We're actually going to be going through this challenge together as we wrap up this skill.
Now as I had previously mentioned earlier in the previous video, I was actually supposed to be doing fixing exploits here.
But there is a reason that I wanted to go through and show you how to find them and how to leverage them.
Because if you don't know they exist and you don't know what they do, you can't really figure out where they are and why the reason it is that we need to fix them.
So yes, I did kind of nickel and dime over the ability to fix them.
And that's because we get more value out of knowing as pen testers and security technicians what it is that they actually do to our systems.
And everything that I told you in the previous portion of this skill is applicable in order to fix those vulnerabilities.
Now with that being said, we're going to go over to our lab and kind of walk through together doing the exact same thing to a POSIX-based system.
Except we're going to see how many vulnerabilities that we can find that are exploitable according to Metasploit.
Now to do this, we are going to go over to our Kali system and we're going to start up sudo msfconsole.
And if you would like to take a page out of the last skill and automate this test, by all means go ahead.
That's in the scripts folder and also in the last skill.
Now we are inside of msfconsole. We're going to set our payload in accordance to what our actual file is that msfvenom was created with.
So in this particular case, we're going to set the payload, but not before I forget to set my multi-handler first.
Ah, see, I didn't forget.
Now we'll set our payload to Linux.
And sometimes we have to nudge it because it's looking for everything behind the scenes.
Where it's searched, but x64 into Metapreter and reverse.
Did I spell that right? TCP.
We're going to set our L-host to us.
And we're going to say run and then I'll go over to the Ubuntu real quick and run dummy.
Ah, yes, I need to run this in terminal.
Yep, it was in session one.
It was in session one.
Or port 4445 is what we made it with in the last skill.
So I had to run it in the background.
So now we're going to go ahead and use post-multi-recon-local-exploit-suggestor.
Now remember, you have to tie this to an actual session.
So at this point you would say sessions, figure out which one you're on.
I'm on two because I goofed.
So set sessions to two.
And then if you're like me and you just want to double check, do show options to see if there's anything else that we need to take a look at.
And there's not.
So at this point you would say run and let it go through.
And I'm going to skip to the end when it shows all of them together and what our final tally is.
Now I won't pull your leg on this.
That actually took about 10 minutes to run for the first time.
Your experiences may vary.
But that's why I paused here.
So really the question that we're wanting to look at now is how many possible vulnerabilities are there for us to be able to play with?
And the answer to this is eight.
Now I would like to challenge you at home to go ahead and go through these and just use them, experiment with them.
And see if you can actually get the Ubuntu system to lock into a new process using another PID running or even trying to elevate your account status from user to administrative rights.
Now do remember you'll have to go through and create a user on that actual Ubuntu system.
Because right now learner is an admin.
And you want to try to do this against an actual user account just to see if one, you can connect.
Two, if you can get the vulnerability to get hooked on to by one of these exploits.
And three, if you can get administrative privileges through that.
Oh man, have you got the biggest bang for your buck on this one.
Because this is basically opening up the Pandora's box for pen testers and hackers to be able to go through and wreak havoc on the actual systems themselves.
But primarily for us, it's a way for us to be able to do a hash dump like we've done in previous skills already on these systems.
And go through and start cracking passwords to see if you can access other systems due to shared passwords.
There's a whole lot of different possibilities on this.
But like I said, the purpose behind this skill was to actually teach the ability to fix these memory exploits.
But I feel it's important to know how these exploits exist and what their capabilities are for us as pen testers.
And go through and then fix them after we leverage them and make everybody worry themselves first.
I hope this has been informative for you and I'd like to thank you for viewing.