so that way we can actually verify save
verify save print
print and you can see legal ads Mr frond so we
and you can see legal ads Mr frond so we are adding to the end of our dictionary
are adding to the end of our dictionary just like we added to the end of our
just like we added to the end of our list everything gets appended to the end
list everything gets appended to the end unless we specify otherwise
unless we specify otherwise let's go ahead and come in here another
let's go ahead and come in here another way that we can do this is we can say
way that we can do this is we can say something like employees
something like employees dot update
dot update and we can say something like give it a
and we can say something like give it a sales department
sales department and in the sales department we'll have
and in the sales department we'll have Andy
Andy we'll have Ollie
close that off we're also going to have to close off
we're also going to have to close off our curly braces and we'll close off our
our curly braces and we'll close off our parentheses and if you have a decent
parentheses and if you have a decent notepad it'll show you where your items
notepad it'll show you where your items are so that way you know you're closing
are so that way you know you're closing things off correctly so we've got three
things off correctly so we've got three different types of syntax going on there
different types of syntax going on there and it sometimes can be hard to read so
and it sometimes can be hard to read so here we could say adds new key value
here we could say adds new key value pair as well
pair as well so just another way of doing it we can
so just another way of doing it we can print employees and we'll see that
print employees and we'll see that Annie and Ollie should be added provided
Annie and Ollie should be added provided we typed everything correct which we did
we typed everything correct which we did so here's sales with Andy and Ollie
so here's sales with Andy and Ollie okay one more thing let's say that we
okay one more thing let's say that we wanted to update
wanted to update something in our dictionary we're going
something in our dictionary we're going to go ahead and update a value we're
to go ahead and update a value we're going to go back to drinks for this one
going to go back to drinks for this one let's say that inflation has happened
let's say that inflation has happened which it has and with inflation the
which it has and with inflation the price of a white russian has now gone up
price of a white russian has now gone up from Seven dollars to eight dollars we
from Seven dollars to eight dollars we can do something like that print drinks
can do something like that print drinks and you should see
and you should see that hopefully this has been updated
that hopefully this has been updated to eight dollars which it was seven
to eight dollars which it was seven before now it's eight perfect
before now it's eight perfect we can also grab the value of that so if
we can also grab the value of that so if we wanted to do something like print
we wanted to do something like print drinks dot get and then we do white
drinks dot get and then we do white Russian
Russian totally do something like this
totally do something like this and save and hopefully it will return
and save and hopefully it will return eight
eight and it does
and it does so that is it for this lesson we're
so that is it for this lesson we're going to go ahead and move into a new
going to go ahead and move into a new file here in the next video so let's go
file here in the next video so let's go ahead and save this and close this and
ahead and save this and close this and we'll prepare for the next video so I'll
we'll prepare for the next video so I'll catch you over in the next lesson
okay so I wanted to talk about importing we're going to talk about importing
we're going to talk about importing modules so I wanted to make a new file
modules so I wanted to make a new file for this let's just call this mouse pad
for this let's just call this mouse pad importing dot Pi or whatever you want to
importing dot Pi or whatever you want to call it and I'm going to do the
call it and I'm going to do the Ampersand here and again if you're using
Ampersand here and again if you're using Windows or Mac just make sure you create
Windows or Mac just make sure you create a new file for this
a new file for this I'm going to go in here and I'm going to
I'm going to go in here and I'm going to add my shebang like before
add my shebang like before I'm going to declare bin Python 3 and
I'm going to declare bin Python 3 and save this
save this and now we're going to go ahead and talk
and now we're going to go ahead and talk about importing so
about importing so importing let's type this importing
importing let's type this importing and we'll say importing is important
and we'll say importing is important now modules exist within python that are
now modules exist within python that are built in but not available to us without
built in but not available to us without importing them so like you saw us being
importing them so like you saw us being able to do math but we could import a
able to do math but we could import a more robust module of math and then use
more robust module of math and then use that to do more advanced calculations
that to do more advanced calculations outside of adding subtracting exponents
outside of adding subtracting exponents Etc in this instance we're going to talk
Etc in this instance we're going to talk about a couple of different Imports that
about a couple of different Imports that we can do and that you're going to see
we can do and that you're going to see again as we get into some of our
again as we get into some of our Hands-On stuff and we build out some
Hands-On stuff and we build out some projects
projects for example we might want to import
for example we might want to import something called CIS now let's say if we
something called CIS now let's say if we tried to print out sys dot version and
tried to print out sys dot version and we'll just save this and then we're
we'll just save this and then we're going to Python 3 importing dot pi
going to Python 3 importing dot pi and you're going to see that I get an
and you're going to see that I get an error back that says CIS is not defined
error back that says CIS is not defined name says not defined okay well CIS is
name says not defined okay well CIS is something that we're going to use quite
something that we're going to use quite often in Python you're going to see it
often in Python you're going to see it imported quite a bit and it does a lot
imported quite a bit and it does a lot of different unique items like it does
of different unique items like it does something called ARG V for example which
something called ARG V for example which we'll use as an example later on but if
we'll use as an example later on but if we want to specify a an amount of
we want to specify a an amount of arguments say we're trying to run uh
arguments say we're trying to run uh Python 3 we're going to do a port
Python 3 we're going to do a port scanner later so we'll just say
scanner later so we'll just say portscanner.pi and we need to supply an
portscanner.pi and we need to supply an IP address here right and this is
IP address here right and this is argument zero this is argument one so if
argument zero this is argument one so if we Supply no argument one then we're
we Supply no argument one then we're going to throw an error it's going to be
going to throw an error it's going to be an if else statement and that's going to
an if else statement and that's going to use something called RV now we'll get
use something called RV now we'll get into that later but that's very
into that later but that's very important it's a part of CIS another
important it's a part of CIS another part of CIS is doing something like the
part of CIS is doing something like the version type of python that we're used
version type of python that we're used using or another thing is the sys dot
using or another thing is the sys dot exit which you'll see later on as well
exit which you'll see later on as well which is going to allow us to gracefully
which is going to allow us to gracefully exit
exit when we encounter an error we tell the
when we encounter an error we tell the script to exit or whatever we're doing
script to exit or whatever we're doing so we might need to import something
so we might need to import something like sis or another one is OS which is
like sis or another one is OS which is very common to be imported as well so
very common to be imported as well so let's talk about importing
let's talk about importing in order to import we can say something
in order to import we can say something like import sys just like this and we
like import sys just like this and we can just say this is for system
can just say this is for system functions and parameters
functions and parameters save that
save that and let's go ahead and just print this
and let's go ahead and just print this now and see what happens
now and see what happens you can see now that sys has been
you can see now that sys has been imported even though it wasn't built in
imported even though it wasn't built in automatically we can import it and you
automatically we can import it and you can see now it tells us hey we are
can see now it tells us hey we are running on version 3.10.5 of python and
running on version 3.10.5 of python and it was downloaded on June 8th 2022 or
it was downloaded on June 8th 2022 or built on June 8th of 2022 so
built on June 8th of 2022 so from here let's go ahead and import
from here let's go ahead and import something else let's go ahead and import
something else let's go ahead and import date time
date time and we can import from something so I
and we can import from something so I know this is going to be confusing but
know this is going to be confusing but we can import specifics from a module so
we can import specifics from a module so we're just importing the date time
we're just importing the date time feature from date time even though
feature from date time even though they're named the same just know that we
they're named the same just know that we can import specifics we don't have to
can import specifics we don't have to import the whole thing even though we
import the whole thing even though we totally could just import the whole
totally could just import the whole thing as well so here
thing as well so here for example we can say print
for example we can say print date time dot now like this and you know
date time dot now like this and you know what this is going to do it's going to
what this is going to do it's going to tell you what the date and the time is
tell you what the date and the time is and I apologize this is backwards this
and I apologize this is backwards this is it's from date time import date time
is it's from date time import date time so again your syntax will tell you where
so again your syntax will tell you where it's wrong
it's wrong and it is perfectly normal to make
and it is perfectly normal to make mistakes I leave these in the video so
mistakes I leave these in the video so that you see that I am human too and
that you see that I am human too and it's completely normal to make mistakes
it's completely normal to make mistakes like this so go ahead and do your script
like this so go ahead and do your script now and you'll see that it gives the
now and you'll see that it gives the date and the time so right now it is
date and the time so right now it is July 6th and it is two o'clock in the
July 6th and it is two o'clock in the morning
morning I am a night owl
I am a night owl now one other thing that we can do is we
now one other thing that we can do is we can come in here and we can
can come in here and we can from daytime import date time
from daytime import date time and we can also give this an alias we
and we can also give this an alias we can say as
can say as DT what if we don't want to write date
DT what if we don't want to write date time out we just want to do DT just like
time out we just want to do DT just like we didn't want to write new line out we
we didn't want to write new line out we did NL same kind of concept so we can
did NL same kind of concept so we can just say import with alias
just say import with alias and instead of saying date time.now we
and instead of saying date time.now we could just say DT dot now save that
could just say DT dot now save that go ahead and print it
go ahead and print it you can see it still works so absolutely
you can see it still works so absolutely the same thing we're just giving an
the same thing we're just giving an alias making it a little bit easier to
alias making it a little bit easier to run okay so that is it for this video
run okay so that is it for this video let's go ahead and close this out and
let's go ahead and close this out and then I'm going to meet you in the next
then I'm going to meet you in the next video we're going to talk about sockets
video we're going to talk about sockets before we get into building out a port
before we get into building out a port scanner so I'll catch you over in the
scanner so I'll catch you over in the next video
next video okay so let's make a new file and we're
okay so let's make a new file and we're going to call this s dot pi
going to call this s dot pi and again create this however you want
and again create this however you want to if you're using Linux you can follow
to if you're using Linux you can follow along like this or just create a new
along like this or just create a new file in Linux or Windows
file in Linux or Windows again we're going to shebang this up
again we're going to shebang this up here I'm going to give this a bin python
here I'm going to give this a bin python 3. now this is an incredibly necessary
3. now this is an incredibly necessary if you're running on Windows or Mac but
if you're running on Windows or Mac but this is just best practice for me this
this is just best practice for me this is the location of my python even though
is the location of my python even though I'm not actually calling it I am calling
I'm not actually calling it I am calling it with python3 so this isn't incredibly
it with python3 so this isn't incredibly relevant as long as you're using python
relevant as long as you're using python 3. now we are going to deal with sockets
3. now we are going to deal with sockets oh sockets
oh sockets now sockets
now sockets are what can be used to connect two
are what can be used to connect two nodes together so we're going to use
nodes together so we're going to use this to connect to Ports and IP
this to connect to Ports and IP addresses if you're unfamiliar with
addresses if you're unfamiliar with computer networking that's okay but what
computer networking that's okay but what we're looking for is a port and we're
we're looking for is a port and we're going to look for that port on an IP
going to look for that port on an IP address and on that IP address that that
address and on that IP address that that port is open we're going to make a
port is open we're going to make a connection to this
connection to this we're going to build a port scanner in
we're going to build a port scanner in the next video or in later on in the
the next video or in later on in the lesson and you'll see this in action
lesson and you'll see this in action right now I just want you to notate
right now I just want you to notate understand what we're doing and then I'm
understand what we're doing and then I'm going to demonstrate an example that you
going to demonstrate an example that you do not have to follow along with and you
do not have to follow along with and you might not be able to follow along with
might not be able to follow along with so that's okay but just know that
so that's okay but just know that sockets are used to make a connection
sockets are used to make a connection between ports and IEP addresses and
between ports and IEP addresses and you'll see that here very shortly so you
you'll see that here very shortly so you do not name this by the way socket.pi if
do not name this by the way socket.pi if for some reason you came in here and you
for some reason you came in here and you named this socket.pi this will break
named this socket.pi this will break python because we are going to
python because we are going to import socket so make sure that you come
import socket so make sure that you come in here and you rename this if you named
in here and you rename this if you named it socket.pi it's very easy to do that
it socket.pi it's very easy to do that but that will break the socket dot Pi
but that will break the socket dot Pi which is but we're importing here
which is but we're importing here so with this we're going to set a couple
so with this we're going to set a couple of variables we're going to say host is
of variables we're going to say host is equal to 127.0.0.1
and this is our loopback address or our home address if you're not familiar with
home address if you're not familiar with computer networking I do recommend that
computer networking I do recommend that you go take a class on computer
you go take a class on computer networking because it will become very
networking because it will become very important as you get into python
important as you get into python development especially if you ever work
development especially if you ever work with nodes of any sort so other thing is
with nodes of any sort so other thing is ports so we have ports on our machine
ports so we have ports on our machine that we can connect to we're going to be
that we can connect to we're going to be using TCP uh if you do not know what TCP
using TCP uh if you do not know what TCP is or what the ports are that's okay you
is or what the ports are that's okay you can still follow along but know that
can still follow along but know that there are 65 535 available ports some
there are 65 535 available ports some ports are very common in what they use
ports are very common in what they use like Port 80 for example is a web server
like Port 80 for example is a web server over HTTP you have 443 which is https 21
over HTTP you have 443 which is https 21 is FTP there's a lot of common ports and
is FTP there's a lot of common ports and protocols that are out there we're going
protocols that are out there we're going to pick a non-standard port non-common
to pick a non-standard port non-common we're just going to say 7777 so what I'm
we're just going to say 7777 so what I'm going to tell this to do is I want to
going to tell this to do is I want to tell this to reach out to this host
tell this to reach out to this host which is just going to be us for this
which is just going to be us for this example and this port I want to make a
example and this port I want to make a connection on this port now I'm going to
connection on this port now I'm going to give a variable of s
give a variable of s and this is going to be a very long
and this is going to be a very long statement so if you say socket dot
statement so if you say socket dot socket I'm going to type this out and
socket I'm going to type this out and I'm going to explain everything okay so
I'm going to explain everything okay so socket
socket dot AF init
dot AF init then we're going to say socket
then we're going to say socket dot sock stream
and then just for your notes AF init is ipv4
AF init is ipv4 sock stream
sock stream is a port
is a port so we're giving it this s because we are
so we're giving it this s because we are not wanting to type this whole long
not wanting to type this whole long thing out all the time we're just
thing out all the time we're just shortening this what we're going to do
shortening this what we're going to do is we're going out to make a connection
is we're going out to make a connection to this AFI net which is ipv4 IP address
to this AFI net which is ipv4 IP address which is what this is and we're going to
which is what this is and we're going to also make a connection on a port which
also make a connection on a port which is our sock stream we're going to give
is our sock stream we're going to give it this port so we're going to say that
it this port so we're going to say that by doing s dot connect
by doing s dot connect and we're going to come in here and this
and we're going to come in here and this is going to be a tuple so we're actually
is going to be a tuple so we're actually going to use
going to use double parentheses here oh support
double parentheses here oh support okay and we could come in here by the
okay and we could come in here by the way and we could just put in one two
way and we could just put in one two seven zero zero one instead of using a
seven zero zero one instead of using a variable but I like to use variables
variable but I like to use variables because it's best practice but you could
because it's best practice but you could hard code this in if you wanted to but
hard code this in if you wanted to but here I just like using the variables
here I just like using the variables easier to change especially if you're
easier to change especially if you're coming in here and you're writing in a
coming in here and you're writing in a bunch of host Port calls so the variable
bunch of host Port calls so the variable is easy just to have in one place as
is easy just to have in one place as opposed to hard coding this
opposed to hard coding this okay so I'm going to go ahead and save
okay so I'm going to go ahead and save this this is where I do not expect you
this this is where I do not expect you to follow along because you might not
to follow along because you might not have the architecture behind it now as I
have the architecture behind it now as I stated in the beginning of this video I
stated in the beginning of this video I am an ethical hacker by trade which
am an ethical hacker by trade which means that this version of Cali that
means that this version of Cali that I've been running on her this version of
I've been running on her this version of Linux that I've been running on is
Linux that I've been running on is actually Cali Linux
actually Cali Linux and
and in Kali Linux we have a bunch of tools
in Kali Linux we have a bunch of tools available to us for pen testing and
available to us for pen testing and ethical hacking one of those tools is a
ethical hacking one of those tools is a tool called netcat now netcat is NC and
tool called netcat now netcat is NC and basically what it does is allows us to
basically what it does is allows us to connect to open ports or establish a
connect to open ports or establish a listener on an open port so what I'm
listener on an open port so what I'm going to do is actually I'm going to
going to do is actually I'm going to open up a new tab here make this bigger
open up a new tab here make this bigger and then I'm going to run this here
and then I'm going to run this here just understand if you've never used
just understand if you've never used netcat before that's fine I'm just
netcat before that's fine I'm just opening up a listener on a port that's
opening up a listener on a port that's all just worry about the L and the P for
all just worry about the L and the P for now listen on Port 7777 anybody makes a
now listen on Port 7777 anybody makes a connection on that Port we're listening
connection on that Port we're listening so we are going to connect to ourselves
so we are going to connect to ourselves because we wrote the script out to
because we wrote the script out to 127001 which is us and all we're going
127001 which is us and all we're going to do is python3 s dot pi
to do is python3 s dot pi hit enter nothing's going to happen we
hit enter nothing's going to happen we don't have any print statements anything
don't have any print statements anything crazy
crazy but you can see that a connection was
but you can see that a connection was made from one two seven zero zero one to
made from one two seven zero zero one to one two seven zero zero one and it made
one two seven zero zero one and it made a connection on this port and we
a connection on this port and we connected on the other side on this
connected on the other side on this other Port here which don't worry about
other Port here which don't worry about that too much if you're not familiar
that too much if you're not familiar with networking that's absolutely okay
with networking that's absolutely okay but there has to be two or it's being
but there has to be two or it's being connected
connected um one on one side one on the other so
um one on one side one on the other so here we made that connection we didn't
here we made that connection we didn't tell this to do anything else we just
tell this to do anything else we just said hey go out listen for this
said hey go out listen for this connection we made a connection we
connection we made a connection we established it we did our job we used
established it we did our job we used our socket and we are good to go here we
our socket and we are good to go here we close the connection because there was
close the connection because there was nothing no instructions given or
nothing no instructions given or anything else and that's all we needed
anything else and that's all we needed so what we're going to do now is we're
so what we're going to do now is we're going to in the next video build out
going to in the next video build out what I call a terrible Port scanner and
what I call a terrible Port scanner and we'll talk about why it's terrible but
we'll talk about why it's terrible but we're going to tie everything we've
we're going to tie everything we've learned so far together and build
learned so far together and build something out that is actually usable
something out that is actually usable with python so I've been throwing all
with python so I've been throwing all these lessons and terms and everything
these lessons and terms and everything out to you now we're going to apply that
out to you now we're going to apply that you're going to see how we can use that
you're going to see how we can use that all together and I'm very excited so
all together and I'm very excited so I'll catch you over in the next lesson
I'll catch you over in the next lesson when we start building out a port
when we start building out a port scanner
scanner it is time to create our first project
it is time to create our first project and this project is going to be building
and this project is going to be building out a terrible Port scanner and so let's
out a terrible Port scanner and so let's go ahead and create a new file I'm going
go ahead and create a new file I'm going to call this scanner.pi
give it the Ampersand here if you're on Linux
Linux and then we're just going to call this
in python3 save it get the pretty colors going
going and what we are going to do is we are
and what we are going to do is we are going to create a scanner that is going
going to create a scanner that is going to be something like this we're going to
to be something like this we're going to type in python3
type in python3 scanner.pi and then we're going to say
scanner.pi and then we're going to say IP address we want to provide an IEP
IP address we want to provide an IEP address and then it's going to go out
address and then it's going to go out and do Port scanning on the IP address
and do Port scanning on the IP address so hopefully we can build that out for
so hopefully we can build that out for now let's go ahead and import a couple
now let's go ahead and import a couple of things I should say a few things
of things I should say a few things we're going to import
we're going to import CIS talked about CIS
CIS talked about CIS I'm going to import socket talked about
I'm going to import socket talked about socket and from
socket and from date time we're going to go ahead and
date time we're going to go ahead and import
import date time so none of this should be new
date time so none of this should be new to you
to you so
so first thing that we're going to need to
first thing that we're going to need to do is Define our Target so we need to
do is Define our Target so we need to set up an if statement I'm just going to
set up an if statement I'm just going to say Define our Target
say Define our Target and what I want to say is if
and what I want to say is if the length of CIS ARG V and I'll explain
the length of CIS ARG V and I'll explain this in a second is equal to 2
this in a second is equal to 2 then we're going to set a Target
then we're going to set a Target variable Target is going to be equal to
variable Target is going to be equal to socket dot get host by name
socket dot get host by name and we're going to say sys dot ARG V1
and all this is going to do is Translate hostname to ipv4 all right
hostname to ipv4 all right let me make the else statements I'm
let me make the else statements I'm going to come back I'm going to explain
going to come back I'm going to explain everything okay so if we do else
everything okay so if we do else we're going to print out
we're going to print out invalid amount of arguments
and also print out syntax
syntax Python 3 scanner
Python 3 scanner dot pi
dot pi IP address
something like that okay go ahead and close that off okay
go ahead and close that off okay so we're taking a method of length and
so we're taking a method of length and we're saying CIS dot ARG V we spoke a
we're saying CIS dot ARG V we spoke a little bit about argb in the importing
little bit about argb in the importing section
section RV is going to be the amount of
RV is going to be the amount of arguments that we are giving so when we
arguments that we are giving so when we come in here and we type in python3
come in here and we type in python3 okay our first argument argument zero in
okay our first argument argument zero in theory is going to be scanner.pi
theory is going to be scanner.pi the second argument or second index
the second argument or second index index of one is going to be the IP
index of one is going to be the IP address that we give so 192.168 1.1 or
address that we give so 192.168 1.1 or whatever it might be
whatever it might be so we need to have two arguments if we
so we need to have two arguments if we have a third argument it's going to
have a third argument it's going to break if we don't have a second argument
break if we don't have a second argument it's going to break if we just type in
it's going to break if we just type in scanner.pi it'll break if we type in an
scanner.pi it'll break if we type in an IP address
IP address like 1.1 and then we type in something
like 1.1 and then we type in something here
here it's going to break because there's too
it's going to break because there's too many arguments so if it doesn't meet
many arguments so if it doesn't meet this specific length
this specific length then what we're going to do is print out
then what we're going to do is print out invalid amount of arguments
invalid amount of arguments here's the syntax give somebody some
here's the syntax give somebody some some help here
some help here if it does meet the length then what
if it does meet the length then what we're going to do is we're going to set
we're going to do is we're going to set our Target equal to socket dot get host
our Target equal to socket dot get host by name
by name and all this is saying is we're going to
and all this is saying is we're going to get host by name of CIS arcv1 that's our
get host by name of CIS arcv1 that's our IP address now this is going to
IP address now this is going to translate a hostname to an ipv4 so in
translate a hostname to an ipv4 so in case
case for example if you did
for example if you did python3scanner dot pi and you had a host
python3scanner dot pi and you had a host name like I have a host in my house
name like I have a host in my house called Punisher like if I gave it
called Punisher like if I gave it Punisher and my DNS knew internally that
Punisher and my DNS knew internally that that translated to a specific IP address
that translated to a specific IP address in my network that's fine this will
in my network that's fine this will translate
translate okay easy enough but we could also just
okay easy enough but we could also just give it an IP address so that's what
give it an IP address so that's what we're looking for here I highly
we're looking for here I highly recommend for this example using an IP
recommend for this example using an IP address
address in previous lessons when I've taught
in previous lessons when I've taught this before somebody has tried typing in
this before somebody has tried typing in a host name and it doesn't always go as
a host name and it doesn't always go as planned though we will talk about adding
planned though we will talk about adding error exceptions for that here in a
error exceptions for that here in a little bit so right now all we need to
little bit so right now all we need to know is we're trying to set this up with
know is we're trying to set this up with these arguments now this is not the best
these arguments now this is not the best logic this is something that will work
logic this is something that will work for our needs because we are building
for our needs because we are building this out but if we're building it out
this out but if we're building it out for somebody else this logic's not great
for somebody else this logic's not great and this is why I call this a crappy
and this is why I call this a crappy Port scanner is because it's not the
Port scanner is because it's not the best we're only doing it for proof of
best we're only doing it for proof of concept and to learn what we've learned
concept and to learn what we've learned so far but think about this in another
so far but think about this in another way think about if we're running two
way think about if we're running two arguments well I could give this an
arguments well I could give this an argument what if I if I come here and I
argument what if I if I come here and I say python3scanner dot pi and I give it
say python3scanner dot pi and I give it the second argument
the second argument but I give it like
but I give it like 192.1 or something like that well that's
192.1 or something like that well that's not a host name it's not going to
not a host name it's not going to translate to anything that's also not
translate to anything that's also not really an IP address so we should really
really an IP address so we should really add some other statements in here to say
add some other statements in here to say hey it needs to be a valid IP address it
hey it needs to be a valid IP address it needs to be like have four octets like
needs to be like have four octets like we expect and if we really wanted to get
we expect and if we really wanted to get critical about this we can make sure
critical about this we can make sure that it is a valid IP address because I
that it is a valid IP address because I P addresses can serve like 256. whatever
P addresses can serve like 256. whatever so we could say it must be between like
so we could say it must be between like you know each octet must be between 1
you know each octet must be between 1 and 254 and get really refined with that
and 254 and get really refined with that and say hey that's not a valid IP
and say hey that's not a valid IP address thus we're not going to scan
address thus we're not going to scan this but we don't have to worry about
this but we don't have to worry about that right now I'm just saying the logic
that right now I'm just saying the logic behind it we need to start thinking
behind it we need to start thinking about well how can a user break this we
about well how can a user break this we know how to run it but if we gave this
know how to run it but if we gave this to somebody else how would they run it
to somebody else how would they run it and how could they break it or how could
and how could they break it or how could they typo some something so these are
they typo some something so these are things to think about as we go
things to think about as we go so for now we've added this in we've got
so for now we've added this in we've got this in here we could test this if we
this in here we could test this if we just save it we come in here and we just
just save it we come in here and we just say Python 3 scanner dot Pi we don't
say Python 3 scanner dot Pi we don't give in any arguments you'll see that it
give in any arguments you'll see that it says invalid amount of arguments
says invalid amount of arguments python3scanner.pi is the syntax perfect
python3scanner.pi is the syntax perfect don't give it an argument right now
don't give it an argument right now because it's going to break if you don't
because it's going to break if you don't have DNS translating properly so
have DNS translating properly so from here let's go ahead and add a
from here let's go ahead and add a pretty Banner so just add a pretty
pretty Banner so just add a pretty Banner
Banner and all I'm going to do is do a print
and all I'm going to do is do a print command
command and I'm going to just do a bunch of
and I'm going to just do a bunch of dashes this is not really going to be
dashes this is not really going to be that pretty of a banner but it's still
that pretty of a banner but it's still going to be a banner and so when this
going to be a banner and so when this kicks off if if we've got a valid IP
kicks off if if we've got a valid IP that we're going to be scanning
that we're going to be scanning we're just going to do scanning Target
we're just going to do scanning Target and then we'll just do a space and you
and then we'll just do a space and you could just do a concatenation here of
could just do a concatenation here of plus Target you could do F string if you
plus Target you could do F string if you want completely up to you on how you
want completely up to you on how you want to do this so we just do scanning
want to do this so we just do scanning Target plus Target this will say what
Target plus Target this will say what the IP address is we can do like
the IP address is we can do like scanning Target
scanning Target of that something along those lines and
of that something along those lines and then we could say print
then we could say print time started
time started and then we can give this something like
and then we can give this something like a string
a string so we want to give plus a string of
so we want to give plus a string of date time dot now remember we can't
date time dot now remember we can't concatenate numbers and strings
concatenate numbers and strings so we're going to go ahead and do this
so we're going to go ahead and do this and then we'll just print out
and then we'll just print out this one more time
okay I'm going to save this let's go ahead and try running this with
let's go ahead and try running this with like
like I don't know 192 168 1.1
I don't know 192 168 1.1 okay
okay so this is what we get
so this is what we get we can see that we have scanning Target
we can see that we have scanning Target okay scan Target 192.168 1.1 here's the
okay scan Target 192.168 1.1 here's the time that it started perfect we've got a
time that it started perfect we've got a pretty Banner set up
pretty Banner set up so now let's actually start making it do
so now let's actually start making it do something
something so we're going to use what is called the
so we're going to use what is called the try command we're going to try something
try command we're going to try something and if it works perfect if it doesn't
and if it works perfect if it doesn't we're going to have exceptions for that
we're going to have exceptions for that so here's what we're going to do we're
so here's what we're going to do we're going to say try
going to say try or we're going to do a for Loop
or we're going to do a for Loop port in range remember we talked about a
port in range remember we talked about a range earlier we talked about well what
range earlier we talked about well what about a 4ip in range of 1 through 254.
about a 4ip in range of 1 through 254. we're doing the same concept here now
we're doing the same concept here now we're just giving it a range now there
we're just giving it a range now there are 65 535 potential ports
are 65 535 potential ports I'm not going to force you to scan all
I'm not going to force you to scan all those if you want to you can come in
those if you want to you can come in here and say 65 535 this is not threaded
here and say 65 535 this is not threaded we are not doing any sort of
we are not doing any sort of speed runs here this is could
speed runs here this is could potentially be a slow Port scanner so it
potentially be a slow Port scanner so it is best in my opinion to do like a port
is best in my opinion to do like a port scan between 50 and 85.
scan between 50 and 85. and the reason I do this is because
and the reason I do this is because we're going to scan or attempt to scan
we're going to scan or attempt to scan our home router and usually DNS is open
our home router and usually DNS is open on that and usually Port 80s open on
on that and usually Port 80s open on that so I'm trying to look and see if we
that so I'm trying to look and see if we can find a couple ports that might be
can find a couple ports that might be open
open so for port in this range what we're
so for port in this range what we're going to do is we're going to set our s
going to do is we're going to set our s equal to that lovely socket dot socket
equal to that lovely socket dot socket socket dot AF inet
socket dot AF inet and socket dot sock underscore stream
and socket dot sock underscore stream just like that
just like that and then we're also going to come in
and then we're also going to come in here and we're going to do a socket
here and we're going to do a socket dot set default
dot set default timeout to one
timeout to one so if it responds back or doesn't
so if it responds back or doesn't respond back within a second we're just
respond back within a second we're just going to move on we don't want to stick
going to move on we don't want to stick to scanning a port waiting waiting
to scanning a port waiting waiting waiting for not to respond back to us
waiting for not to respond back to us and then the script takes long and
and then the script takes long and longer and longer so we just want to
longer and longer so we just want to make sure that we set our default
make sure that we set our default timeout to one there and then what we're
timeout to one there and then what we're going to do is we're going to go ahead
going to do is we're going to go ahead and
and set a variable result
set a variable result and result is going to equal to
and result is going to equal to s dot connect
s dot connect underscore ex and I'll explain all this
underscore ex and I'll explain all this in a second
in a second Target import
Target import all right
all right so what this is doing here actually let
so what this is doing here actually let me type out the rest and then we'll go
me type out the rest and then we'll go back we're going to say if result is
back we're going to say if result is equal to zero
equal to zero we're going to print out
we're going to print out port
port we can do
is open so now we can come in here we can do a format Port if we want to you
can do a format Port if we want to you could use an F string here if you want
could use an F string here if you want to so we can just use an F string
to so we can just use an F string I'm just showing you examples but you
I'm just showing you examples but you can say port and just do an F in front
can say port and just do an F in front of this
okay Port whatever is open and then we're going to close the connection
all right let's read through this make sure we understand what's going on
sure we understand what's going on so we're gonna do a for Loop for a port
so we're gonna do a for Loop for a port in the range of 50 to 85 so we're going
in the range of 50 to 85 so we're going to start with 50 and 51 then 52 go
to start with 50 and 51 then 52 go through that process we are setting a
through that process we are setting a variable
variable of s equal to this because we're going
of s equal to this because we're going to gather the ipv4 address and we're
to gather the ipv4 address and we're going to gather the port that we're
going to gather the port that we're trying to connect to
trying to connect to now our ipv4 address here's our Tuple
now our ipv4 address here's our Tuple right here we are saying I want to
right here we are saying I want to connect on Target and Port Target is
connect on Target and Port Target is going to be supplied by us we're going
going to be supplied by us we're going to use rb1
to use rb1 so we're going to supply the IP address
so we're going to supply the IP address and the port is going to be this range
and the port is going to be this range here
here so for port in range we're declaring
so for port in range we're declaring Port here now this s.connect underscore
Port here now this s.connect underscore EX
EX this is an error indicator
this is an error indicator so if a port is open the error result
so if a port is open the error result returns zero
returns zero if a port is closed it returns a one so
if a port is closed it returns a one so if the result is a zero we're going to
if the result is a zero we're going to say hey this port was open
say hey this port was open if it's not it's going to close out and
if it's not it's going to close out and we're going to close this then we're
we're going to close this then we're going to go back to the loop and come
going to go back to the loop and come through and try it again so we're going
through and try it again so we're going to close out our socket connection on
to close out our socket connection on that Port come back try 51 52
that Port come back try 51 52 etc etc
etc etc now before we run this there are some
now before we run this there are some exceptions that we need to consider
exceptions that we need to consider so the first one we're going to try this
so the first one we're going to try this but we need exceptions so accept
but we need exceptions so accept what if we have a keyboard interrupt so
what if we have a keyboard interrupt so we'll say keyboard interrupt
we'll say keyboard interrupt and
and that just means what if we hit Ctrl C
that just means what if we hit Ctrl C while this is running we can stop this
while this is running we can stop this on our own so we're providing an
on our own so we're providing an exception of a keyboard interrupt and
exception of a keyboard interrupt and we're going to say exiting program on a
we're going to say exiting program on a new line
and then we're going to assist exit remember I talked about sysexit and
remember I talked about sysexit and we're going to allow us to exit
we're going to allow us to exit gracefully
gracefully we can also do an exception of a socket
we can also do an exception of a socket dot gai error
dot gai error now this
now this is what happens when the hostname does
is what happens when the hostname does not resolve so what if we say hostname
not resolve so what if we say hostname could not be resolved
could not be resolved so if we typed in a bunch of
so if we typed in a bunch of Mumble jumbo up here we say like Python
Mumble jumbo up here we say like Python 3
3 scanner dot pi
scanner dot pi and we just typed in something and that
and we just typed in something and that doesn't resolve to an IP address well
doesn't resolve to an IP address well guess what this is going to throw an
guess what this is going to throw an error now
error now and we can exit
we got to cover all of our bases lastly what if we have a socket dot
lastly what if we have a socket dot error so we have an error when we're
error so we have an error when we're doing this and we print out
doing this and we print out hey we could not connect to the server
hey we could not connect to the server just it's just not online what if we try
just it's just not online what if we try to connect to an IP address and it
to connect to an IP address and it doesn't talk back to us
doesn't talk back to us but not connect to the server
but not connect to the server so something to think about there again
so something to think about there again we'll assist dot exit
we'll assist dot exit so let's go ahead and save this
so let's go ahead and save this now you're going to need to run this
now you're going to need to run this against something so I'm going to show
against something so I'm going to show you an example of mine okay so in order
you an example of mine okay so in order to run this we need an IP address now if
to run this we need an IP address now if I type in ifconfig I'm actually on a
I type in ifconfig I'm actually on a virtual machine right now so
virtual machine right now so 192.168.138.140 is not my true IP
192.168.138.140 is not my true IP address
address I'm actually going to bring up my
I'm actually going to bring up my Windows machine that I'm on
Windows machine that I'm on and you can see here that I have a
and you can see here that I have a default gateway of
default gateway of 192.168.4.1 so make sure you know your
192.168.4.1 so make sure you know your gateway or what your router's IP address
gateway or what your router's IP address or that you have a machine that you can
or that you have a machine that you can scan that you know might have a port of
scan that you know might have a port of 53 or 80 open or you need to modify your
53 or 80 open or you need to modify your script to make sure that you can scan
script to make sure that you can scan for something but I'm going to go ahead
for something but I'm going to go ahead and scan my 4.1 because it should have
and scan my 4.1 because it should have some stuff open so if I do a Python 3
some stuff open so if I do a Python 3 scanner.pi I'm going to come in here and
scanner.pi I'm going to come in here and just do a 4.1
just do a 4.1 and I hit enter this could take some
and I hit enter this could take some time so what I'm going to do is I'm
time so what I'm going to do is I'm going to let this sit here actually it's
going to let this sit here actually it's already it's zooming through uh you can
already it's zooming through uh you can see it found Port 53 pretty quick
see it found Port 53 pretty quick um and then this might take time to find
um and then this might take time to find Port 80 if Port 80 is open but basically
Port 80 if Port 80 is open but basically what it's going to go through is go
what it's going to go through is go through 450 51 52 53 all the way through
through 450 51 52 53 all the way through the process and has that one second
the process and has that one second timeout as it goes through and checks
timeout as it goes through and checks each and every one of these ports so it
each and every one of these ports so it should take maybe up to a minute for
should take maybe up to a minute for this to work so I'm going to go ahead
this to work so I'm going to go ahead and pause right here looks like we're
and pause right here looks like we're almost done actually or 80 came back as
almost done actually or 80 came back as open too no need to pause it finished
open too no need to pause it finished while I was yapping so you can see I
while I was yapping so you can see I came back and said 453 is open port 80
came back and said 453 is open port 80 is open so our script worked
is open so our script worked it took forever to scan these ports but
it took forever to scan these ports but it is working so we were able to build
it is working so we were able to build out let's go back and look at this this
out let's go back and look at this this is awesome we were able to build out a
is awesome we were able to build out a port scanner that came in here and
port scanner that came in here and within two hours you now have the
within two hours you now have the knowledge to build out a basic Port
knowledge to build out a basic Port scanner you didn't think you would be
scanner you didn't think you would be able to do that well here you are look
able to do that well here you are look at you
at you you're awesome okay so we were able to
you're awesome okay so we were able to give it an argument
give it an argument we set our if conditional statement make
we set our if conditional statement make sure the length of the argument was two
sure the length of the argument was two valid otherwise we have an else here we
valid otherwise we have an else here we made a little pretty Banner we imported
made a little pretty Banner we imported some stuff got that all working we did a
some stuff got that all working we did a try statement which really was just a
try statement which really was just a for Loop in here and we had some logic
for Loop in here and we had some logic based on conditions that would happen
based on conditions that would happen within this for Loop we had a for Loop
within this for Loop we had a for Loop and an if statement together we used a F
and an if statement together we used a F string to print this out pretty cool
string to print this out pretty cool came through we had some exceptions as
came through we had some exceptions as well for example like the keyboard
well for example like the keyboard interrupt just as to show you if I come
interrupt just as to show you if I come and run this again if I wanted to stop
and run this again if I wanted to stop this scan in the middle of it I could
this scan in the middle of it I could just hit Ctrl C and it'll say hey
just hit Ctrl C and it'll say hey exiting program and that's exactly what
exiting program and that's exactly what we told it to do we could say in here it
we told it to do we could say in here it says exiting program so that's the
says exiting program so that's the keyboard interrupt same thing we had
keyboard interrupt same thing we had exceptions for not being able to connect
exceptions for not being able to connect or we had the hostname could not resolve
or we had the hostname could not resolve we would also have those sorts of things
we would also have those sorts of things as well so you could test out those
as well so you could test out those errors see if they work for you but
errors see if they work for you but other than that we built a scanner so
other than that we built a scanner so this is Project number one we're gonna
this is Project number one we're gonna go ahead and move on to learning a
go ahead and move on to learning a little bit more Python and then we'll go
little bit more Python and then we'll go ahead and get into some more Project
ahead and get into some more Project work so I'll see you over in the next
work so I'll see you over in the next video
video now we're going to take a look at
now we're going to take a look at accepting user input in our program and
accepting user input in our program and then how we can manipulate data with
then how we can manipulate data with that input
that input so let's go ahead and make a new file
so let's go ahead and make a new file I'm going to just say mouse pad and
I'm going to just say mouse pad and we'll call this input dot pi
we'll call this input dot pi and I'm going to bring this over we'll
and I'm going to bring this over we'll give this the shebang
give this the shebang then python3 here
then python3 here save it get the pretty colors
save it get the pretty colors and in order to take input in Python all
and in order to take input in Python all we actually need to do is just use input
we actually need to do is just use input something like this so we could say like
something like this so we could say like enter your name for input like this and
enter your name for input like this and put a space and we'll need to put this
put a space and we'll need to put this into a variable so if we come into the
into a variable so if we come into the front of this and we just say name is
front of this and we just say name is equal to
equal to we could do something like that and then
we could do something like that and then we can just print out like
we can just print out like hello
hello and give a space
and give a space do name
do name and then
and then we'll add an exclamation at the end or a
we'll add an exclamation at the end or a period at the end doesn't really matter
period at the end doesn't really matter and then we can just come in here and
and then we can just come in here and save that
save that and if we run this
close this out I forgot to add an ampersands we'll do that real quick and
ampersands we'll do that real quick and if we run this now we just say python3
if we run this now we just say python3 and we say input
and we say input dot Pi let's say enter your name I'll
dot Pi let's say enter your name I'll just say Heath
just say Heath and you can see it says hello Heath
and you can see it says hello Heath we can add upon this we can say like
we can add upon this we can say like what's your favorite drink so if we just
what's your favorite drink so if we just make a variable and we call it drink and
make a variable and we call it drink and we do input and say what's your favorite
we do input and say what's your favorite drink
drink and do a question mark something like
and do a question mark something like that
that we can come in here and then just add
we can come in here and then just add upon this if we want we can just say
upon this if we want we can just say have a space
have a space plus drink
plus drink less period
less period all right and it should say welcome
all right and it should say welcome Heath have a and then whatever drink we
Heath have a and then whatever drink we put in here so if we save this come back
put in here so if we save this come back and run it
and run it okay I'm gonna put Heath as my name and
okay I'm gonna put Heath as my name and then
then White Russian is my favorite drink
White Russian is my favorite drink and it says hello Heath have a White
and it says hello Heath have a White Russian so we can easily accept input
Russian so we can easily accept input like this
like this so let's think about if we wanted to
so let's think about if we wanted to build out a calculator I'm going to go
build out a calculator I'm going to go ahead and delete this what if we wanted
ahead and delete this what if we wanted to take input and make a mini calculator
to take input and make a mini calculator we could definitely do that
we could definitely do that so what if we had two numbers and we've
so what if we had two numbers and we've been taking X and Y so if we said X is
been taking X and Y so if we said X is equal to input
equal to input and we'll just say
and we'll just say give me a number
give me a number and then we'll do something like that
and then we'll do something like that and then we can also do y and also make
and then we can also do y and also make that input
that input give me yet another number
give me yet another number you put whatever you want here by the
you put whatever you want here by the way
way and if we do something like print
and if we do something like print X Plus y
X Plus y and we do that let's save it and let's
and we do that let's save it and let's see what happens here so I'm going to
see what happens here so I'm going to print this out
print this out we'll give a number we'll do three and
we'll give a number we'll do three and then we'll do two
then we'll do two and it gave us 32. why is it doing that
and it gave us 32. why is it doing that well what it's doing is it is taking
well what it's doing is it is taking these and giving this to us as a string
these and giving this to us as a string so we need to either do an integer here
so we need to either do an integer here and put this in an INT or we need to
and put this in an INT or we need to take this as a float so if we think
take this as a float so if we think about this from the past if we want to
about this from the past if we want to only take integers we can but if
only take integers we can but if somebody were to put in like 8.7 or some
somebody were to put in like 8.7 or some number here and they gave that to us
number here and they gave that to us well we would only take the eight and we
well we would only take the eight and we would leave off the 0.7 so I think if
would leave off the 0.7 so I think if we're building out a calculator it's
we're building out a calculator it's better to use floats so we can just come
better to use floats so we can just come in here and say float and we'll put this
in here and say float and we'll put this all in parentheses and then we'll do the
all in parentheses and then we'll do the same thing right here
so now when we come in here and we'd save this and run this again what should
save this and run this again what should happen is this should work properly so
happen is this should work properly so if we did like three
if we did like three and then 3.2
and then 3.2 you'll see that we get 6.2 which is
you'll see that we get 6.2 which is proper that's awesome
proper that's awesome well what if we wanted to build this out
well what if we wanted to build this out further
further we could make this into a situational
we could make this into a situational thing what if we not only wanted to do
thing what if we not only wanted to do an addition but what if we wanted to
an addition but what if we wanted to allow the user to say I want to add or
allow the user to say I want to add or subtract or divide or multiply or maybe
subtract or divide or multiply or maybe use an exponent we could do that so what
use an exponent we could do that so what if we added another variable and we just
if we added another variable and we just called this o for operator and we just
called this o for operator and we just took that input and we just said
took that input and we just said something along the lines of input
something along the lines of input give me an operator
give me an operator right and maybe we put this in the
right and maybe we put this in the middle here so that way we're not just
middle here so that way we're not just getting two numbers maybe we want to
getting two numbers maybe we want to take that and we want to say something
take that and we want to say something like this so that way you'll say give me
like this so that way you'll say give me your number give me an operator and then
your number give me an operator and then give me another number and we'll print
give me another number and we'll print that out so
that out so now let's think about how we want this
now let's think about how we want this to flow if we want this to work with a
to flow if we want this to work with a addition like we already have we might
addition like we already have we might want to come in here and just say
want to come in here and just say something like if o
something like if o or operator is equal to a plus sign
or operator is equal to a plus sign well then
well then we'll come in and just print out X Plus
we'll come in and just print out X Plus y
y remember the indentation is important
remember the indentation is important here
here else if or L if
else if or L if o is equal to a minus
o is equal to a minus guess what we're going to print x minus
guess what we're going to print x minus y
y and we can continue on here
and we can continue on here else if o is equal to
division we'll divide and then we'll multiply as well so x
and then we'll multiply as well so x divided by y
divided by y else if o is equal to
else if o is equal to multiply here
multiply here we'll go ahead and multiply that
we'll go ahead and multiply that let's throw in an exponent for good
let's throw in an exponent for good measure
measure so let's do L if o is equal to an
so let's do L if o is equal to an exponent so that's two
exponent so that's two asterisk there and then we'll just print
asterisk there and then we'll just print out
out X
X times y so we've got a mini little
times y so we've got a mini little calculator here and we need to end this
calculator here and we need to end this with
with an else statement so what if we take
an else statement so what if we take input that doesn't belong here if it
input that doesn't belong here if it doesn't match one of these operators
doesn't match one of these operators then we can just print something like
then we can just print something like unknown operator
unknown operator all right and period there save that and
all right and period there save that and this should work so let's go ahead and
this should work so let's go ahead and give this a try what if we come in here
give this a try what if we come in here we just say
we just say give me a number we'll do three and
give me a number we'll do three and let's say we want to multiply and we'll
let's say we want to multiply and we'll do by three
do by three and we get a 9 we can do it again we can
and we get a 9 we can do it again we can try something like
try something like we'll do uh four and this time we'll do
we'll do uh four and this time we'll do an exponent we'll do four
an exponent we'll do four so four to the fourth power is 256. so
so four to the fourth power is 256. so we have just quite easily built out a
we have just quite easily built out a little calculator that we take input
little calculator that we take input from a user and then utilize that to
from a user and then utilize that to calculate that expression given what is
calculate that expression given what is given to us by the user now let's think
given to us by the user now let's think of something else here just as an aside
of something else here just as an aside what if something is written differently
what if something is written differently like when I think of math with python
like when I think of math with python yes we think of two asterisks as an
yes we think of two asterisks as an exponent but what if we had a situation
exponent but what if we had a situation where we wanted to maybe use the up
where we wanted to maybe use the up Arrow or the carrot symbol which is how
Arrow or the carrot symbol which is how I've commonly seen it used online for
I've commonly seen it used online for Math and exponents well we could do
Math and exponents well we could do something like or
something like or o is equal to
o is equal to the up
the up Arrow like that and what if we save that
Arrow like that and what if we save that and ran this now
and ran this now and if we gave a 4 to the up Arrow of 4
and if we gave a 4 to the up Arrow of 4 guess what we still get 256 so we can
guess what we still get 256 so we can use our statement like that here our and
use our statement like that here our and or or other operators that we have
or or other operators that we have learned along the way so start thinking
learned along the way so start thinking about it like that as we start to piece
about it like that as we start to piece these things together we're starting to
these things together we're starting to build out little projects and we can use
build out little projects and we can use some of the logic that we have already
some of the logic that we have already learned throughout this course so that's
learned throughout this course so that's it for this lesson we're going to go
it for this lesson we're going to go ahead and move on to the next one
ahead and move on to the next one okay now we're going to talk about
okay now we're going to talk about reading and writing files using python
reading and writing files using python so let's go ahead and make a new file
so let's go ahead and make a new file I'm just going to mouse pad and we're
I'm just going to mouse pad and we're going to call this file months Dot txt
going to call this file months Dot txt and in here let's go ahead and just type
and in here let's go ahead and just type out the month so we'll do January
out the month so we'll do January February March
February March April if I could type May June July
April if I could type May June July August September October November
August September October November and December
and December if you need to take a break and catch up
if you need to take a break and catch up go ahead and do that
go ahead and do that save this and once you have it saved go
save this and once you have it saved go ahead and close the file out
ahead and close the file out so let's go ahead and create a new
so let's go ahead and create a new python file so call this mouse pad and I
python file so call this mouse pad and I think we'll just call this read write
think we'll just call this read write dot pi
dot pi it'll do an ampersand here
it'll do an ampersand here and for this what we're going to do is
and for this what we're going to do is we're going to go ahead and look at how
we're going to go ahead and look at how we can read and write files so the way
we can read and write files so the way that we do that is with the open command
that we do that is with the open command so we'll say something like open and
so we'll say something like open and with open and actually let's add the
with open and actually let's add the shebang up here really quick in python3
shebang up here really quick in python3 save it and with the open command we can
save it and with the open command we can say something like open
say something like open months.txt
and I need to add this here so if we open months.txt what we need to
so if we open months.txt what we need to do with this or what we typically do
do with this or what we typically do with this is we store this within a
with this is we store this within a variable so we might just call this
variable so we might just call this months equals open months.txt and if we
months equals open months.txt and if we want to read that file we can come in
want to read that file we can come in here and just print out months and
here and just print out months and you'll see what this does here in a
you'll see what this does here in a second now best practice says to also
second now best practice says to also close this out anytime we open this so
close this out anytime we open this so I'm going to go ahead and just add some
I'm going to go ahead and just add some lines in here because we're going to add
lines in here because we're going to add some more stuff to this but we can just
some more stuff to this but we can just do months Dot close
do months Dot close and we'll save this let's go ahead and
and we'll save this let's go ahead and run and see what happens here so if we
run and see what happens here so if we do Python 3
do Python 3 read write.pi
read write.pi you'll see we get this information back
you'll see we get this information back let me move this so it's readable and
let me move this so it's readable and what this tells us is hey this is the
what this tells us is hey this is the name of the file
name of the file we're in a certain mode in this mode
we're in a certain mode in this mode currently is read mode and we get the
currently is read mode and we get the default encoding here of utf-8
default encoding here of utf-8 so we're getting information back we're
so we're getting information back we're not actually reading the file that we
not actually reading the file that we wrote so
wrote so um some of the information that we can
um some of the information that we can get by the way we can come in here and
get by the way we can come in here and we can say it to ourselves well
we can say it to ourselves well is this file readable so we have mode
is this file readable so we have mode equals R and this is one way to check it
equals R and this is one way to check it there's a couple ways that we can check
there's a couple ways that we can check it as well we can print out
it as well we can print out month dot mode and that will tell us
month dot mode and that will tell us what mode we're in we can also print out
what mode we're in we can also print out months.readable and that should give us
months.readable and that should give us a Boolean statement whether that is true
a Boolean statement whether that is true or false so if we come in here and we
or false so if we come in here and we save this
save this and we do this again
and we do this again you'll see that we get months we print
you'll see that we get months we print that out we get the whole shebang here
that out we get the whole shebang here and we get the uh mode is equal to R
and we get the uh mode is equal to R which is readable you can see if we
which is readable you can see if we print out the mode we can also see it's
print out the mode we can also see it's readable or if we do months readable we
readable or if we do months readable we can see that it is readable so we have
can see that it is readable so we have the ability here to actually print this
the ability here to actually print this out and read this file
out and read this file so how do we do that well let's go ahead
so how do we do that well let's go ahead and delete these two lines
and we can just come in here and do month dot read
month dot read if we do that what happens here let's
if we do that what happens here let's save it print this out
save it print this out and you can see that it reads through
and you can see that it reads through every single iteration January all the
every single iteration January all the way through December perfect so we just
way through December perfect so we just read a file and we closed out
read a file and we closed out working as intended if we wanted to read
working as intended if we wanted to read this line by line we could we can do
this line by line we could we can do months.readline like this and if we save
months.readline like this and if we save that in print
that in print we will read literally one line if we
we will read literally one line if we wanted to read a second line we could
wanted to read a second line we could copy this and we could paste this and
copy this and we could paste this and save it and come in here and guess what
save it and come in here and guess what we'll get January and February this time
we'll get January and February this time so if we want to read this we have to
so if we want to read this we have to read line by line now if we wanted to
read line by line now if we wanted to read all the lines at once we could do
read all the lines at once we could do that
that in a different way we could do that with
in a different way we could do that with read lines
read lines and this will print out an empty array
and this will print out an empty array or a list here actually and what you'll
or a list here actually and what you'll see is we get January a new line
see is we get January a new line February new line March Etc so we put
February new line March Etc so we put this into a list and now if we try to
this into a list and now if we try to actually run this again let's actually
actually run this again let's actually tab over we tried to run this twice look
tab over we tried to run this twice look what happens
what happens I'm going to print this and save this
so we have the first list here and then we have a second list here the second
we have a second list here the second list is empty
list is empty well that's because we've actually
well that's because we've actually already read this so we read through it
already read this so we read through it here first and then it's empty the next
here first and then it's empty the next time we try to read it so if we wanted
time we try to read it so if we wanted to read it again what we need to do is
to read it again what we need to do is actually use what is called the seek
actually use what is called the seek method we can come in here and say
method we can come in here and say months.seek
months.seek do zero like that to go back to the very
do zero like that to go back to the very first line
first line and print out again
and print out again and now you can see we actually printed
and now you can see we actually printed this out twice so that works out well
this out twice so that works out well we also have the ability to put this
we also have the ability to put this into a for Loop to read through every
into a for Loop to read through every iteration of the line so if we wanted to
iteration of the line so if we wanted to do something like
do something like four month in months we could just print
four month in months we could just print out month
out month all right and that should iterate
all right and that should iterate through everything in here so save that
through everything in here so save that print this
print this and you can see that it indeed does
and you can see that it indeed does print through everything
print through everything we can also add the dot strip at the end
we can also add the dot strip at the end of this
save that print and you can see that we strip out
print and you can see that we strip out any of the new lines that are in there
any of the new lines that are in there so you saw we got some spacing in here
so you saw we got some spacing in here it's a little funky so if we came
it's a little funky so if we came through and we just added the dot strip
through and we just added the dot strip that makes our for Loop a little bit
that makes our for Loop a little bit better so again remember what we're
better so again remember what we're defining here is whatever we want we can
defining here is whatever we want we can call this for X in months make this an X
call this for X in months make this an X and it's the same thing but logically
and it's the same thing but logically it's just easy to call this month in
it's just easy to call this month in month and then we can just print those
month and then we can just print those out so we can iterate through this so so
out so we can iterate through this so so far up until this point all we've done
far up until this point all we've done is been able to read a file what if we
is been able to read a file what if we want to write to a file or append to a
want to write to a file or append to a file well we can do that as well so if
file well we can do that as well so if we wanted to
we wanted to for instance open a file let's open a
for instance open a file let's open a new file let's do something we haven't
new file let's do something we haven't created yet let's do days of the week so
created yet let's do days of the week so let's do open days and if we try to do
let's do open days and if we try to do this let's change months to days
this let's change months to days and we're going to change days to close
and we're going to change days to close and we're just going to leave this open
and we're just going to leave this open right here so we have our best practice
right here so we have our best practice now if we try to run this with an open
now if we try to run this with an open days.txt uh we're not going to be able
days.txt uh we're not going to be able to do that because currently we're just
to do that because currently we're just in read mode so we want to be able to
in read mode so we want to be able to turn over and put ourselves into write
turn over and put ourselves into write mode in order to do that we can just do
mode in order to do that we can just do a w if we wanted to check that out we
a w if we wanted to check that out we could just do print days.mode like we
could just do print days.mode like we saw before make sure we are actually
saw before make sure we are actually operating in right mode so if we save
operating in right mode so if we save this
this you'll see that we are in right mode so
you'll see that we are in right mode so we're good to go you could also just
we're good to go you could also just again delete this save
again delete this save and print out days apologies you print
and print out days apologies you print out days save that you'll be able to see
out days save that you'll be able to see that we are also in write mode so both
that we are also in write mode so both of these work
of these work now let's write to a file so we've got
now let's write to a file so we've got days let's go ahead and
days let's go ahead and write to that so we can do something
write to that so we can do something like
like days oops days dot right
days oops days dot right and let's say we wanted to put Monday
and let's say we wanted to put Monday into days save that
into days save that close it
close it and if we go ahead and execute that
and if we go ahead and execute that nothing happens but if we go ahead and
nothing happens but if we go ahead and cat out days.txt
cat out days.txt you'll see that Monday has been put into
you'll see that Monday has been put into days.txt perfect so now what if we
days.txt perfect so now what if we wanted to continue on with this let's
wanted to continue on with this let's put Tuesday in there and we're going to
put Tuesday in there and we're going to need a new line so let's go ahead and do
need a new line so let's go ahead and do a new line with that and we'll do
a new line with that and we'll do Tuesday and hopefully when we write this
Tuesday and hopefully when we write this out we'll see Monday and Tuesday so
out we'll see Monday and Tuesday so let's save that
let's save that print this
print this sorry let's run the script and then
sorry let's run the script and then print this
print this and you'll see we have the new line in
and you'll see we have the new line in there and we have Tuesday but we
there and we have Tuesday but we actually overwrote it we don't we don't
actually overwrote it we don't we don't have Monday anymore
have Monday anymore so what's happening here is we're
so what's happening here is we're actually writing to a file which is
actually writing to a file which is overwriting the file we're not appending
overwriting the file we're not appending to the file so if we wanted to append to
to the file so if we wanted to append to the file what we need to do is change
the file what we need to do is change this W to an a
this W to an a and we can come in here and we can write
and we can come in here and we can write in Wednesday if we wanted to
in Wednesday if we wanted to save this
save this and now let's run this and run that and
and now let's run this and run that and now you can see we have Tuesday and
now you can see we have Tuesday and Wednesday so understand the difference
Wednesday so understand the difference between R being read
between R being read W being right which overwrites and a
W being right which overwrites and a being append which allows us to append a
being append which allows us to append a file instead of overwriting a file
file instead of overwriting a file so that is it for this lesson I'll go
so that is it for this lesson I'll go ahead and see you over in the next one
ahead and see you over in the next one all right let's talk about classes and
all right let's talk about classes and objects
objects so python is what is known as an object
so python is what is known as an object oriented programming language so pretty
oriented programming language so pretty much everything in Python is an object
much everything in Python is an object and we can use what is called a class to
and we can use what is called a class to be what is like an object Constructor
be what is like an object Constructor and we can use that to help create
and we can use that to help create objects and this is a little bit easier
objects and this is a little bit easier to explain once we actually demonstrate
to explain once we actually demonstrate this so we're going to create a couple
this so we're going to create a couple of files in this lesson and the first
of files in this lesson and the first thing that we're going to do is we're
thing that we're going to do is we're going to do a mouse pad and I am going
going to do a mouse pad and I am going to create a file called
to create a file called employees dot pi
and in this we're going to go ahead and declare class
declare class I'm going to save this here so let's do
I'm going to save this here so let's do class employees save it
class employees save it and we're going to go ahead and hit
and we're going to go ahead and hit enter and just tab over
enter and just tab over and we're going to do this
and we're going to do this Define and two underscores
Define and two underscores i n i t or init two underscores again
i n i t or init two underscores again and we're gonna put some parameters
and we're gonna put some parameters inside of this function and we'll talk
inside of this function and we'll talk about what the init function is here in
about what the init function is here in a second let's go ahead and let's think
a second let's go ahead and let's think about having employees so the first
about having employees so the first parameter we're going to Define is
parameter we're going to Define is called self
called self and then for our employees we might want
and then for our employees we might want to know the employee's name
to know the employee's name we might want to know what department
we might want to know what department they work in
they work in we might want to know their role in that
we might want to know their role in that department
department their salary
their salary and maybe the years that they've been
and maybe the years that they've been employed so we'll do years underscore
employed so we'll do years underscore employed
employed and just like a function We'll add the
and just like a function We'll add the colon here at the end
colon here at the end and we're going to go ahead and tab and
and we're going to go ahead and tab and then we're going to Define all of this
then we're going to Define all of this so let's go ahead and say self
so let's go ahead and say self dot name is equal to name so we're
dot name is equal to name so we're creating methods here which you'll see
creating methods here which you'll see us use in just a bit we're going to do
us use in just a bit we're going to do self.department
self.department equals Department
equals Department and you should get the gist at this
and you should get the gist at this point self.roll is equal to roll
point self.roll is equal to roll self. salary is equal to salary
self. salary is equal to salary self
self dot years employed is equal to years
dot years employed is equal to years employed
okay so let's save that so all classes have a function called the init function
have a function called the init function and this is always executed when the
and this is always executed when the class is being initiated
class is being initiated so we're going to use this init function
so we're going to use this init function to assign values to object properties
to assign values to object properties so what we're doing here is we're
so what we're doing here is we're creating these parameters within this
creating these parameters within this function and we're also building out
function and we're also building out methods that we can use once we import
methods that we can use once we import this class so let's go ahead and close
this class so let's go ahead and close this out and we're going to open up
this out and we're going to open up another mouse pad and we'll just call
another mouse pad and we'll just call this something like our employees dot Pi
this something like our employees dot Pi you can call whatever you want and I'm
you can call whatever you want and I'm going to go ahead and do my shebang at
going to go ahead and do my shebang at the top we'll do bin python3
the top we'll do bin python3 save that and from here I want to
save that and from here I want to actually import the class that we just
actually import the class that we just built so what I'm going to do is I'm
built so what I'm going to do is I'm going to import this and we're going to
going to import this and we're going to say from employees
import employees
employees all right and we can make a couple of
all right and we can make a couple of employees here so let's set a variable
employees here so let's set a variable of E1 for employee one and we'll just do
of E1 for employee one and we'll just do employees
employees and I'm going to stick with the Bob's
and I'm going to stick with the Bob's Burgers theme from earlier we'll just
Burgers theme from earlier we'll just say we've got Bob remember we we're
say we've got Bob remember we we're declaring Bob's name
declaring Bob's name his department will say he works in
his department will say he works in sales
sales will say that his role within the
will say that his role within the department is the director of sales
department is the director of sales and we'll say his salary is a hundred
and we'll say his salary is a hundred thousand dollars a year
thousand dollars a year and that he has been employed for 20
and that he has been employed for 20 years
years and we'll do another employee
and we'll do another employee and we'll say that this employee is
and we'll say that this employee is Linda
Linda she is an executive
she is the Chief Information officer or the CIO
the CIO she makes a hundred and fifty thousand
she makes a hundred and fifty thousand dollars a year and she has been with the
dollars a year and she has been with the organization for 10 years
organization for 10 years so we can do some stuff with this we can
so we can do some stuff with this we can go and say like print
go and say like print E1 dot name
E1 dot name let's save this make sure everything
let's save this make sure everything works
works coming here actually let me close and
coming here actually let me close and reopen this because I forgot my
reopen this because I forgot my Ampersand on this
Ampersand on this and we'll come back and now we'll go
and we'll come back and now we'll go ahead and do python3 our employees and
ahead and do python3 our employees and you'll see that print e1.name is pulling
you'll see that print e1.name is pulling down Bob so we're using the name method
down Bob so we're using the name method that we created with our class so we
that we created with our class so we Define that within that class so now we
Define that within that class so now we have the ability to pull down
have the ability to pull down information based on the class that we
information based on the class that we built so we can also do something like
built so we can also do something like print E2 dot roll and we should get that
print E2 dot roll and we should get that role printed out for us so if we see E2
role printed out for us so if we see E2 roll we're getting that she is a CIO so
roll we're getting that she is a CIO so that is accurate statement here let's
that is accurate statement here let's see if we could open both of these let's
see if we could open both of these let's open also
open also employees.pi and we have both of these
employees.pi and we have both of these here now so it's a little bit easier to
here now so it's a little bit easier to see we've got our function our init
see we've got our function our init function here and we have all of our
function here and we have all of our methods that we've defined now we can
methods that we've defined now we can build upon this within this class so
build upon this within this class so let's say if we wanted to make another
let's say if we wanted to make another function if we wanted to say something
function if we wanted to say something like Define
like Define eligible for retirement
eligible for retirement and we just said self in here as the
and we just said self in here as the parameter what if we said something like
parameter what if we said something like if
if self dot years employed
self dot years employed is greater than or equal to 20.
is greater than or equal to 20. then we return true because if the
then we return true because if the person has worked with us for 20 years
person has worked with us for 20 years then they are eligible for retirement
then they are eligible for retirement otherwise if they haven't then they
otherwise if they haven't then they haven't earned their retirement yet so
haven't earned their retirement yet so we can look at an employee and see how
we can look at an employee and see how long they've worked with us and we can
long they've worked with us and we can save this here and then we can come in
save this here and then we can come in here we can do something like print
here we can do something like print and we'll say E1
and we'll say E1 and we'll ask if they are eligible for
and we'll ask if they are eligible for retirement
retirement okay
okay save this print this out and you'll see
save this print this out and you'll see that Bob is indeed eligible for
that Bob is indeed eligible for retirement because he has been with the
retirement because he has been with the company at least 20 years which is what
company at least 20 years which is what we put here within the class
we put here within the class so just know what we're doing is we're
so just know what we're doing is we're building out our own class and we're
building out our own class and we're able to Define
able to Define these functions and these parameters and
these functions and these parameters and these help us with creating our objects
these help us with creating our objects that we're using over here so we've got
that we're using over here so we've got our classes and then we've got our
our classes and then we've got our objects so this can get really robust
objects so this can get really robust very quick and we'll build out a project
very quick and we'll build out a project to look at that here in the next lesson
to look at that here in the next lesson and that way we can tie this all
and that way we can tie this all together but this is a very important
together but this is a very important part of programming and this is very
part of programming and this is very much a one-on-one class so we're just
much a one-on-one class so we're just skimming the surface on what this is but
skimming the surface on what this is but this is actually incredibly useful when
this is actually incredibly useful when we start building out classes like this
we start building out classes like this to help with other things that we're
to help with other things that we're writing and pulling information from so
writing and pulling information from so that's it for this lesson we're going to
that's it for this lesson we're going to go ahead and move on to the next one
go ahead and move on to the next one we have reached the final project in
we have reached the final project in this course and this is going to tie
this course and this is going to tie everything together that we have learned
everything together that we have learned thus far
thus far so I am a bit of a sneaker head which
so I am a bit of a sneaker head which means I really like shoes and so what
means I really like shoes and so what we're going to do is we're going to
we're going to do is we're going to build a budget app using classes and
build a budget app using classes and objects and we're going to see what
objects and we're going to see what shoes we can afford based on how much
shoes we can afford based on how much money we have
money we have so we're going to go ahead and start
so we're going to go ahead and start with the class and we're going to just
with the class and we're going to just make a new file we'll do mouse pad and
make a new file we'll do mouse pad and we'll call this shoes I can type shoes
we'll call this shoes I can type shoes dot pi
dot pi open that up
open that up and we'll also open up a new window as
and we'll also open up a new window as well or just a new tab here and we'll
well or just a new tab here and we'll write in both of these so uh for this
write in both of these so uh for this one we're going to go ahead and just
one we're going to go ahead and just define a class of shoes
define a class of shoes and I'm going to go ahead and just save
and I'm going to go ahead and just save that so I see the colors
that so I see the colors and here we're going to Define our init
and here we're going to Define our init statement
statement and we're going to just say self
and we're going to just say self and then we're going to have a name
and then we're going to have a name our name of our shoe and the price of
our name of our shoe and the price of our shoes
our shoes and within this we're just going to
and within this we're just going to Define
Define self.name equals name this should all
self.name equals name this should all look familiar so far and self dot price
look familiar so far and self dot price is equal to price
is equal to price what we're going to do with the price
what we're going to do with the price because we'll run into an instance where
because we'll run into an instance where this is going to be taken potentially as
this is going to be taken potentially as a string we're going to go ahead and
a string we're going to go ahead and just give this a flow we want to make
just give this a flow we want to make sure that we are assuming this is going
sure that we are assuming this is going to be a float of a price here
to be a float of a price here let's go ahead and Define a few more
let's go ahead and Define a few more things so I want to define a budget
things so I want to define a budget check
check and I want to make sure that we have the
and I want to make sure that we have the budget here so what we're going to do in
budget here so what we're going to do in this instance is we're just going to say
this instance is we're just going to say self and then we'll also add in budget
self and then we'll also add in budget here
here and we'll come in here and we'll do a
and we'll come in here and we'll do a check first we want to make sure that we
check first we want to make sure that we are given an integer or a float here
are given an integer or a float here when we are asked for the budget so we
when we are asked for the budget so we can say something like if not
can say something like if not is instance and what this means is we're
is instance and what this means is we're saying if this type is not what we're
saying if this type is not what we're specifying here then we're going to go
specifying here then we're going to go ahead and reject this and close out of
ahead and reject this and close out of the application so the is instance looks
the application so the is instance looks for our type and returns a True Value
for our type and returns a True Value but if we say is not true then that's
but if we say is not true then that's false remember our truth tables and thus
false remember our truth tables and thus becomes invalid and closes the app so
becomes invalid and closes the app so what's going to happen is we're going to
what's going to happen is we're going to say budget
say budget and we're also going to look whether
and we're also going to look whether budget is going to be an INT or a float
budget is going to be an INT or a float and if it is not one of those two things
and if it is not one of those two things we're going to go ahead and print out
we're going to go ahead and print out invalid entry
invalid entry please enter a number something along
please enter a number something along those lines and then we'll exit the
those lines and then we'll exit the application
application so let's say that we have a budget and
so let's say that we have a budget and we want to also know how much money is
we want to also know how much money is left over if we buy the shoes so we can
left over if we buy the shoes so we can define something like change or what
define something like change or what change is left over and we could say
change is left over and we could say something like self Budget on this as
something like self Budget on this as well
well and we can just return
and we can just return our budget
our budget minus ourself dot price
minus ourself dot price so remember we declared self.price up
so remember we declared self.price up here now we're calling it we're just
here now we're calling it we're just saying Hey I want to return the value of
saying Hey I want to return the value of the budget that we have minus the cost
the budget that we have minus the cost of the item that we're purchasing
okay only a couple more things and we'll be done with our class here so we also
be done with our class here so we also need to purchase it right so let's
need to purchase it right so let's define buy and we're going to do self
define buy and we're going to do self budget again
and here we're going to do a self dot Budget Check
and what we'll say is if our budget is greater than or equal to self.price
is greater than or equal to self.price then we're going to print out
we'll do a F string here and we'll just say U and cop sum and then we'll do
say U and cop sum and then we'll do self.name
self.name so the name that we'll provide here this
so the name that we'll provide here this will all make sense once we tie it all
will all make sense once we tie it all together
together okay and then if our budget is equal to
okay and then if our budget is equal to the self.price then we're gonna just say
the self.price then we're gonna just say print out
print out you
you have exactly enough money for these
have exactly enough money for these shoes
shoes otherwise
we can do else now we could go through this whole thing and and give a
this whole thing and and give a statement and say well what if we had no
statement and say well what if we had no money or what if we didn't have enough
money or what if we didn't have enough money but in this instance we're just
money but in this instance we're just gonna print out the situation of
gonna print out the situation of you can
you can buy these shoes and have we have a
buy these shoes and have we have a dollar sign here
dollar sign here we'll say self
we'll say self dot change
dot change and we'll give a budget left over
and we'll give a budget left over so
left over just like this all right and then when we exit the
all right and then when we exit the application we can say something like
application we can say something like exit
exit and we'll just give a statement thanks
and we'll just give a statement thanks for using our shoe budget app
for using our shoe budget app now this might not make any sense yet
now this might not make any sense yet and that's okay let me make this a
and that's okay let me make this a little bit bigger
little bit bigger and so what we're doing here is we're
and so what we're doing here is we're defining our init and in our init we
defining our init and in our init we have a name which is going to be the
have a name which is going to be the name of the shoe
name of the shoe and price which give me the price of the
and price which give me the price of the shoe so self.name is equal to name
shoe so self.name is equal to name self.price is going to be a float
self.price is going to be a float because we're expecting
because we're expecting potentially it could be our price of our
potentially it could be our price of our shoe could be 2.99 or 100.99 it might
shoe could be 2.99 or 100.99 it might not just be a perfect number so we want
not just be a perfect number so we want to use a float
to use a float we have our budget check here we're just
we have our budget check here we're just checking the is instance we could in
checking the is instance we could in theory add to this budget check and make
theory add to this budget check and make sure we have enough funding before we
sure we have enough funding before we come down and do the purchase would
come down and do the purchase would probably be the logical way to do this
probably be the logical way to do this but in this instance we're just using
but in this instance we're just using really beginner logic and we're just
really beginner logic and we're just coming through and we're just saying hey
coming through and we're just saying hey if this instance isn't an integer or a
if this instance isn't an integer or a float like somebody types in a string
float like somebody types in a string then we're just going to go ahead and
then we're just going to go ahead and reject this we we don't want any we have
reject this we we don't want any we have no interest if this is no integer or
no interest if this is no integer or float here
float here then we're going to Define our change so
then we're going to Define our change so if we have uh money left over like if we
if we have uh money left over like if we have budget minus the price of the shoe
have budget minus the price of the shoe then we're going to go ahead and give
then we're going to go ahead and give some money back
some money back um and then we're gonna buy the shoe as
um and then we're gonna buy the shoe as well so we're gonna have our buy option
well so we're gonna have our buy option as long as our budget is greater than
as long as our budget is greater than the price of the shoe we can buy that
the price of the shoe we can buy that shoe
shoe and if the budget is equal to the price
and if the budget is equal to the price then we have enough money if it's not
then we have enough money if it's not then we'll actually have some money left
then we'll actually have some money left over here
over here um unless it's the instance of not
um unless it's the instance of not having enough money and then it'll just
having enough money and then it'll just exit the application because we haven't
exit the application because we haven't told it to do anything else and then
told it to do anything else and then it'll also thank us for using the shoe
it'll also thank us for using the shoe app so that's part one we have defined
app so that's part one we have defined the class now could we build this out
the class now could we build this out all in one thing yes we could just write
all in one thing yes we could just write a script out for this we could code this
a script out for this we could code this and make it into one easy script but
and make it into one easy script but what this will do is allow us
what this will do is allow us flexibility this is where object
flexibility this is where object oriented programming comes into play
oriented programming comes into play because we don't have to continue to
because we don't have to continue to repeat ourself and what we're following
repeat ourself and what we're following is what is called the dry approach the
is what is called the dry approach the don't repeat yourself approach and so
don't repeat yourself approach and so what we're doing is maintaining
what we're doing is maintaining everything in a class here and then
everything in a class here and then we'll call that class and make it very
we'll call that class and make it very easy on us instead of having one crazy
easy on us instead of having one crazy long script that is potentially
long script that is potentially repetitive and a lot more difficult to
repetitive and a lot more difficult to go through so here we're gonna just
go through so here we're gonna just open this up and I'm going to call out a
open this up and I'm going to call out a shebang I'm Ben python3 I'm Gonna Save
shebang I'm Ben python3 I'm Gonna Save this and I'm going to call this
this and I'm going to call this uh shoe purchase
uh shoe purchase dot pi
dot pi save that
save that now
now we're going to import from our class
we're going to import from our class that we made so from shoes import shoes
and let's define a few variables so let's say low is equal to
let's say low is equal to choose and for the low price shoes we're
choose and for the low price shoes we're just going to say we can buy some and
just going to say we can buy some and ones and we can buy those for 30 dollars
ones and we can buy those for 30 dollars uh for medium price shoes maybe we can
uh for medium price shoes maybe we can purchase some Air Force Ones
purchase some Air Force Ones and for those maybe they're a hundred
and for those maybe they're a hundred and twenty dollars
and twenty dollars and then for the high price shoes maybe
and then for the high price shoes maybe we're interested in purchasing
we're interested in purchasing some off-whites
and those might run us for a hundred dollars
dollars and from here what we're gonna do is
and from here what we're gonna do is we're going to do a try statement
we're going to do a try statement remember we've done a try statement
remember we've done a try statement before and we're going to say try
before and we're going to say try and we're going to say shoe budget
is equal to a float of an input we're going to ask for an
of an input we're going to ask for an input here so this is all tying together
input here so this is all tying together we'll say what is your shoe budget
we'll say what is your shoe budget do a question mark there
do a question mark there tie this together and then
tie this together and then we're going to do an exception so if we
we're going to do an exception so if we have a value error
have a value error meaning we don't get a number back
meaning we don't get a number back similar to what we were doing previously
similar to what we were doing previously if we don't get a number back here we're
if we don't get a number back here we're going to say please enter a number
now we can come in here and say
we can come in here and say for shoes in
for shoes in and then we can just give this high
and then we can just give this high medium low like this
medium low like this we can do a shoes dot by
we can do a shoes dot by and remember we came out with this by
and remember we came out with this by Method over in our class here so we're
Method over in our class here so we're doing a shoes dot by I'm gonna go and
doing a shoes dot by I'm gonna go and check all this for us and we're going to
check all this for us and we're going to say
say to budget
to budget so we're going to take the input of shoe
so we're going to take the input of shoe budget what's the value here we'll take
budget what's the value here we'll take that we'll come in here and we'll see
that we'll come in here and we'll see what our budget is if it is greater than
what our budget is if it is greater than or equal to the price of the shoe we're
or equal to the price of the shoe we're defining our name of the shoe and our
defining our name of the shoe and our price of the shoe from our parameters
price of the shoe from our parameters that we defined up here name and price
that we defined up here name and price so we're saying hey our the name and the
so we're saying hey our the name and the price so is the price of the shoe
price so is the price of the shoe is it at least the amount of our budget
is it at least the amount of our budget and if it is we can buy that and we'll
and if it is we can buy that and we'll check in the highest order and then go
check in the highest order and then go in the lowest order if you flip these
in the lowest order if you flip these and you put in 400 we just keep telling
and you put in 400 we just keep telling you that you can only buy the low price
you that you can only buy the low price shoe so you need to make sure it's in
shoe so you need to make sure it's in the highest to the lowest order in this
the highest to the lowest order in this this example and so it'll check do we
this example and so it'll check do we have enough money to buy the 400 pair of
have enough money to buy the 400 pair of shoes no okay and then do we have enough
shoes no okay and then do we have enough money to buy the 120 pair of shoes no do
money to buy the 120 pair of shoes no do we have enough money to buy the 30 pair
we have enough money to buy the 30 pair of shoes so we'll go through that and
of shoes so we'll go through that and iterate in this Loop to see what we can
iterate in this Loop to see what we can or can't buy so let's go ahead and save
or can't buy so let's go ahead and save this
this and we'll save shoes.pi and I'm going to
and we'll save shoes.pi and I'm going to go ahead and run this hopefully I have
go ahead and run this hopefully I have no typos I will do shoe budget
no typos I will do shoe budget shoe purchase sorry and run this and I
shoe purchase sorry and run this and I do have a typo and so if I come back in
do have a typo and so if I come back in here
here I forgot to close off my F string so let
I forgot to close off my F string so let me save that
me save that now let's try this
now let's try this what is our shoe budget let's give it a
what is our shoe budget let's give it a few different options if we said our
few different options if we said our shoe budget was thirty dollars exactly
shoe budget was thirty dollars exactly well it's going to say that we can cop
well it's going to say that we can cop some air some and ones sorry and we have
some air some and ones sorry and we have exactly enough money for these shoes
exactly enough money for these shoes thanks for using the shoe app uh what if
thanks for using the shoe app uh what if we had 31 dollars
we had 31 dollars well we could still cop some and ones
well we could still cop some and ones and then we can buy these shoes and have
and then we can buy these shoes and have one dollar left over all right what if
one dollar left over all right what if we had 450 dollars
we had 450 dollars well we can buy the off-whites and we
well we can buy the off-whites and we can buy those and have fifty dollars
can buy those and have fifty dollars left over for our budget
left over for our budget so hopefully this makes sense I know
so hopefully this makes sense I know this is a lot of information and this
this is a lot of information and this again is just a one-on-one course so
again is just a one-on-one course so we're just kind of
we're just kind of dabbling in the object oriented
dabbling in the object oriented programming and if you continue on with
programming and if you continue on with python from here and you start getting
python from here and you start getting into more complex material then you
into more complex material then you could build upon what you're learning
could build upon what you're learning here so
here so try to think of something that you might
try to think of something that you might want to script out like this or write
want to script out like this or write out like this and think of the logic
out like this and think of the logic behind it I highly recommend going and
behind it I highly recommend going and doing coding challenges or programming
doing coding challenges or programming challenges and try to increase the logic
challenges and try to increase the logic and the ideas behind what you're trying
and the ideas behind what you're trying to build and that just takes practice
to build and that just takes practice all this takes practice it's one thing
all this takes practice it's one thing to watch and follow along with somebody
to watch and follow along with somebody it's a whole nother game to go out and
it's a whole nother game to go out and do this yourself so start thinking of
do this yourself so start thinking of some things that you want to build
some things that you want to build really use your Google skills look at
really use your Google skills look at stack Overflow and look at some Googling
stack Overflow and look at some Googling and some redditing and just try to piece
and some redditing and just try to piece together the logic that you have in what
together the logic that you have in what you want to build so highly recommend
you want to build so highly recommend building upon this this is a great
building upon this this is a great language learn and very flexible and I
language learn and very flexible and I hope that you continue on with this
okay before we get hands on I have to give you a little bit of Death by
give you a little bit of Death by PowerPoint but it's for good reason
PowerPoint but it's for good reason so we need to introduce the five stages
so we need to introduce the five stages of ethical hacking these are the five
of ethical hacking these are the five stages that you will go through on every
stages that you will go through on every assessment
assessment so before we do that let's first make a
so before we do that let's first make a big note from here on we are moving into
big note from here on we are moving into the ethical hacking portion of our
the ethical hacking portion of our course we're going to learn malicious
course we're going to learn malicious things
things please only use the information learned
please only use the information learned in this course for ethical purposes do
in this course for ethical purposes do not attack your neighbors do not attack
not attack your neighbors do not attack anybody that you do not have explicit
anybody that you do not have explicit permission to do so
permission to do so you can and will get into trouble for
you can and will get into trouble for doing that so with that out of the way
doing that so with that out of the way let's talk briefly about the five stages
let's talk briefly about the five stages of ethical hacking
of ethical hacking so
so we start up at the top and we actually
we start up at the top and we actually start with what is called reconnaissance
start with what is called reconnaissance the stage is also known as information
the stage is also known as information gathering and there are two different
gathering and there are two different types there's active and passive now
types there's active and passive now passive is saying like going out to
passive is saying like going out to Google and searching for somebody say
Google and searching for somebody say you're giving a client and you want to
you're giving a client and you want to look at their Google you want to look at
look at their Google you want to look at LinkedIn you might be looking for I
LinkedIn you might be looking for I don't know a picture of their badge or
don't know a picture of their badge or an employee's name or maybe an
an employee's name or maybe an employee's Twitter page
employee's Twitter page that's all passive you're not actually
that's all passive you're not actually going out to the company's website and
going out to the company's website and doing anything active against it now
doing anything active against it now active reconnaissance kind of falls into
active reconnaissance kind of falls into place with the second phase which is
place with the second phase which is scanning an enumeration now that is
scanning an enumeration now that is active that is where we go out and we
active that is where we go out and we take tools such as nmap and nessus and
take tools such as nmap and nessus and nicto and you've never heard of any of
nicto and you've never heard of any of those that's fine but we take those and
those that's fine but we take those and we scan actively against a client now
we scan actively against a client now what we're looking for are open ports
what we're looking for are open ports vulnerabilities different items and with
vulnerabilities different items and with what Returns on these results when we do
what Returns on these results when we do this scanning we also perform what is
this scanning we also perform what is called enumeration enumeration is just
called enumeration enumeration is just looking at items and digging into them
looking at items and digging into them to see if we can find anything of value
to see if we can find anything of value say that there is a web server running
say that there is a web server running on Port 80 we see Port 80 is open and
on Port 80 we see Port 80 is open and it's running something like Apache 1.2
it's running something like Apache 1.2 which would be really really outdated we
which would be really really outdated we would go out to Google and we would say
would go out to Google and we would say Google do you know if Apache 1.2 2 has
Google do you know if Apache 1.2 2 has any X place for it and we would do
any X place for it and we would do research that's the enumeration portion
research that's the enumeration portion of it so once we do our information
of it so once we do our information gathering we do our scanning enumeration
gathering we do our scanning enumeration then we move into the gaining access
then we move into the gaining access portion
portion this is also known as exploitation we
this is also known as exploitation we will run an exploit against the client
will run an exploit against the client or against the vulnerable service or
or against the vulnerable service or whatever it may be to try to gain access
whatever it may be to try to gain access into a machine or into a network into an
into a machine or into a network into an environment Etc once we have that access
environment Etc once we have that access the process starts to repeat we do
the process starts to repeat we do scanning and enumeration again and we
scanning and enumeration again and we also want to maintain that access right
also want to maintain that access right so if we were to get kicked out okay or
so if we were to get kicked out okay or a user shuts down their computer how do
a user shuts down their computer how do we maintain that access so when they
we maintain that access so when they turn their computer back on we still
turn their computer back on we still have access to it and then lastly there
have access to it and then lastly there is the covering tracks you want to
is the covering tracks you want to delete any logs that you may leave
delete any logs that you may leave behind you want to delete any kind of
behind you want to delete any kind of malware that you upload which is more
malware that you upload which is more important as a pen tester any accounts
important as a pen tester any accounts that you create for any reason you want
that you create for any reason you want to delete those as well you really just
to delete those as well you really just want to clean up it's a good way of
want to clean up it's a good way of putting it covering tracks is the more
putting it covering tracks is the more hacker way of putting it but as a
hacker way of putting it but as a penetration tester you really just want
penetration tester you really just want to clean up so we're going to go heavily
to clean up so we're going to go heavily through steps one through three in this
through steps one through three in this course we'll also cover four and five
course we'll also cover four and five briefly but the process in methodology
briefly but the process in methodology never changes regardless if you're doing
never changes regardless if you're doing network if you're doing web app or if
network if you're doing web app or if you're doing a different type of
you're doing a different type of assessment it's all similar in this five
assessment it's all similar in this five stages of hacking the tools might change
stages of hacking the tools might change the attack methods might change but the
the attack methods might change but the overall methodology is always the same
overall methodology is always the same so that's how we're also going to
so that's how we're also going to structure this course we're going to go
structure this course we're going to go in first and we're going to talk about
in first and we're going to talk about information gathering and reconnaissance
information gathering and reconnaissance then we're going to move into scanning
then we're going to move into scanning enumeration and then we'll start with
enumeration and then we'll start with exploitation and do that repeatedly
exploitation and do that repeatedly until we get it inside of our heads and
until we get it inside of our heads and our it feels almost second nature right
our it feels almost second nature right once we have all that done we'll do some
once we have all that done we'll do some practice boxes you know give it a go see
practice boxes you know give it a go see how we do we'll move into the internal
how we do we'll move into the internal side of things with active directory
side of things with active directory we'll start working with our web
we'll start working with our web applications and our wireless and we
applications and our wireless and we will touch on the maintaining access and
will touch on the maintaining access and covering tracks but you're going to see
covering tracks but you're going to see this methodology over and over and you
this methodology over and over and you might also get this question on an
might also get this question on an interview you know to describe the five
interview you know to describe the five stages so it's important to know these
stages so it's important to know these it's just something that every ethical
it's just something that every ethical hacker can rattle off pretty quickly so
hacker can rattle off pretty quickly so have this written down think about it
have this written down think about it keep your wheels spinning and let's go
keep your wheels spinning and let's go ahead and move on to our first section
ahead and move on to our first section which is going to be information gather
which is going to be information gather ring slash reconnaissance so in some
ring slash reconnaissance so in some Cool Tools some Google Foo and just what
Cool Tools some Google Foo and just what kind of information we can actually
kind of information we can actually gather on a potential client
so in this section we are going to be talking about information gathering and
talking about information gathering and all the information gathering we're
all the information gathering we're going to do in this section is going to
going to do in this section is going to be passive so I'm calling this passive
be passive so I'm calling this passive Recon or passive reconnaissance I wanted
Recon or passive reconnaissance I wanted to give a brief overview of what we're
to give a brief overview of what we're going to be covering and talk about some
going to be covering and talk about some high level topics before we get into the
high level topics before we get into the weeds and really dive into our Target
weeds and really dive into our Target so let's talk about the different types
so let's talk about the different types of passive Recon so on the physical or
of passive Recon so on the physical or social sides physical meaning actually
social sides physical meaning actually going on site and maybe doing a physical
going on site and maybe doing a physical engagement or the social engineering
engagement or the social engineering aspect of maybe doing a phishing
aspect of maybe doing a phishing assessment or even including in a
assessment or even including in a physical engagement or a bishing
physical engagement or a bishing assessment just gathering this
assessment just gathering this information from the physical social
information from the physical social aspect is incredibly useful so we have
aspect is incredibly useful so we have location information so we might utilize
location information so we might utilize something like satellite images or often
something like satellite images or often will go on site and do drone
will go on site and do drone reconnaissance where we fly a drone
reconnaissance where we fly a drone around and try to gain information and
around and try to gain information and what we're really after with these
what we're really after with these images of this drone Recon is we're
images of this drone Recon is we're trying to find out hey what is the
trying to find out hey what is the building layout look like are there
building layout look like are there badge readers are there break areas does
badge readers are there break areas does security exist do they have somebody
security exist do they have somebody posted out up front can you just walk
posted out up front can you just walk right in the door what does their
right in the door what does their fencing look like are are there areas
fencing look like are are there areas where they're just leaving the doors
where they're just leaving the doors propped open where do people go out and
propped open where do people go out and smoke in these break areas because those
smoke in these break areas because those are good place to just walk up to
are good place to just walk up to somebody light up a cigarette even if
somebody light up a cigarette even if you don't smoke and to start a
you don't smoke and to start a conversation and then tailgate right in
conversation and then tailgate right in with them into the building now the
with them into the building now the other aspect of this is the job
other aspect of this is the job information so we might be looking for
information so we might be looking for employees online I might want to know
employees online I might want to know somebody's name job title phone number
somebody's name job title phone number who their manager is I try to get a good
who their manager is I try to get a good idea of what people look like so if I
idea of what people look like so if I see them on site I have a good idea who
see them on site I have a good idea who they are I also look for pictures so I
they are I also look for pictures so I cannot tell you how many times a badge
cannot tell you how many times a badge photo is posted on LinkedIn or somebody
photo is posted on LinkedIn or somebody posted on Twitter you can see all the
posted on Twitter you can see all the memes out there about people posting
memes out there about people posting their photos at work and it's bad it
their photos at work and it's bad it happens all the time I see it to this
happens all the time I see it to this day so we're looking for badge photos
day so we're looking for badge photos I'm looking for desk photos computer
I'm looking for desk photos computer photos I had a situation one where
photos I had a situation one where somebody took a picture of her watching
somebody took a picture of her watching a game at work she was watching a
a game at work she was watching a basketball game at work and the
basketball game at work and the basketball game was on her computer and
basketball game was on her computer and on her screen there it showed all the
on her screen there it showed all the different tools that they utilized at
different tools that they utilized at work she had a work application open in
work she had a work application open in this photo there was a desk in the
this photo there was a desk in the background you can see different things
background you can see different things and it just gives us information and
and it just gives us information and that's really what we're after what kind
that's really what we're after what kind of information can We Gather now this
of information can We Gather now this course is not a course on physical or
course is not a course on physical or social so I kind of wanted to give a
social so I kind of wanted to give a high level of what to expect we won't
high level of what to expect we won't really be doing a whole lot of this in
really be doing a whole lot of this in this course with this type of
this course with this type of information gathering but these are the
information gathering but these are the things that you should be looking for so
things that you should be looking for so if you are tasked with the physical
if you are tasked with the physical assessment do go out there and look for
assessment do go out there and look for satellite images try to get a good feel
satellite images try to get a good feel of the building layout and also try to
of the building layout and also try to get a feel for who the employees are who
get a feel for who the employees are who maybe the it manager is in case you're
maybe the it manager is in case you're going to say you know I work for it they
going to say you know I work for it they might ask you who your manager is you
might ask you who your manager is you might need to know those names and of
might need to know those names and of course look for pictures if you can find
course look for pictures if you can find a good badge photo and what that looks
a good badge photo and what that looks like you can make a fake Badge go on
like you can make a fake Badge go on site and you'll be way more passable
site and you'll be way more passable with that badge but sometimes they don't
with that badge but sometimes they don't even look it can be drawn in crayon so
even look it can be drawn in crayon so from there let's go ahead and talk about
from there let's go ahead and talk about what we will be doing a lot of which is
what we will be doing a lot of which is the web in host
the web in host so when you get a web or a host
so when you get a web or a host assessment the first thing you really
assessment the first thing you really should do is what is called Target
should do is what is called Target validation so we're going to be
validation so we're going to be targeting something on bug crowds we're
targeting something on bug crowds we're not really going to focus on this but
not really going to focus on this but what we're going to do in the real world
what we're going to do in the real world is we would validate the Target now
is we would validate the Target now there are situations where a client will
there are situations where a client will give you an IP address or a website and
give you an IP address or a website and they might they might fudge it right
they might they might fudge it right they might accidentally fat finger it
they might accidentally fat finger it put uh the wrong number put the wrong
put uh the wrong number put the wrong letter in the website and then guess
letter in the website and then guess what you're off attacking somebody
what you're off attacking somebody else's website and they're if you're a
else's website and they're if you're a podcast listener there's a good Dark Net
podcast listener there's a good Dark Net Diaries episode on this if you don't
Diaries episode on this if you don't listen to darknet Diaries go check it
listen to darknet Diaries go check it out there's a great episode with a guy
out there's a great episode with a guy named Rob Fuller AKA mubix and he talks
named Rob Fuller AKA mubix and he talks about getting the wrong
about getting the wrong IP address on an assessment and
IP address on an assessment and attacking the wrong people and actually
attacking the wrong people and actually gaining access to that machine which is
gaining access to that machine which is a really really big big screw up on both
a really really big big screw up on both parts right so you should always
parts right so you should always validate your targets on top of this
validate your targets on top of this when we're doing our web and our host on
when we're doing our web and our host on the website we're going to look for
the website we're going to look for subdomains and we'll talk more about
subdomains and we'll talk more about that as we get into it but we can do
that as we get into it but we can do that with Google we can do that with
that with Google we can do that with nmap sublister there's so many different
nmap sublister there's so many different tools that we can use and we'll cover
tools that we can use and we'll cover some of the tools and how to do it get a
some of the tools and how to do it get a little deep into that as well especially
little deep into that as well especially as we get into the website of things
as we get into the website of things there's fingerprinting we need to know
there's fingerprinting we need to know what's running on a website or what's
what's running on a website or what's running on a host what kind of services
running on a host what kind of services are out there are they running a web
are out there are they running a web server what's that web server is it IAS
server what's that web server is it IAS is it Apache what version is it right
is it Apache what version is it right are they running what ports are open on
are they running what ports are open on their machines oh they have FTP open
their machines oh they have FTP open what version of FTP is open so we need
what version of FTP is open so we need to fingerprint machines and kind of
to fingerprint machines and kind of understand but on the passive side we're
understand but on the passive side we're not touching any machine right so we're
not touching any machine right so we're not going to be doing much scanning
not going to be doing much scanning against a host we just have to utilize
against a host we just have to utilize what kind of information might already
what kind of information might already be out there so if we go out to a
be out there so if we go out to a website it's on the border of active but
website it's on the border of active but as long as we're not scanning it in my
as long as we're not scanning it in my book it's still passive so we'll do we
book it's still passive so we'll do we will cover some of the passive slash
will cover some of the passive slash active side in this section and then
active side in this section and then when we get into scanning we'll get way
when we get into scanning we'll get way more active with it
more active with it lastly we're going to hit heavy
lastly we're going to hit heavy especially in the beginning on data
especially in the beginning on data breaches data breaches are the most
breaches data breaches are the most common way when we're doing an external
common way when we're doing an external assessment that we get into networks
assessment that we get into networks absolutely by far when we talk about
absolutely by far when we talk about data breaches we're talking about
data breaches we're talking about breached incidents from the past that
breached incidents from the past that have leaked data again these are like
have leaked data again these are like Home Depot Equifax LinkedIn all kinds of
Home Depot Equifax LinkedIn all kinds of breaches that are out there that have
breaches that are out there that have had credentials dumped and then those
had credentials dumped and then those credentials become available to us
credentials become available to us eventually and we try to utilize those
eventually and we try to utilize those to gain access or at least utilize the
to gain access or at least utilize the usernames to gain access nowadays most
usernames to gain access nowadays most the time there's not going to be an easy
the time there's not going to be an easy just scan find something vulnerable and
just scan find something vulnerable and exploit it on the external side of the
exploit it on the external side of the house so we're looking for these data
house so we're looking for these data breaches and this information that we
breaches and this information that we can gather and this is why information
can gather and this is why information gathering and then enumeration and
gathering and then enumeration and scanning most important by far the
scanning most important by far the better scanning enumeration that you can
better scanning enumeration that you can do and the better information gather you
do and the better information gather you can do the better hacker you're going to
can do the better hacker you're going to be and the better you're going to be at
be and the better you're going to be at your job so take these first two
your job so take these first two sections really serious so we're gonna
sections really serious so we're gonna start in with identifying what our
start in with identifying what our Target's going to be for this part of
Target's going to be for this part of the section and then we're going to go
the section and then we're going to go ahead and start talking about data
ahead and start talking about data breaches and why they're important and
breaches and why they're important and go deeper into that and then we'll go
go deeper into that and then we'll go off some of these tools that you see
off some of these tools that you see here on this list and really dive into
here on this list and really dive into those so I will look forward to seeing
those so I will look forward to seeing you in the next video when we identify
you in the next video when we identify our Target and get some information
our Target and get some information gathering started
all right before we begin doing our reconnaissance we have to
doing our reconnaissance we have to establish a client to attack so for this
establish a client to attack so for this course we're going to be utilizing a
course we're going to be utilizing a client out of bug crowd if you've never
client out of bug crowd if you've never heard of bug crowd bug crowd is a public
heard of bug crowd bug crowd is a public bug Bounty program what that means is
bug Bounty program what that means is there are programs on the website that
there are programs on the website that will allow you to attack them and if you
will allow you to attack them and if you find a bug against the program you're
find a bug against the program you're able to submit it and potentially get
able to submit it and potentially get money for it so you are able to hack
money for it so you are able to hack these programs publicly as they are part
these programs publicly as they are part of this program now the program we're
of this program now the program we're going to be attacking is Tesla so Tesla
going to be attacking is Tesla so Tesla is part of bug crowd now please do note
is part of bug crowd now please do note please double check when you're watching
please double check when you're watching this course as some time may have passed
this course as some time may have passed Tesla might no longer be part of this
Tesla might no longer be part of this bug Bounty program so it's very critical
bug Bounty program so it's very critical to make sure that you are still within
to make sure that you are still within scope before you attack if for some
scope before you attack if for some reason Tesla is no longer in scope just
reason Tesla is no longer in scope just go ahead and pick a new client and do
go ahead and pick a new client and do information gathering on them you don't
information gathering on them you don't have to pick Tesla when we're doing this
have to pick Tesla when we're doing this you can just do it to follow along with
you can just do it to follow along with me but you're also welcome to pick any
me but you're also welcome to pick any program you want so if you go to
program you want so if you go to bugcrowd.com and we go to programs
bugcrowd.com and we go to programs I will show you where Tesla exists now
I will show you where Tesla exists now you can see here that they have all
you can see here that they have all different types of programs in here and
different types of programs in here and if I were to scroll down and
if I were to scroll down and continuously I could find more and more
continuously I could find more and more and more there are hundreds of programs
and more there are hundreds of programs involved all kinds of names digital
involved all kinds of names digital ocean OCTA really big names Pinterest
ocean OCTA really big names Pinterest altacian
altacian anything that you can imagine probably
anything that you can imagine probably has a bug program if it's a reputable
has a bug program if it's a reputable okay any of the big names most likely
okay any of the big names most likely have a bug program especially if they're
have a bug program especially if they're reputable so here you could see what's
reputable so here you could see what's based on reward what's based on charity
based on reward what's based on charity and what's based on points only that's
and what's based on points only that's how the bug bounties are rewarded some
how the bug bounties are rewarded some of them are not all cash some of them
of them are not all cash some of them are just for points and for Kudos and
are just for points and for Kudos and the other ones are for charity I'm going
the other ones are for charity I'm going to go ahead and just search Tesla and
to go ahead and just search Tesla and when I do that you can see here that
when I do that you can see here that Tesla comes up
Tesla comes up now this is your first lesson into Rules
now this is your first lesson into Rules of Engagement and we're going to talk
of Engagement and we're going to talk about Rules of Engagement later but it's
about Rules of Engagement later but it's super important to read the program
super important to read the program details that you see here and what we
details that you see here and what we really need to do is we need to scroll
really need to do is we need to scroll through and make sure that we stay in
through and make sure that we stay in Scope when we're doing this so we have a
Scope when we're doing this so we have a wild card here so this means that any
wild card here so this means that any subdomain inside of tesla.com is fair
subdomain inside of tesla.com is fair game tesla.cn Tesla Motors Etc what is
game tesla.cn Tesla Motors Etc what is more important is that we stay within
more important is that we stay within this out of scope so we don't want to
this out of scope so we don't want to attack
attack shop.eu.testalmotors.com or energy
shop.eu.testalmotors.com or energy support.tesla.com it says you can report
support.tesla.com it says you can report vulnerabilities to bug Bounty for this
vulnerabilities to bug Bounty for this one any domains from Acquisitions such
one any domains from Acquisitions such as Maxwell so we have to stay within
as Maxwell so we have to stay within Tesla and there's a few more sites we're
Tesla and there's a few more sites we're not going to worry too much about that
not going to worry too much about that when we get into the web app portion of
when we get into the web app portion of the course we're going to talk about way
the course we're going to talk about way more detail on the numerating web
more detail on the numerating web applications and go into that so for now
applications and go into that so for now what we're going to do is we're just
what we're going to do is we're just going to focus on information gathering
going to focus on information gathering what kind of information can We Gather
what kind of information can We Gather from this client so again I'm setting my
from this client so again I'm setting my target to Tesla if you pick another
target to Tesla if you pick another Tesla or another client just make sure
Tesla or another client just make sure you stay in scope of that client so from
you stay in scope of that client so from here we're going to move on to our first
here we're going to move on to our first video and get our information gathering
video and get our information gathering started
welcome to the email ocean section we're going to talk about discovering
we're going to talk about discovering email addresses and this is something
email addresses and this is something that I do on a weekly basis so I'm going
that I do on a weekly basis so I'm going to show you the most common tools that I
to show you the most common tools that I use to actually look up email addresses
use to actually look up email addresses and try to find people and what you can
and try to find people and what you can do to kind of verify email addresses so
do to kind of verify email addresses so I'll show you some of my favorite tools
I'll show you some of my favorite tools and Concepts and this is something that
and Concepts and this is something that I do because not only for oh sent and
I do because not only for oh sent and doing it for investigative type work but
doing it for investigative type work but think about sales if I'm trying to find
think about sales if I'm trying to find a lead or I'm trying to find multiple
a lead or I'm trying to find multiple leads within an organization I have to
leads within an organization I have to figure out where the emails are who the
figure out where the emails are who the people I'm trying to email are so maybe
people I'm trying to email are so maybe I'll Google them and say who is the CSO
I'll Google them and say who is the CSO or chief information security officer
or chief information security officer for this company and I might find that
for this company and I might find that it's Bob Jones and we go look up Bob
it's Bob Jones and we go look up Bob Jones and we say okay well how do I get
Jones and we say okay well how do I get Bob Jones's contact information can I
Bob Jones's contact information can I find it via Google maybe maybe it's out
find it via Google maybe maybe it's out there in the public but maybe we have to
there in the public but maybe we have to dig a Little Deeper maybe we have to
dig a Little Deeper maybe we have to kind of do some guesstimation and see if
kind of do some guesstimation and see if we can figure it out so that's what
we can figure it out so that's what we're going to do today is is look at
we're going to do today is is look at the email addresses formats and try to
the email addresses formats and try to determine if we can find some emails so
determine if we can find some emails so let's go ahead and move over to the Kali
let's go ahead and move over to the Kali Linux machine that I've got
Linux machine that I've got and the first website is one of my
and the first website is one of my favorites so hunter.io you just come to
favorites so hunter.io you just come to hunter.io you get like 50 or 100 free
hunter.io you get like 50 or 100 free searches a month I don't remember what
searches a month I don't remember what it is it's it's a fair amount uh you can
it is it's it's a fair amount uh you can come here and basically just type in a
come here and basically just type in a company name so like say I want to type
company name so like say I want to type in TCM security
in TCM security tcm-sec and you can see TCM security
tcm-sec and you can see TCM security here we get one result on the email
here we get one result on the email address so we'll click it and see what
address so we'll click it and see what happens here
happens here uh and looks like we have like an info
uh and looks like we have like an info at
at tcm-asect.com it tells us hey there's
tcm-asect.com it tells us hey there's five sources that identify this so we
five sources that identify this so we see
see tcm-sec.com there's an about blog so
tcm-sec.com there's an about blog so this is where they're finding it okay
this is where they're finding it okay um a better example maybe a something
um a better example maybe a something that has more users like Tesla Tesla has
that has more users like Tesla Tesla has 468 users if we come in here and we look
468 users if we come in here and we look well we can see that they have a pattern
well we can see that they have a pattern identified here so their pattern they're
identified here so their pattern they're identifying is first initial
identifying is first initial last name at tesla.com and that's really
last name at tesla.com and that's really what we want to see and then we can
what we want to see and then we can gather email addresses here if we want
gather email addresses here if we want but say like we knew Bob Jones again
but say like we knew Bob Jones again going back to that example Bob Jones so
going back to that example Bob Jones so maybe Bob Jones works at Tesla maybe his
maybe Bob Jones works at Tesla maybe his email would be B Jones at tesla.com so
email would be B Jones at tesla.com so it's something to think about now we can
it's something to think about now we can sign up and get actual information here
sign up and get actual information here you should be able to sign up with a
you should be able to sign up with a Gmail account sometimes this does not
Gmail account sometimes this does not work depending on the country that you
work depending on the country that you are in so be cognizant you might have to
are in so be cognizant you might have to use a different email address but I just
use a different email address but I just tried signing up with a Gmail account
tried signing up with a Gmail account that I have on here and it worked just
that I have on here and it worked just fine so I'm going to go ahead and try to
fine so I'm going to go ahead and try to log in I'm going to sign in with Google
log in I'm going to sign in with Google with what's already here and just now
with what's already here and just now I'm logged in so we can go back now and
I'm logged in so we can go back now and try searching Tesla again
try searching Tesla again and you'll see that the results actually
and you'll see that the results actually come back
come back so we get information here now we get
so we get information here now we get let me make this a little bit bigger we
let me make this a little bit bigger we get information as to okay here's the
get information as to okay here's the vice president this is the vice
vice president this is the vice president's email address uh project
president's email address uh project development manager maybe you want to
development manager maybe you want to talk to somebody in Human Resources so
talk to somebody in Human Resources so you can click here and go to human
you can click here and go to human resources and then here are the
resources and then here are the different Human Resources
different Human Resources emails that are here so and then the
emails that are here so and then the sources that they found these email
sources that they found these email addresses so this isn't a particular
addresses so this isn't a particular person in HR but it's still Human
person in HR but it's still Human Resources email addresses so this looks
Resources email addresses so this looks like it's probably for Hong Kong this is
like it's probably for Hong Kong this is for Berlin this is gigafactory so they
for Berlin this is gigafactory so they have different email addresses based on
have different email addresses based on where they are now if you looked up TCM
where they are now if you looked up TCM security here you're really not going to
security here you're really not going to find much on us because we don't have a
find much on us because we don't have a ton of email addresses out there but I
ton of email addresses out there but I think that we can find more in other
think that we can find more in other ways now so we only get so many uses
ways now so we only get so many uses here we'll just keep thinking about this
here we'll just keep thinking about this as we move forward so 100.io great great
as we move forward so 100.io great great resource they have plugins if you want
resource they have plugins if you want them I I think it's fantastic place to
them I I think it's fantastic place to look
look phonebook.cz is the next resource I want
phonebook.cz is the next resource I want to show you this one is fantastic let's
to show you this one is fantastic let's start with
start with tcm-sec.com and see so we're gonna go
tcm-sec.com and see so we're gonna go tcm-sec.com and we're going to search
tcm-sec.com and we're going to search email addresses here so they do domains
email addresses here so they do domains and URLs as well which I think is
and URLs as well which I think is awesome but let's just search for email
awesome but let's just search for email address see if anything comes back no no
address see if anything comes back no no results okay that's okay let's try Tesla
and see what comes back there okay a lot more
okay a lot more so we get uh quite a few email addresses
so we get uh quite a few email addresses we could see Elon Musk all over the
we could see Elon Musk all over the place we've got Elon Dash musk Elon
place we've got Elon Dash musk Elon we've got emusks over here and we get a
we've got emusks over here and we get a ton of emails look at this so what's
ton of emails look at this so what's nice about this is we can sit here and
nice about this is we can sit here and try to identify what the possible email
try to identify what the possible email addresses are so again first initial
addresses are so again first initial last name looks like it's showing up
last name looks like it's showing up quite a bit outside of maybe like the
quite a bit outside of maybe like the Elon musks of the world we're getting a
Elon musks of the world we're getting a bunch of uh mostly first initial last
bunch of uh mostly first initial last names in here so I think that's pretty
names in here so I think that's pretty spot on with this uh the other thing
spot on with this uh the other thing that we can do is we could utilize this
that we can do is we could utilize this list say we're we're trying to do
list say we're we're trying to do something called credential stuffing
something called credential stuffing which we'll talk about in the next
which we'll talk about in the next section actually when we talk about
section actually when we talk about breach credentials uh but say we're
breach credentials uh but say we're trying to gather a bunch of usernames
trying to gather a bunch of usernames and test and see if we can log in with
and test and see if we can log in with those usernames anywhere or maybe
those usernames anywhere or maybe password spraying not so much uh the
password spraying not so much uh the credential stuffing but password
credential stuffing but password spraying where we take all these
spraying where we take all these usernames and we just throw it at a
usernames and we just throw it at a login form and say Hey Summer 2020
login form and say Hey Summer 2020 exclamation point you know see if that
exclamation point you know see if that logs into any of these accounts and you
logs into any of these accounts and you would be surprised it happens quite a
would be surprised it happens quite a bit so you know these are this is
bit so you know these are this is valuable information even if we don't
valuable information even if we don't know exactly maybe we're not just
know exactly maybe we're not just hunting for one email maybe we're
hunting for one email maybe we're hunting for an entire domain this is a
hunting for an entire domain this is a great way to get free entire domains
great way to get free entire domains with a quick copy and paste capability
with a quick copy and paste capability like we have the Tesla here we can
like we have the Tesla here we can export the CSV from hunter.io but you
export the CSV from hunter.io but you only get so many results that you can
only get so many results that you can export into a CSV here you get a bunch
export into a CSV here you get a bunch there's no guarantee these are all valid
there's no guarantee these are all valid but they're still it's still information
but they're still it's still information information is what we want this is all
information is what we want this is all we're trying to gather is as much
we're trying to gather is as much information as possible so these are all
information as possible so these are all potential email addresses for tesla.com
potential email addresses for tesla.com I think it's a great great resource
I think it's a great great resource now we could also use something like uh
now we could also use something like uh voila no bear now this one you can get
voila no bear now this one you can get 50 more leads for free I'm not going to
50 more leads for free I'm not going to show you it's the same kind of deal as
show you it's the same kind of deal as 100.io they're showing you how to
100.io they're showing you how to utilize it here basically you can just
utilize it here basically you can just search for people and see to try to find
search for people and see to try to find their email addresses there is one I
their email addresses there is one I want to show you that I do use and I
want to show you that I do use and I have quite a bit of success with and
have quite a bit of success with and that is called clearbit and clearbit has
that is called clearbit and clearbit has to be used in Chrome
to be used in Chrome so I'm going to bring up this here
so I'm going to bring up this here clearbit has to be used in Chrome so you
clearbit has to be used in Chrome so you can download the Chrome extension for
can download the Chrome extension for Clear bit
Clear bit and all you have to do is go to Google
and all you have to do is go to Google let me log in really quick
let me log in really quick and then I'm going to just select the
and then I'm going to just select the free account we get so many searches 100
free account we get so many searches 100 emails a month so basically you're going
emails a month so basically you're going to search for clearbit connect and you
to search for clearbit connect and you would just say hey clearbit connect I'll
would just say hey clearbit connect I'll put a link down below by the way but
put a link down below by the way but clearbit connect is awesome you'll
clearbit connect is awesome you'll you'll see why here in a second once I
you'll see why here in a second once I authorize this
authorize this okay we're gonna come down here
okay we're gonna come down here acknowledge probably give out our
acknowledge probably give out our firstborn and then now we're going to
firstborn and then now we're going to say hey I want to find emails
say hey I want to find emails and here's all different kinds of things
and here's all different kinds of things that we can sit here and search for you
that we can sit here and search for you can see TCM Securities in here these are
can see TCM Securities in here these are some searches that I've done these
some searches that I've done these aren't any clients of mine these are
aren't any clients of mine these are just searches that I've done in the past
just searches that I've done in the past maybe looking for information or looking
maybe looking for information or looking for possible leads or anything so if I
for possible leads or anything so if I come in here and I say hey I want to
come in here and I say hey I want to look for TCM security you could type
look for TCM security you could type that in I'm going to just click on TCM
that in I'm going to just click on TCM security
security and look what it discovered that the
and look what it discovered that the others didn't
others didn't it discovered me
it discovered me okay and if I click on me
okay and if I click on me look it says heat that tcm-sec.com
look it says heat that tcm-sec.com where where did that come from and then
where where did that come from and then look it has my LinkedIn right here as
look it has my LinkedIn right here as well that's amazing that's awesome and
well that's amazing that's awesome and it says here you can email hate just
it says here you can email hate just click this button and then it's also got
click this button and then it's also got rizwan rizwon's on my sales team look
rizwan rizwon's on my sales team look it's got Riz one at tcm-sec.com what
it's got Riz one at tcm-sec.com what does that tell you that tells you that
does that tell you that tells you that we're using a first name basis for our
we're using a first name basis for our email addresses it's awesome now let's
email addresses it's awesome now let's come in here and maybe we want to look
come in here and maybe we want to look at Tesla maybe let's try Tesla one more
at Tesla maybe let's try Tesla one more time maybe we're looking for the CSO of
time maybe we're looking for the CSO of Tesla Tesla has a CSO you could come in
Tesla Tesla has a CSO you could come in here and look like Elon Musk is right
here and look like Elon Musk is right here obviously CEO but you could come in
here obviously CEO but you could come in here and maybe go by roll and they have
here and maybe go by roll and they have different roles in here so CEO let's see
different roles in here so CEO let's see if we can find any sort of CSO uh I
if we can find any sort of CSO uh I don't see one but I do see information
don't see one but I do see information technology so maybe we can find somebody
technology so maybe we can find somebody the information technology department or
the information technology department or it Department
it Department um and then here we go we've got quite a
um and then here we go we've got quite a few I.T people here's a CIO this could
few I.T people here's a CIO this could be somebody of interest that we might
be somebody of interest that we might want to reach out to and we could just
want to reach out to and we could just scroll through this list and find people
scroll through this list and find people so say we want to reach out to the CIO
so say we want to reach out to the CIO just click on this we get first initial
just click on this we get first initial last name just like we thought we would
last name just like we thought we would we get this person's LinkedIn page we
we get this person's LinkedIn page we get their location website this is
get their location website this is awesome awesome awesome so I typically
awesome awesome awesome so I typically will start with a Google search if I'm
will start with a Google search if I'm trying to hunt something down I will
trying to hunt something down I will start with a Google search I will say
start with a Google search I will say who is in this role at this company if
who is in this role at this company if I'm looking for a specific person at a
I'm looking for a specific person at a company then I will go to phonebook.cz
company then I will go to phonebook.cz or hunter.io try to identify the the
or hunter.io try to identify the the formatting of the email and then try to
formatting of the email and then try to find that person or guesstimate that
find that person or guesstimate that once we get to that point I try not to
once we get to that point I try not to burn through these clear bits unless I
burn through these clear bits unless I need to but clearbit is very good at
need to but clearbit is very good at identifying this once we get to that
identifying this once we get to that point we can take this email say like
point we can take this email say like this um this email or we'll even try a
this um this email or we'll even try a different email I'll show you a couple
different email I'll show you a couple but we could take this and we can go try
but we could take this and we can go try to verify this so there is a website
to verify this so there is a website called email hippo you can go to
called email hippo you can go to tools.verifyemailaddress.io and all you
tools.verifyemailaddress.io and all you have to do is type in an email address
have to do is type in an email address here sometimes you can get false
here sometimes you can get false positives if they're good or bad here I
positives if they're good or bad here I typed in this email address a couple
typed in this email address a couple times and just got a bad result this is
times and just got a bad result this is an email address that does not exist now
an email address that does not exist now let's try an email address that we saw
let's try an email address that we saw info
info tcm-sec.com see if it works
result is okay so it says yeah this email address works so we're verifying
email address works so we're verifying that this is up so say that you get
that this is up so say that you get somebody and you see that they have a
somebody and you see that they have a potential email address you can come
potential email address you can come here and try to verify it first and see
here and try to verify it first and see if it works before you go fire off an
if it works before you go fire off an email uh or don't you don't have to fire
email uh or don't you don't have to fire off an email you don't have to do
off an email you don't have to do anything or interact so this is the
anything or interact so this is the benefit like if you're from a sales
benefit like if you're from a sales perspective and you're doing osin here
perspective and you're doing osin here the this is the benefit not having to
the this is the benefit not having to email get waste your time get it
email get waste your time get it rejected you can come in here and just
rejected you can come in here and just validate if you're doing an
validate if you're doing an investigation you don't want to interact
investigation you don't want to interact with the person or company that you're
with the person or company that you're investigating you want to come in here
investigating you want to come in here and just verify without any interaction
and just verify without any interaction this is the way to do it same thing with
this is the way to do it same thing with this website here email
this website here email checker.net validate email Dash
checker.net validate email Dash checker.net validate say hey checking
checker.net validate say hey checking the email I put the same email address
the email I put the same email address here you can see it says bad we could
here you can see it says bad we could try again with info at
try again with info at tcm-sec.com and see if that works and it
tcm-sec.com and see if that works and it says okay
says okay so again this is doing a a great job
so again this is doing a a great job there are possibilities of false
there are possibilities of false positives there are so many searches
positives there are so many searches that you can do per month on these I do
that you can do per month on these I do believe they have apis which is nice if
believe they have apis which is nice if you want to automate this or script this
you want to automate this or script this out but I think this is this is
out but I think this is this is fantastic this is great stuff now there
fantastic this is great stuff now there are plenty of other ways to verify email
are plenty of other ways to verify email addresses in the next section we'll talk
addresses in the next section we'll talk about that even more as we talk about
about that even more as we talk about breach data because if somebody shows up
breach data because if somebody shows up in a data breach guess we'll have that
in a data breach guess we'll have that email address has been used in the past
email address has been used in the past if you look at something like I have
if you look at something like I have I've been pwn which I'll talk about in
I've been pwn which I'll talk about in the next section and they show up guess
the next section and they show up guess what that person's email address has
what that person's email address has existed so we're trying to verify if an
existed so we're trying to verify if an email address exists who that address
email address exists who that address might belong to Etc now this is more has
might belong to Etc now this is more has been from a business perspective some of
been from a business perspective some of this hunting down of emails may be more
this hunting down of emails may be more difficult to do if you're trying to find
difficult to do if you're trying to find a specific individual that's where
a specific individual that's where breach data comes into play and a lot to
breach data comes into play and a lot to This research and what I'm going to show
This research and what I'm going to show you in the next section we'll try to
you in the next section we'll try to hunt down individuals with maybe having
hunt down individuals with maybe having loose pieces of information like a name
loose pieces of information like a name or a username or something along those
or a username or something along those lines breach data can come in handy very
lines breach data can come in handy very very well so this is kind of scratching
very well so this is kind of scratching the surface now there's one last thing I
the surface now there's one last thing I want to show you one last little tip and
want to show you one last little tip and trick do not underestimate forgot
trick do not underestimate forgot passwords do not underestimate them
passwords do not underestimate them let's go to Google for example
let's go to Google for example right now I am logging in under an
right now I am logging in under an account that is please don't hack me sir
account that is please don't hack me sir please so it's please don't hack me sir
please so it's please don't hack me sir plz I do believe I'm gonna go ahead and
plz I do believe I'm gonna go ahead and try hitting next on that
try hitting next on that okay so first of all it said hey welcome
okay so first of all it said hey welcome hey what does this mean this means that
hey what does this mean this means that we have a valid account here that's
we have a valid account here that's great this is validating that this Gmail
great this is validating that this Gmail account exists
account exists here's something else we can use this to
here's something else we can use this to tie to potentially another account or
tie to potentially another account or help validate say we know that this
help validate say we know that this email belongs to somebody that's
email belongs to somebody that's harassing somebody else we don't know
harassing somebody else we don't know who this person is they're using this
who this person is they're using this spoofed email but maybe we have a
spoofed email but maybe we have a hundred maybe we don't maybe we just
hundred maybe we don't maybe we just want to try to get more data you can
want to try to get more data you can come to forgot password
come to forgot password and it's going to say what's the last
and it's going to say what's the last password remember using I don't know
password remember using I don't know let's try another way you come down here
let's try another way you come down here and it says hey let me make this bigger
and it says hey let me make this bigger Google will send a verification code to
Google will send a verification code to H
H and it says look it shows you the rest
and it says look it shows you the rest of the the digits here and then at TC
of the the digits here and then at TC here that would give you a pretty good
here that would give you a pretty good indication if you're tracking who your
indication if you're tracking who your subject is that this email could tie to
subject is that this email could tie to somebody else look this is heat
somebody else look this is heat tcm-sec.com
tcm-sec.com okay so this email belongs to me this is
okay so this email belongs to me this is tying back to me now you have another
tying back to me now you have another Point here so if you knew about this
Point here so if you knew about this email address and now you have the link
email address and now you have the link the connection to guarantee that this
the connection to guarantee that this person this is evidence right here say
person this is evidence right here say you were doing something which we'll
you were doing something which we'll learn about again in the next section
learn about again in the next section where you're looking through breach data
where you're looking through breach data you find a username that matches this
you find a username that matches this email address and also matches this
email address and also matches this email address but people can reuse
email address but people can reuse usernames there could be multiple people
usernames there could be multiple people who use the same username so you need to
who use the same username so you need to verify or some link this would be a
verify or some link this would be a proof of a link between those a pretty
proof of a link between those a pretty strong proof if you ask me if you can
strong proof if you ask me if you can say hey I identified two email addresses
say hey I identified two email addresses with the same username I did an account
with the same username I did an account recovery came in here and saw that this
recovery came in here and saw that this had this same first character and first
had this same first character and first domain name I think that's a pretty
domain name I think that's a pretty strong correlation so things to think
strong correlation so things to think about Wheels to be spinning try to
about Wheels to be spinning try to identify email addresses in any way
identify email addresses in any way possible we'll cover this more in depth
possible we'll cover this more in depth in the next section and I'm really
in the next section and I'm really excited because password hunting is one
excited because password hunting is one of my favorite things so let's go ahead
of my favorite things so let's go ahead and move on to the next section when we
and move on to the next section when we talk about password osin
okay so I would like you to go out to github.com
github.com and then once you're there go ahead and
and then once you're there go ahead and just do a forward slash H Maverick Adams
just do a forward slash H Maverick Adams h m a v e r i c k Adams and hit enter
h m a v e r i c k Adams and hit enter and you can see me and my snazzy photo
and you can see me and my snazzy photo here but what we're after is I want to
here but what we're after is I want to show you a tool that I wrote called
show you a tool that I wrote called breach parse and we're going to walk
breach parse and we're going to walk through what it does now go ahead and
through what it does now go ahead and click on breach parts
click on breach parts and you're going to see a bash script
and you're going to see a bash script here and a little bit of a description
here and a little bit of a description so you do not need to download this let
so you do not need to download this let me preface with what we're doing here
me preface with what we're doing here this magnet link you're going to need
this magnet link you're going to need one a torrent some sort of uTorrent or
one a torrent some sort of uTorrent or BitTorrent and you'll need to download
BitTorrent and you'll need to download this and it's also something along the
this and it's also something along the lines of 44 gigabytes extracted it's a
lines of 44 gigabytes extracted it's a huge file so you don't have to do this
huge file so you don't have to do this you can just watch and follow along you
you can just watch and follow along you are more than welcome to install this on
are more than welcome to install this on your machine I'm going to show you what
your machine I'm going to show you what it looks like so I'm going to go out to
it looks like so I'm going to go out to my applications and my files here
my applications and my files here and then I have put this into my opt
and then I have put this into my opt folder so if you come into opt here and
folder so if you come into opt here and I've got breach parse
I've got breach parse if you come into this breach compilation
if you come into this breach compilation folder which is what we'll download
folder which is what we'll download you're going to see that we have data
you're going to see that we have data here okay so this data has a bunch of
here okay so this data has a bunch of different data it's got emails starting
different data it's got emails starting with zero one two three four all these
with zero one two three four all these different ones what's living inside of
different ones what's living inside of this
this is if we can display it
is if we can display it is emails and passwords now you see
is emails and passwords now you see these ones have weird symbols inside the
these ones have weird symbols inside the emails but there's a bunch of emails and
emails but there's a bunch of emails and passwords in here like somebody at
passwords in here like somebody at yahoo.com and their password is one two
yahoo.com and their password is one two three four five six
three four five six well these passwords are coming from
well these passwords are coming from credential dumps so we talked about it
credential dumps so we talked about it earlier about thinking about the you
earlier about thinking about the you know Equifax or the LinkedIn breach or
know Equifax or the LinkedIn breach or Home Depot all these big breaches that
Home Depot all these big breaches that happen
happen credentials get dumped out and guess
credentials get dumped out and guess what they show up on the dark web and
what they show up on the dark web and eventually they show up in these lists
eventually they show up in these lists so we utilize these lists and we've got
so we utilize these lists and we've got you click into this just hundreds of
you click into this just hundreds of files here and again 44 gigabytes so
files here and again 44 gigabytes so what I did was I built a little tool
what I did was I built a little tool that can search through this data and
that can search through this data and pull down names so we can take a quick
pull down names so we can take a quick look at the tool and what it does but
look at the tool and what it does but basically what it does is you just put
basically what it does is you just put in the syntax you search for something
in the syntax you search for something like at tesla.com and then you specify
like at tesla.com and then you specify you know tesla.txt
you know tesla.txt and it's going to search through all of
and it's going to search through all of these files for at tesla.com if you're
these files for at tesla.com if you're more interested in the code behind it
more interested in the code behind it you're more than welcome to read the
you're more than welcome to read the code in here and see if some of the
code in here and see if some of the items that we've covered already with
items that we've covered already with the batch scripting and the python
the batch scripting and the python scripting kind of ring a bell
scripting kind of ring a bell so what we're going to do is I'm going
so what we're going to do is I'm going to come ahead and go into the terminal
to come ahead and go into the terminal and make it a little bigger
and make it a little bigger and then I'm just going to change into
and then I'm just going to change into that op folder breach parse I'm going to
that op folder breach parse I'm going to run breech parse so reach parse here and
run breech parse so reach parse here and what we're going to do is I'm just going
what we're going to do is I'm just going to say
to say at tesla.com and then Tesla dot text
at tesla.com and then Tesla dot text and that's going to run so again you do
and that's going to run so again you do not have to install this this is only
not have to install this this is only for visual purposes I'm going to show
for visual purposes I'm going to show you in the next video another way to do
you in the next video another way to do this so this is going to run through
this so this is going to run through it's going to take a minute here and
it's going to take a minute here and it's going to grab everybody's username
it's going to grab everybody's username and password that says tesla.com and the
and password that says tesla.com and the username and then it's going to have all
username and then it's going to have all the passwords and we're going to be able
the passwords and we're going to be able to decipher things from this so I'm
to decipher things from this so I'm going to let this run and as soon as
going to let this run and as soon as it's done I'll come back and we'll talk
it's done I'll come back and we'll talk about the results
about the results okay the results are back so this breaks
okay the results are back so this breaks it down into three files there is a it's
it down into three files there is a it's cat Tesla there is a master passwords
cat Tesla there is a master passwords and user so the master has the username
and user so the master has the username and password and then the users file has
and password and then the users file has the users passwords has the passwords so
the users passwords has the passwords so I'm gonna actually G edit the Tesla
I'm gonna actually G edit the Tesla master dot text
master dot text and let's take a look at this
and let's take a look at this so from here we don't have a big list
so from here we don't have a big list surprisingly for a company the size of
surprisingly for a company the size of Tesla so what happens is people utilize
Tesla so what happens is people utilize their work credentials their work emails
their work credentials their work emails and they log into websites and probably
and they log into websites and probably shouldn't be using their work emails for
shouldn't be using their work emails for and we just use it to our advantage so
and we just use it to our advantage so we're after is we're after not only
we're after is we're after not only these usernames but we're after these
these usernames but we're after these passwords as well so we see these
passwords as well so we see these usernames and we see these passwords and
usernames and we see these passwords and I like to look for repeat offenders I
I like to look for repeat offenders I like to look for the syntax as well
like to look for the syntax as well remember we had first initial last name
remember we had first initial last name but we see first name dot last name here
but we see first name dot last name here we see possibly you know just a single
we see possibly you know just a single name there are different types of things
name there are different types of things in here so
in here so uh Nick tesla.com as well so you know
uh Nick tesla.com as well so you know it's changed up I think nowadays it is
it's changed up I think nowadays it is first initial last name but maybe in the
first initial last name but maybe in the past they use first name dot last name
past they use first name dot last name then move to an easier format or vice
then move to an easier format or vice versa they started the first initial
versa they started the first initial last name they got too big then they had
last name they got too big then they had to do first name dot last name but again
to do first name dot last name but again what we're after here is potential
what we're after here is potential repeat offenders so look at this shark
repeat offenders so look at this shark at tesla.com it got popped twice and the
at tesla.com it got popped twice and the password is very very very similar so if
password is very very very similar so if I were to attack tesla.com through a
I were to attack tesla.com through a login interface I might spray this
login interface I might spray this username with this password and this
username with this password and this password that's what we call credential
password that's what we call credential stuffing because we already know the
stuffing because we already know the passwords and then I might make some
passwords and then I might make some modification of capitalized letters and
modification of capitalized letters and non-capitalized letters with d-a-d-e
non-capitalized letters with d-a-d-e because 907 and 814 appear to be
because 907 and 814 appear to be consistent you know so I would alternate
consistent you know so I would alternate Capitals in non-capitals here in lower
Capitals in non-capitals here in lower case and just see maybe if something
case and just see maybe if something sticks so this is something that's
sticks so this is something that's interesting this user down here one two
interesting this user down here one two three four five one two three four five
three four five one two three four five star probably not going to get in with
star probably not going to get in with that on a company like Tesla but you
that on a company like Tesla but you never know
never know but this is what we would do we would
but this is what we would do we would take the usernames we would throw these
take the usernames we would throw these passwords at it and that's called
passwords at it and that's called credential stuffing and then we would
credential stuffing and then we would take these usernames and all the known
take these usernames and all the known usernames and we would spray passwords
usernames and we would spray passwords at them like fall 2019 like we talked
at them like fall 2019 like we talked about in the last video that's password
about in the last video that's password spring so this is a important and very
spring so this is a important and very very critical part of information
very critical part of information gathering is gathering these usernames
gathering is gathering these usernames and these credentials right off the bat
and these credentials right off the bat you want to identify those with your
you want to identify those with your targets so this is kind of what it looks
targets so this is kind of what it looks like this is what I do during every
like this is what I do during every assessment and hopefully that makes
assessment and hopefully that makes sense and that works into it in the next
sense and that works into it in the next video we're going to go ahead and just
video we're going to go ahead and just show another method and start thinking
show another method and start thinking again about these credentials and how
again about these credentials and how they can be utilized and then we'll do
they can be utilized and then we'll do some other information gathering as we
some other information gathering as we move on and learn some techniques and
move on and learn some techniques and how we can get information on a client
how we can get information on a client so I'll see you over in the next video
okay let's talk about hunting breach credentials and let's get Hands-On now
credentials and let's get Hands-On now before we get started I know I stressed
before we get started I know I stressed this in the beginning of the course I'm
this in the beginning of the course I'm going to stress this again
going to stress this again what I'm going to show you here could
what I'm going to show you here could change now I released a course about a
change now I released a course about a year ago which was on ethical hacking we
year ago which was on ethical hacking we talked about breach credentials and I
talked about breach credentials and I utilized a website called we leak info
utilized a website called we leak info we leak info was then eventually shut
we leak info was then eventually shut down and I got all kinds of emails
down and I got all kinds of emails saying hey this is shut down I don't
saying hey this is shut down I don't know what to do
know what to do there's more out there okay there's
there's more out there okay there's always more out there what I'm showing
always more out there what I'm showing you is the methodology I could show you
you is the methodology I could show you on a specific website which I'm going to
on a specific website which I'm going to do that website could go down tomorrow
do that website could go down tomorrow we never know but what you need to
we never know but what you need to retain is the thought process and the
retain is the thought process and the methodology behind what's about to
methodology behind what's about to happen from there you could take that
happen from there you could take that and utilize it elsewhere so if a website
and utilize it elsewhere so if a website does go down you still have the same
does go down you still have the same thoughts why you're doing it and why
thoughts why you're doing it and why you're thinking about it so let's go
you're thinking about it so let's go ahead and move over to a website now so
ahead and move over to a website now so I want to take you to a website called D
I want to take you to a website called D hash now this is dhash.com I do not
hash now this is dhash.com I do not expect you to be able to follow along at
expect you to be able to follow along at this point because
this point because this costs money okay it's five bucks
this costs money okay it's five bucks for a week it's a hundred and fifty
for a week it's a hundred and fifty dollars for a year this is only a used
dollars for a year this is only a used to take credit card they only now take
to take credit card they only now take Bitcoin I do believe or some sort of
Bitcoin I do believe or some sort of cryptocurrency absolutely worth it in my
cryptocurrency absolutely worth it in my opinion
opinion even get a week get a week see if you
even get a week get a week see if you like it it's amazing there's gonna be
like it it's amazing there's gonna be tools I show you later on the course
tools I show you later on the course that will go through and we can do it
that will go through and we can do it locally like the one I just ran in the
locally like the one I just ran in the last video I ran breach parts right this
last video I ran breach parts right this is something that I've put together in
is something that I've put together in in set up but and it's free but the
in set up but and it's free but the database isn't maintained it's a slow
database isn't maintained it's a slow search I don't get the results back as
search I don't get the results back as instantly and I can't tie it to as many
instantly and I can't tie it to as many data points as a website like this can I
data points as a website like this can I think this website's great now let's
think this website's great now let's talk about what D hash can do now that
talk about what D hash can do now that I'm logged in
I'm logged in we have the ability to search by let me
we have the ability to search by let me make this a little bit bigger we have
make this a little bit bigger we have the ability to search by email
the ability to search by email username IP address name address phone
username IP address name address phone number Vin okay think about this say we
number Vin okay think about this say we know a email address okay we know an
know a email address okay we know an email address say it's Bob Bob at
email address say it's Bob Bob at tesla.com we're not going to search this
tesla.com we're not going to search this yet we take Bob and we know Bob it has
yet we take Bob and we know Bob it has an account and we're looking for him we
an account and we're looking for him we search him Bob shows up and we see Bob
search him Bob shows up and we see Bob shows up and we see maybe his name like
shows up and we see maybe his name like Bob Jones or something like that shows
Bob Jones or something like that shows up maybe something that he's been leaked
up maybe something that he's been leaked in has his address or maybe there was an
in has his address or maybe there was an IP address tied to the client you're
IP address tied to the client you're looking for or the person you're looking
looking for or the person you're looking for this can all be identified what if
for this can all be identified what if Bob has a username it's like Bob Bob
Bob has a username it's like Bob Bob rocks123 okay well we can search that
rocks123 okay well we can search that username in here and see if that
username in here and see if that username has repeated itself at all
username has repeated itself at all which is great we could search by
which is great we could search by password so say Bob's password was Bob
password so say Bob's password was Bob rocks123 we could search that password
rocks123 we could search that password and if it's Unique enough then maybe we
and if it's Unique enough then maybe we can actually do some Advanced searching
can actually do some Advanced searching like if we go back to the example from
like if we go back to the example from last time like this last video we saw
last time like this last video we saw this 907 d-a-d-e-814
this 907 d-a-d-e-814 we could put that into a search engine
we could put that into a search engine and see if that comes back to something
and see if that comes back to something else maybe that comes back to a user
else maybe that comes back to a user that is not at a tesla.com but maybe
that is not at a tesla.com but maybe it's like Bob at gmail.com and then
it's like Bob at gmail.com and then guess what now we have Bob's personal
guess what now we have Bob's personal account or now we have Bob tied to
account or now we have Bob tied to another email account especially if we
another email account especially if we search by name or something that we can
search by name or something that we can tie them together we need to start being
tie them together we need to start being able to relate other accounts to each
able to relate other accounts to each other we can do that with hashing we
other we can do that with hashing we could do that with passwords there's a
could do that with passwords there's a lot of things that we can do and we want
lot of things that we can do and we want to start tying this together as a real
to start tying this together as a real world example when I am looking at an
world example when I am looking at an organization and I'm doing research on
organization and I'm doing research on on hashing or I'm doing research on
on hashing or I'm doing research on breach credentials I'm trying to think
breach credentials I'm trying to think okay first if my client if my client is
okay first if my client if my client is tesla.com I might come in here and
tesla.com I might come in here and search at tesla.com and I might come see
search at tesla.com and I might come see how many results are in here let's see
how many results are in here let's see what happens
what happens okay here's George tesla.com George has
okay here's George tesla.com George has been in a shared data so there's no
been in a shared data so there's no actual
actual um any data details here besides a
um any data details here besides a potential username a name email okay
potential username a name email okay same thing with safety we'd have to
same thing with safety we'd have to scroll down and see if we can find
scroll down and see if we can find something that okay here's Adobe now
something that okay here's Adobe now Adobe will have a there's actually a bob
Adobe will have a there's actually a bob and Tesla um Bob at Tesla has a hash
and Tesla um Bob at Tesla has a hash password here okay so now we could say
password here okay so now we could say well first of all we can go see if we
well first of all we can go see if we can figure out what this hash is which
can figure out what this hash is which we'll talk about in a second we can also
we'll talk about in a second we can also go and say okay Bob uh does Bob exist
go and say okay Bob uh does Bob exist anywhere else does this hash exist
anywhere else does this hash exist anywhere else on this website can we tie
anywhere else on this website can we tie it to another account that maybe even if
it to another account that maybe even if we don't crack the password then we can
we don't crack the password then we can say okay this Bob this ties to Bob
say okay this Bob this ties to Bob gmail.com so like I would note this down
gmail.com so like I would note this down and I would take this and copy it so
and I would take this and copy it so from a real world example I would take
from a real world example I would take all the data that I see on this website
all the data that I see on this website I would collect all of the passwords all
I would collect all of the passwords all of the usernames and everything so like
of the usernames and everything so like Tesla 9 all this I want to know what the
Tesla 9 all this I want to know what the passwords are I want to know who the
passwords are I want to know who the people are I want to know all the data
people are I want to know all the data because if I could start finding
because if I could start finding patterns if I could start putting things
patterns if I could start putting things together maybe I can even relate these
together maybe I can even relate these back to their personal email accounts
back to their personal email accounts like we're talking about and then I
like we're talking about and then I could see password patterns there or
could see password patterns there or other passwords and just start tying
other passwords and just start tying this down because my goal is to break
this down because my goal is to break into an organization if I'm doing a pen
into an organization if I'm doing a pen test my goal is to break into an
test my goal is to break into an organization so I'm going to take that
organization so I'm going to take that data and if I can find other passwords
data and if I can find other passwords related to a personal account I'm not
related to a personal account I'm not going to go attempt to break into a
going to go attempt to break into a personal account but I will take that
personal account but I will take that data and I will put it together and
data and I will put it together and maybe try to break into their work email
maybe try to break into their work email account with those passwords of that
account with those passwords of that information this can tie to an
information this can tie to an investigation as well if you're hunting
investigation as well if you're hunting down an individual you're trying to tie
down an individual you're trying to tie them to other accounts this is
them to other accounts this is incredibly useful if you can find their
incredibly useful if you can find their data in a breached database and have a
data in a breached database and have a password and that password's unique you
password and that password's unique you can search it maybe find them somewhere
can search it maybe find them somewhere else you find and I IP address you find
else you find and I IP address you find a name there are often IP addresses in
a name there are often IP addresses in here which we can tie to a location
here which we can tie to a location possibly and see here's that 9078 or
possibly and see here's that 9078 or Dade 814 we could take this and maybe
Dade 814 we could take this and maybe search it and see if it comes back
search it and see if it comes back anything who knows shark at Tesla shark
anything who knows shark at Tesla shark at Tesla okay
at Tesla okay sharkmail.ru look this is a new new
sharkmail.ru look this is a new new email address
email address we didn't know about this one before
we didn't know about this one before and look it does us a favor we search
and look it does us a favor we search d-a-d-e but here's the capitalize we
d-a-d-e but here's the capitalize we didn't search for capitalize we're not
didn't search for capitalize we're not searching specific okay and now we're
searching specific okay and now we're getting more information look here's one
getting more information look here's one for Dropbox okay so it tells you where
for Dropbox okay so it tells you where this is coming from and how you can tie
this is coming from and how you can tie it in if we can get any sort of name out
it in if we can get any sort of name out of this
of this um any sort of anything that would be
um any sort of anything that would be amazing we can get a person's name or IP
amazing we can get a person's name or IP address and we could start tying them
address and we could start tying them down but when you're doing different
down but when you're doing different searches like this you need to start
searches like this you need to start almost
almost um you know like in the investigations
um you know like in the investigations where they have like the the red yarn
where they have like the the red yarn and it's going from one pinpoint to
and it's going from one pinpoint to another you kind of have to zigzag that
another you kind of have to zigzag that back and forth and really try to tie
back and forth and really try to tie this down and you'll see that when we
this down and you'll see that when we get into reporting how you might take
get into reporting how you might take one individual and really just see like
one individual and really just see like a password tied to an account tied to
a password tied to an account tied to this and this was the exact methodology
this and this was the exact methodology that we took to get to that point
that we took to get to that point because when you write a report you want
because when you write a report you want to make sure that I the investigative
to make sure that I the investigative person or the say you're heading off to
person or the say you're heading off to the police or whatever you want to make
the police or whatever you want to make sure that the person that is doing what
sure that the person that is doing what what you did or they can replicate what
what you did or they can replicate what you did with ease and there's no no
you did with ease and there's no no question about it so this is some of the
question about it so this is some of the the searching that we can do now if we
the searching that we can do now if we come to dehashed again we can come here
come to dehashed again we can come here and we can search by email username name
and we can search by email username name name anything so you can put your name
name anything so you can put your name in here I mean if you want to search on
in here I mean if you want to search on here I think it's great you can come
here I think it's great you can come through here and just search for your
through here and just search for your name let's go back let's search Tesla
name let's go back let's search Tesla again I saw a hash in there the Adobe
again I saw a hash in there the Adobe hashes are kind of interesting they're
hashes are kind of interesting they're not the easiest to pick up but let's see
not the easiest to pick up but let's see let's find this Adobe hash
let's find this Adobe hash so let's say we get a hash like this
so let's say we get a hash like this we could try to identify what this hash
we could try to identify what this hash is we can try to crack this hash we can
is we can try to crack this hash we can see if it's been cracked somewhere else
see if it's been cracked somewhere else this hash as of right now we have no
this hash as of right now we have no idea but we know Bob tesla.com we can
idea but we know Bob tesla.com we can maybe paste this in here first of all
maybe paste this in here first of all and see if it ties back to anything and
and see if it ties back to anything and there's 22 results back
there's 22 results back um you know I would probably be looking
um you know I would probably be looking for somebody that has this password with
for somebody that has this password with the name of Bob it's probably not going
the name of Bob it's probably not going to be like a Brett or a Michael you know
to be like a Brett or a Michael you know we might want to see if we can find
we might want to see if we can find another account somewhere else but these
another account somewhere else but these are all tying down to a hash from Adobe
are all tying down to a hash from Adobe so depending on how they were hashing
so depending on how they were hashing this data we might not find anything
this data we might not find anything else of interest but you can see all the
else of interest but you can see all the things here all the different
things here all the different opportunities that are here for us to
opportunities that are here for us to just do research and tie down
just do research and tie down information now we can go to a website
information now we can go to a website called hashes.org
called hashes.org and if we come here we have the
and if we come here we have the capability to actually try to search for
capability to actually try to search for this hash so we could search hashes and
this hash so we could search hashes and see if we can find it
see if we can find it so you can come in here and just paste
so you can come in here and just paste it
it and again it doesn't do a great job in
and again it doesn't do a great job in my opinion with the Adobe hashes
my opinion with the Adobe hashes sometimes they crack but a lot of times
sometimes they crack but a lot of times it says it can't find them
it says it can't find them um oops there we go
um oops there we go let's try hitting a search here
let's try hitting a search here okay so it says not a valid hash now if
okay so it says not a valid hash now if you put this into Google as a search
you put this into Google as a search you can see it didn't come back with
you can see it didn't come back with anything either so we want to make sure
anything either so we want to make sure that when we're searching this you know
that when we're searching this you know we we try all options there is an adobe
we we try all options there is an adobe database that if you do put in a hash
database that if you do put in a hash and it does show up there's a GitHub
and it does show up there's a GitHub Adobe database that will actually show
Adobe database that will actually show up here so with that being said this is
up here so with that being said this is kind of what I want you to start
kind of what I want you to start thinking about when we're hunting down
thinking about when we're hunting down breach credentials how can I take a
breach credentials how can I take a person or company that I'm looking into
person or company that I'm looking into so if you have a company you can just go
so if you have a company you can just go at company
at company name.com or dot net or whatever it is
name.com or dot net or whatever it is search in here see how they show up if
search in here see how they show up if you have a person maybe a personal email
you have a person maybe a personal email account if you can find that person if
account if you can find that person if you know their email account you come in
you know their email account you come in here and say Bob gmail.com maybe you
here and say Bob gmail.com maybe you don't know what their their email
don't know what their their email address is then maybe you come here to
address is then maybe you come here to the main page you go okay I'm gonna look
the main page you go okay I'm gonna look for a name I'm going to look for Bob
for a name I'm going to look for Bob Jones
Jones and search for that and then you start
and search for that and then you start taking this and trying to find the
taking this and trying to find the patterns if you know Bob lives somewhere
patterns if you know Bob lives somewhere uh maybe you could find an address for
uh maybe you could find an address for Bob or maybe you know Bob lives in like
Bob or maybe you know Bob lives in like Arizona you could search Bob Jones and
Arizona you could search Bob Jones and see if Bob shows up
see if Bob shows up um and then kind of take it from there
um and then kind of take it from there and there is some search operators that
and there is some search operators that you can utilize you can see Bob Jones is
you can utilize you can see Bob Jones is taking forever you can put this in
taking forever you can put this in quotations and search it again and kind
quotations and search it again and kind of narrow down your results here so if
of narrow down your results here so if we click on this you could see like
we click on this you could see like here's a name of we got a lot of results
here's a name of we got a lot of results but here's the name Bob Jones this is a
but here's the name Bob Jones this is a very common name so
very common name so um but you could see like if we're
um but you could see like if we're trying to look this down we can start
trying to look this down we can start searching and adding operators in here
searching and adding operators in here and trying to see if we can figure out
and trying to see if we can figure out to tie a username or something to them
to tie a username or something to them so again get your wheel spinning don't
so again get your wheel spinning don't rely on just dehashed but just rely on
rely on just dehashed but just rely on thinking about this this is the thing
thinking about this this is the thing you should think about again the hash
you should think about again the hash could go down tomorrow but if you're
could go down tomorrow but if you're thinking about it in in the way that the
thinking about it in in the way that the credentials and the information can be
credentials and the information can be interwoven remember that red yarn again
interwoven remember that red yarn again that's really what I want you to take
that's really what I want you to take away from this so we're going to do
away from this so we're going to do another video on this I'm going to show
another video on this I'm going to show you some more I guess tools that are out
you some more I guess tools that are out there and some other things that you can
there and some other things that you can do offer alternatives to this and then
do offer alternatives to this and then we'll wrap up this section so I'll catch
we'll wrap up this section so I'll catch you over in the next video
you over in the next video okay we have reached the end of part one
okay we have reached the end of part one I am again going to link in the
I am again going to link in the description below the link to part two
description below the link to part two so go ahead and click on that if you
so go ahead and click on that if you finish this and we're going to meet you
finish this and we're going to meet you over in part two of the video
Video के उस moment पर जाने के लिए कोई भी text या timestamp click करें
Share करें:
ज्यादातर transcripts 5 सेकंड से कम में तैयार
एक Click में Copy125+ भाषाएंContent Search करेंTimestamps पर जाएं
YouTube URL Paste करें
कोई भी YouTube video link डालें और पूरा transcript पाएं
Transcript निकालें
ज्यादातर transcripts 5 सेकंड से कम में तैयार
हमारा Chrome Extension लें
YouTube छोड़े बिना transcript तुरंत पाएं। हमारा Chrome extension install करें और watch page पर ही किसी भी video का transcript one-click में access करें।
