Okay, now that we have installed Metasploitable in virtual machine.
Okay, that is here.
Now let's see and how we can hack a website.
Okay.
Whenever we are trying to access the internet, for example, we are opening a browser.
We are searching for something, for example for google.com and it is trying to access the google.com.
And between these two things okay, we have web application that is here installed in my system.
For example, this browser that is here is a web application.
And also we have the web server that is the real server that the real data is uh stored there, for
example Facebook server okay, or Google server or anything.
And now that I am for example searching on browser google.com this These google.com.
The real server will not understand this.
Okay, so between these two there is something else that is called DNS server.
So this DNS server is responsible for changing this name or domain name to the IP.
And also translating the IP back to real name okay.
So uh, I mean that we can hack two things here.
Okay.
The first thing is, uh, we can do the attack or, uh, doing this hack stuff on web application,
like, uh, Facebook and also other stuff.
Okay, on the browser, the real website, for example, the interface.
And also we have the web server.
Okay.
That means the real server, uh, we can do the attack on web server.
And also there's two stuff.
Okay.
And the web server is just like for example web server in here we have our metasploitable here.
Uh, that is the web server now.
Okay.
And also from here, which is the web application in my Kali Linux.
Let me show you in real example.
Okay.
For example in here I use if ifconfig ifconfig.
And you see we have an IP here called 10 to 10.
0 to 13.
Okay.
Now in browser if I just try to access this IP because we are in the same network and also that is the
metasploitable and that is a web server.
Okay.
Right now so ten 0 to 13.
So you see that I can access the metasploitable that is running in the other virtual machine.
And you see I have these all application for example phpMyAdmin.
You see that it is a server.
Okay.
And also I have this one okay.
And also I have a dvwa.
This is another thing that we can hack this.
Okay.
So now if I hack the real server, which is the metasploitable, this is the server.
Okay.
If I hack the real server, I will be able to access a lot of things here.
For example, I can access phpMyAdmin.
The other website, the other website, the other website, the other website.
Okay.
I kind of have access in a lot of things, but if I hack the web application, for example, something
that is into this browser and for example, this book, if I try to hack Facebook, I will be able to
hack only one of these.
Okay.
For example, one thing.
And also, if you are not able to do both of these, then we can do another thing that is called social
engineering and we can target the human.
Okay.
So uh, or uh the client side okay.
That is managed by human.
So in here you see that we can have access to the Metasploitable.
And here we will be creating our script.
Python script to hack all this.
Okay.
For this, our script on this phpMyAdmin for example.
Okay.
And also in this website, this website a lot of websites you see here.
Okay.
We will be able to test our script on these tabs.
And if we pass it then we will be using them on real website.
Okay.
And I have to tell you that never try to use a script.
Your tools okay.
On real system without permission.
So in here we are using our own tools, our own virtual lab and try to to not to harm anyone okay.
Anyone else.
So in here, I showed you how you can have access.
Access the Metasploitable server using its IP address from Kali Linux.
Right now you see, I am in Kali Linux and I have access to this Metasploitable and Metasploit Metasploitable
two.
Okay.
And also I give you a very short explanation about how this website, web application, server side,
how this works and that is it.
Okay.
So let's move for the next section or for the next lecture to see how we can create our tools to use
them to get information.
Okay.
Scan these applications okay these websites and get information and also try to hack them or if we are
able or not.
So let's go and see that.
And thanks for watching.