Introduction to CySA+

0:00<v ->Hi, Eric here.</v>

0:01You may remember me from such classics as, hold on,

0:05let me get my notes straight here.

0:06Enterprise Security Essentials,

0:09Hacking Tools, Techniques and Incident Handling,

0:11one of my personal favorites,

0:13Networking, Monitoring, and Threat Detection, a new one,

0:16and a classic in the making, An Intro to Digital Forensics.

0:21In this course, we're diving into the world of CompTIA

0:24with CYSA+, which is for cybersecurity analysts.

0:29Now, you may be wondering, addendum.

0:32That's right, we're learning the new stuff when CS0-003.

0:37Now, we always know that technology is always advancing

0:41and so are the certifications and therefore,

0:44the curriculum surrounding those technical certifications.

0:47And that's what we're trying to do here at CBT Nuggets,

0:49is keep up with the curriculum that is always advancing.

0:54Now, you may be wondering where CYSA+ sits inside

0:58of our CompTIA structure.

0:59Well, it sits in between Security+ and CASP.

1:03So if this is your introduction to CompTIA,

1:06does that mean you need to take this course?

1:07Absolutely, because some

1:10of us may be well versed in cybersecurity,

1:12but just haven't been too deep inside of CompTIA just yet.

1:15See, if you've been keeping up with my courses here,

1:18where we've been learning together,

1:20this is our first dive together inside of CompTIA,

1:22where our other ones have been inside of other realms.

1:27So CYSA+ may be a perfect fit

1:30for where we're at in our technical understanding

1:32and learning progression.

1:33It doesn't necessarily mean that we're outside

1:35of our learning scope here.

1:37That's what this course is for,

1:38because we're gonna try to make this as easy

1:40as possible in terms of understanding.

1:43But if you ever do find yourself off the beaten path too far

1:46inside of this course, that's okay too.

1:48That doesn't necessarily mean that you have to give up.

1:52Don't ever give up.

1:53Keep learning, always do it.

1:55Trust me, it's worth it

1:56because there are plenty of resources here on CBT Nuggets

2:00to help us get back to where we need to be

2:02and take us even further.

2:03So if you have to, take a pause,

2:05go search the catalog here at CBT Nuggets

2:09and see if we have skills, because I know we do.

2:12They cover a lot of this stuff in more in depth

2:14and help us get us to that point

2:16where we need to be together.

2:18Because I know for a fact that Bob covers a lot

2:21of great material inside of Security+,

2:23and that is the course in CompTIA land

2:26that is right before this one.

2:28So if you're brand new to IT, cybersecurity in general,

2:33don't you worry, we're gonna take care of you, I'm with you.

0:00<v ->So before we get too much further into this actual skill</v>

0:03and start diving into the curriculum for CySA+,

0:07we need to get a couple of prerequisites

0:09out of the way first before we get too far

0:11into the weeds of what's actually going on

0:15and there causes a lot of confusion.

0:17And in order to do that,

0:18we're going to be installing VirtualBox.

0:21Now, we're going to be doing this together

0:22in this little nugget here.

0:25And that's because I want to make sure

0:26that we all understand what is going on

0:29and making sure that we're having

0:30our virtual environment set up.

0:32Virtual environment, you say? Yes.

0:34Because throughout this course,

0:36we're going to be trying to stick

0:37to what I've been going with

0:39for the other courses I've been involved with,

0:41and that is putting pen to paper

0:43or actual practice to what we're learning.

0:46See, I'm a learn by doing,

0:48and as much as I love reading and understanding

0:52the curriculum inside the book itself,

0:54if I can actually put some actual practice

0:57to what's going on,

0:58it kind of sticks with me a little bit better.

1:00So inside of CySA+ material,

1:02there's going to be some times

1:03where we actually break open some tools

1:06and start doing a little bit of practice

1:08to see if we understand

1:09and can truly test out some of those security practices.

1:12Now, we're going to be using VirtualBox

1:14for this demonstration.

1:15And to do that,

1:16I'm going to be on the Downloads of VirtualBox page.

1:21And I'm going to be putting links for everything below.

1:23And we're going to select, for this case, our Windows host.

1:27Now, there is something I want to add here real quick,

1:30and that is, for Macs,

1:31I just recently learned that if you open up your terminal

1:34and type in the command arch,

1:36you'll be given an output

1:38of what kind of architecture platform that you have

1:40on your particular laptop.

1:42for Macs, right?

1:44And the reason this is important is because

1:46if you have a 32 or 64-bit kind of traditional, if you will,

1:51that the Mac host here for VirtualBox will work.

1:55However, if you have an ARM64,

1:57and that's A-R-M-6-4, you'll definitely need

2:00to take a look at some of the beta releases

2:02that VirtualBox has to offer

2:04because the Mac installation here does not natively work

2:07inside of that main architecture,

2:11that is ARM64.

2:13So I've had some trouble with it,

2:14just keep that in mind.

2:16And while we download this

2:18and then go to our Downloads folder

2:20to see that it's downloaded all the way.

2:23You see it right here,

2:24I'm going to double-click on VirtualBox.

2:26My screen may go black

2:27because that is the UAC,

2:30user access control inside of Windows.

2:32I'll drag everything over it here and minimize that for us.

2:35And while we're installing,

2:36I do want to expand on just a couple of things

2:38for us real quick.

2:39The reason that we're going to be using VirtualBox

2:42as we click Next for our intro

2:44and go Next again for our basic installation of VirtualBox 7

2:49is because we want to make sure that if we have any mistakes

2:52inside of what we're doing for our practice,

2:54that it's not affecting the actual host itself.

2:57And as I click Yes for proceed with the installation

3:00and proceed with installing the missing independencies,

3:04such as Python because it is required for VirtualBox.

3:08Those mistakes can cause problems

3:10to the actual system itself

3:11based on some of the tools that we may use

3:13for malicious intent, but for study.

3:17Well, if we keep it contained

3:19inside of a virtual environment,

3:22such as VirtualBox,

3:24we'll be able to minimize damage to our host,

3:28if not mitigate it altogether.

3:30Because inside of that virtual environment, it's contained.

3:34It has a virtual hard drive, it has virtual RAM,

3:37and we can install different operating systems virtually

3:41to simulate that practice.

3:43And they also have capabilities on the internet themselves,

3:47which will demonstrate here in the next couple of videos.

3:50Now, we're going to go ahead and start VirtualBox.

3:53Now, why are we using VirtualBox?

3:54Some of you may be asking, why not VMware?

3:57Well, in some of the other courses

3:58that I do here on CBT Nuggets, I do touch on VMware.

4:02And the difference is,

4:04is that VirtualBox is perfect for this course

4:06because it's free and it doesn't necessarily fill us up

4:10with too many bells and whistles

4:12that we don't need or can't really configure.

4:15Whereas VirtualBox here,

4:17if I open it up real quick,

4:18boom, there we go.

4:19Now, I kept the default settings

4:21because I uninstalled it and reinstalled it

4:23so that way we could do it together.

4:26But this is the standard display we get

4:28when VirtualBox is installed.

4:30But VMware comes with a lot more

4:32detailed-oriented settings capabilities

4:36that aren't necessarily needed

4:37in something like CySA+ curriculum.

4:40So we're going to be using VirtualBox

4:42because I like keeping the cost to the actual learner

4:44as low as possible

4:45because I like keeping my costs low as possible.

4:49So, I'm going to wrap this one up here, and as we move on,

4:53we'll go into the next set of tools that we need

4:55inside of our VirtualBox environment.

0:00<v ->All right, so that's not the only tool</v>

0:01that we need to install.

0:02Now that we have a virtual environment ready for us

0:05to be able to put the virtual operating system into on our

0:09host system here, we need to be able to install

0:12that operating system.

0:13And the one that we're gonna be using

0:15for this particular course is Kali.

0:18Now again, this may seem familiar to our other courses

0:20where we use Kali for pen testing and network analysis,

0:24but here we're gonna be applying it to the CYSA curriculum

0:28to make sure that we understand those security principles

0:31that will lead us into that higher level of understanding

0:35for security policy.

0:36So we're gonna pop on over to our actual Kali box here,

0:42or not Kali Box,

0:43but the actual website where we can download Kali from.

0:44And again, I'm gonna be putting all the

0:45links for this below.

0:47And as you can see here on this website,

0:49we have many different options.

0:51So we're gonna be looking at virtual machines,

0:53which is the one here on the top right,

0:55and we can see here that it says for VMware

0:57and VirtualBox for prebuilt images.

0:59So as we go in there, you will see that

1:02we have VirtualBox64 in the middle.

1:05Now I'm gonna be selecting this

1:07because the system that I have installed VirtualBox on is a

1:1064 bit operating system.

1:12If you do install this on a 32 bit,

1:14by all means, swap to 32 bit

1:17and we'll be back on here on 64

1:21and we're gonna just download straight from the site itself.

1:24And once we have this downloaded, we will go ahead

1:27and move this to our folders and get everything organized

1:30and walk through the installation of the Kali OS together.

1:33Be right back as this downloads.

1:36Okay, so I've got it downloaded,

1:37and as you can see, I have it highlighted the Kali Linux ISO

1:40file that I downloaded directly from the site.

1:43And what we're gonna be doing here is go ahead

1:45and create a new folder on our host system,

1:48and we're gonna call this Kali CYSA.

1:53Now, the reason I'm creating this folder is

1:55because when we go back inside of VirtualBox itself,

1:58we're gonna be creating a new virtual machine,

2:00and that's with the new icon up at the top.

2:03And we have some different options that come up.

2:05We're gonna call this one Kali dash CYSA.

2:09And I'm gonna to change the folder to this one over

2:11to the actual folder that we just created inside of our

2:14physical hard drive on the physical post system.

2:19I'm gonna go inside a VirtualBox, see my Kali CYSA,

2:23and select that folder.

2:25Now the next thing that's gonna ask us is, is

2:26"Where is the ISO image located at?"

2:29Because if we're installing an operating system,

2:31we do need an ISO image

2:32and this ISO is basically replicating that disc or a CD ROM.

2:37And I'm gonna select other and go in

2:39and select inside of CBT, VirtualBox,

2:44and there's that Kali ISO.

2:45Now, by default, it identifies

2:48that this is a Linux based operating system

2:51or POSIX based, anything that derives from Unix

2:54and it picks up that it is Ubuntu 64 bit.

2:57That is the closest it can determine

2:59because Kali is kind of a mishmash of a bunch

3:01of different Linux distributions.

3:04Now we're gonna go and down to the hardware for this

3:07and select some different variables here.

3:09And that is the RAM

3:11and the processing power of our virtual machine.

3:13And this is limited to

3:15what the actual host system has capable

3:17or available for the system overall.

3:20So for instance, if we have 12 processing

3:23or cores, we can only allocate up to 12,

3:27but if we allocate all 12 of 'em, we won't have any left

3:30for the actual host system itself.

3:32So we might want to do two for this one,

3:34and I'm gonna slide that over to two.

3:36And the same thing goes for RAM.

3:38Now this system has a good bit of RAM on it,

3:41but in order for me to not overpower

3:43and not waste too much RAM while we're doing this,

3:45I'm just gonna set it to eight.

3:48I'm gonna slide it over to 8,000 something megabytes,

3:528192 for instance.

3:54And that way I know that we won't be using all

3:57of the RAM available to the system

3:59and cause problems on the physical host itself.

4:02Because if, let's say this system only had four gigs of RAM

4:05and I set this to eight, well now I've used up too much.

4:08And the same thing goes for the hard disk.

4:10And now in this case, we're gonna be looking at making sure

4:14that this is in the right folder

4:15and we're gonna be dedicating actual hard drive space

4:17to this virtual machine

4:19and it's gonna create that VDI file,

4:21which means virtual disc.

4:23And we're gonna allocate, I'm gonna allocate,

4:27let's say 60 gigs to this

4:30and we're gonna leave it at a VirtualBox disc image.

4:34Now this creates a file on your host system

4:38that the virtual machine will refer to

4:41as this system's hard drive.

4:43And if we want to pre allocate the file full size,

4:47what we're doing here is saying when we create this VDI

4:50or virtual disc image to go ahead

4:52and create all 60 gigs of it, instead of the opposite,

4:57which would be only create

4:59or use as much space as needed until we reach

5:01that maximum that we've set.

5:03And in this case it's 60 gigs.

5:05So if you leave this unchecked, there's a chance

5:08that you can go in there and only see

5:09that 25 gigs is being used,

5:11but you set it for 60, "Why not the whole 60?"

5:14Because you, we did not pre allocate all the way.

5:16Now I like pre allocating

5:18because that'll tell me if, one,

5:20if I have enough hard drive space

5:22and two, if let's say I have five gigs

5:26of hard drive space left

5:27and I need 10 gigs for the VDI, the system won't crash,

5:30it'll already have this allocated.

5:32So I don't have to worry about anything overriding that

5:34empty space on the hard drive.

5:37So those are the defaults.

5:39We're gonna click on finish.

5:41And what it's doing right now is it's creating the actual

5:44virtual machine files that go required in order to be able

5:49to run this on our host system.

5:52Now this may take a minute based on the type of system

5:56that we have and the processing power.

5:57So after this we will be right back and go ahead

6:01and crank up our virtual machine for the first time

6:04and make sure Kali is installed correctly.

0:00<v ->So our virtual machine has been created,</v>

0:01but the operating system has not been fully installed yet.

0:04But before we get into that,

0:05let's take a look and make sure that we understand

0:08what's exactly going on under the hood.

0:11So we can see here that we have kali - cysi

0:13as our virtual machine, and it's not powered on yet.

0:16We've swap over to the actual folder

0:18that we created it in and created a sub folder.

0:21We go in there

0:22and we can see that we have the actual hard drive

0:24right here, the .vdi,

0:27and it's fully allocated for its 60 gigs.

0:29Now I know it's not 60 gigs exactly,

0:31it's 62 and some change.

0:33That's just how computers count.

0:35But we know that the hard drive itself

0:38has been fully allocated.

0:39So that way if we start running low on space

0:41inside of a hard drive,

0:43this will have its space allocated to it.

0:45Now these other two files,

0:47these are settings for that virtual box

0:49that we have just set up.

0:51Now we're gonna swap back over to our kali box

0:53and we're gonna right click and go to Start.

0:56And we're gonna select a Normal Start.

0:59Now what's happening here,

1:00since this is the first time it's cranking up,

1:03it's going to be reading that ISO file,

1:05the ISO of the actual kali box.

1:08Let me see if I can drag this over for us.

1:10As it does, its initial first time boot up.

1:13Now you'll see Auto capture keyboard.

1:15I'm gonna click in here

1:16and I'm gonna push down for our install.

1:20And that's because we want to install

1:22the actual Kali operating system

1:24on that virtual hard drive that we have

1:27instead of doing a live operating system,

1:29where a live operating system would load

1:31just inside the RAM.

1:32And when we turn the system off, it would poof.

1:35But since we're putting it on that hard drive,

1:38henceforth, every time that we crank up after install,

1:41Kali will always be here for us.

1:43Now I'm going to hit Enter so we can go ahead and install.

1:47And one thing I do wanna point out here

1:49is that you may think my mouse is lost or trapped

1:51or I don't know what's going on here.

1:53That's okay, just hit the right Ctrl button on your keyboard

1:57and the mouse will become

1:59free from the virtual machine and subjective to our will.

2:03But if we go inside that virtual machine again,

2:06we can see, let me clear that notification thing

2:09to the right, what's our language that we're using?

2:12And for this one, we're gonna be selecting English,

2:15We hit Enter.

2:16In our territories, the United States.

2:18And some of this may seem familiar

2:20for to other operating system installations.

2:23And that's okay.

2:24It just means that we're getting really good

2:25at what we're doing here.

2:27And the key map that we're using,

2:28and the key map is basically

2:30how do the keys line up on our keyboard

2:33based on the region, language,

2:35and other settings that we may have.

2:37We may need to change this,

2:38but we're gonna be going with American English

2:41and we're going and installing the files

2:43to the actual virtual hard drive,

2:45like a normal operating system.

2:48Now I'm gonna do a couple of cuts here and there

2:49just because I don't wanna waste anybody's time

2:52with what's going on.

2:53So I will be right back,

2:54but I promise I won't click anything ahead.

2:57And just like I promised I'm back,

2:58another box popped up asking us for more information

3:00and I wanted to make sure that we were all here together.

3:03Basically, what's our host name?

3:05What are we calling this system?

3:06And in this case, we're just gonna call it kali.

3:08We're gonna hit Enter for default.

3:09Now we're not using a domain in this course,

3:13so we're gonna leave this blank and hit Enter.

3:15Otherwise we would add that domain name in there.

3:17And that would be something along the lines

3:19of maybe like active directory.

3:22And for the first full user,

3:23we're gonna be typing in eric for this one.

3:27Now there is a default username root,

3:29and we'll set that password here shortly.

3:34Did it do anything?

3:35We need to actually tap to it

3:37and make sure that we can go to enter.

3:40Now for our password,

3:41we're just gonna be typing in password all lowercase

3:44see if that allows us to do that.

3:46We're gonna type in our password again

3:47to make sure that we did it right,

3:49and I'm just have it over to the actual Continue button.

3:52and hit Enter.

3:53And it took it.

3:54Now do remember, this is not the password

3:56you actually want to use on a real operating system.

3:58Now I am in central time

3:59because I am in the greatest state of all Texas.

4:03And we're gonna hit Enter for that and it's gonna continue

4:05and I will be right back to the next prompt.

4:08Oh wait, there it is.

4:09So how do we wanna install this?

4:10Do we want to use the entire disk?

4:12Do we want to use part of it?

4:13Well, we're gonna keep it simple.

4:14We're gonna be using the entire disk,

4:16and that's referring to the actual VDI

4:19or virtual disk image for virtual box.

4:24And that and inside of the actual virtual operating system,

4:28which is Kali here.

4:29It sees it as 0,0,0 SC3.

4:32Common to POSIX-based operating systems.

4:35It's wanting to ask us where we're putting everything at,

4:37and we're gonna leave everything in one partition.

4:40We can get more into detail of this way later on.

4:43Nothing to worry about here.

4:44We're gonna hit Enter

4:46and we're gonna review our changes real quick.

4:49And if we don't need to really change anything,

4:51we're gonna finish partitioning this disk

4:53and write everything to it so we can do the full install.

4:57And by default, it's going to have no highlighted here.

5:00But don't be fooled.

5:02We do wanna write these changes to disk

5:05and continue with our installation.

5:07Be right back.

5:08Okay, we're back.

5:08And now it's asking us what all do we want to install

5:11as far as default software sets.

5:13And we're gonna leave the defaults checked

5:15because we have the desktop environment

5:17selecting this item has no effect.

5:19We have the Xfce, which we'll get into later.

5:22That's the default desktop environment.

5:24And then the collection of tools,

5:26which is basically all the default tools

5:28that Kali will have to offer.

5:30But we'll be going over that list

5:31and more in depth later on throughout this course.

5:33And then the top 10 most popular tools,

5:36and that can be checked out on the actual Kali site itself,

5:39same as the actual recommended tools.

5:42So we're gonna go Tab to continue

5:46and make sure that it does that basic install.

5:48And what's happening is it's retrieving files

5:51from the actual Kali repository.

5:53We'll get way more into repository later in the course,

5:56but this confirms that we actually have connection

5:58to the actual internet itself.

6:00And if you don't believe me,

6:02run Wireshark can take check out

6:04some network monitoring and analysis.

6:06So at this point in the installation,

6:07it's asking us if we want to install the GRUB boot loader.

6:11And in this case, we're going to be selecting yes

6:13because this puts it on the primary drive.

6:16If we had more than one virtual disk

6:18or more than one physical hard drive on a host,

6:20if we were installing it on a physical host,

6:23we would select whichever drive that we wanted it

6:25to be on in case we were running multiple operating systems.

6:29We're gonna select yes

6:31and then we're going to select the /dev/sda,

6:34which is the virtual disk that we're working from.

6:38And then it's going to start installing the GRUB

6:42and updating it, making sure that we have everything in line

6:46for being able to not only boot,

6:49but go into the Kali operating system

6:51once it's fully installed.

6:53Just like that, our installation is complete,

6:54we're gonna hit to Continue to restart this virtual machine

6:58and it's unmounting the ISO.

7:00So the next time that it boots up,

7:01it won't boot from disk or ISO in this case.

7:04And you can see that the GRUB loader was just there.

7:07And we are at our boot selection.

7:09I'm gonna move the keys up and down

7:10so it doesn't automatically go.

7:12And by default, it wants to go into Kali GNU/Linux.

7:17And we can go into advanced options.

7:19This would be like if we needed

7:20to do boot load or anything like that.

7:22But we're gonna ahead go ahead and hit Enter

7:24to load up Kali virtual machine operating system.

7:28And as we move forward throughout this course,

7:31this is what we'll be using, but we're not quite done yet.

7:34There are some tools inside of this operating system

7:36that we need to take a look at,

7:38and that's what we're gonna do next.

0:00<v ->After our reboot, Kali is all the way installed</v>

0:02and I know that the virtual machine is running

0:04and we have that window open,

0:05but I wanted to show you this real quick

0:07that's actually on the screen.

0:08And note that on the right side

0:10where my mouse is kind of swirling at right now,

0:13we can see a preview of what's actually going on

0:15inside of that virtual machine.

0:18Now I have it opened right here,

0:20and I'm sorry I can't expand this too much.

0:22That's kind of one of the differences between VirtualBox

0:25and VMware is that I can install VM tools and expand this.

0:29But in VirtualBox, we are kind of stuck with this

0:32until we actually go inside the OS.

0:35Now I'm gonna be logging in as Erik,

0:36that's the user account that we created

0:38when we did the initial install

0:39of the operating system itself.

0:41And the password that I had was "password", all lowercase.

0:45Now it's gonna take just a second to boot up,

0:46and this can be dependent upon the resources allocated

0:50to the virtual machine when we were initially creating it

0:52inside of our VirtualBox

0:54and not the installation of the OS itself.

0:57And as you can see here,

0:58it comes up to our standard background.

1:01Now this may vary based on the updated version of the ISO

1:06that you download from the Kali site,

1:07and that's why we're also gonna do a little house cleaning

1:11before we actually get too far into our course overall.

1:16And the first thing that we need to do is right click

1:18on the desktop and go to "Open Terminal Here".

1:22Now we're gonna do a couple of different checks real quick

1:24and the first one is, is we're going to ping google.com

1:26to verify our internet connectivity.

1:29And as we can see here, we are in fact pinging.

1:31And I'm gonna hit Ctrl + c because inside of Kali

1:35and POSIX-based systems,

1:36unless you specify the exact number of pings,

1:39it'll keep going until you tell it to stop.

1:41Now at this point, I can make my window a little bit bigger

1:44as you can see here,

1:46and that can make things a whole lot better for us,

1:50the learners, to be able to see what's actually going on.

1:53And I'm gonna type in clear

1:55just to simply clear my terminal window

1:57so we can actually get down to business here.

1:59Whenever we run commands inside of POSIX-based systems

2:03that have anything to do

2:05with the operating system whatsoever,

2:07we need to tell it to run with administrative rights.

2:10Now inside of Windows, this is usually done as right click

2:12and then run as administrator,

2:15or run as different user, et cetera.

2:17But inside of POSIX-based systems, we can kind of get away

2:20with this by doing sudo inside of our terminal.

2:24And sudo, which I believe stands for "Super User Do",

2:29as in "do that", then we type in our command.

2:33And at this point we're going to do a sudo apt get,

2:38or apt update, my bad.

2:42And it's gonna ask for our password

2:43because that's the, it wants to make sure

2:46that we are who we say we are.

2:47We didn't actually get into any kind of account

2:51without authorization.

2:53And as you can see here on the screen,

2:54it's going to a couple of different places

2:56to get a updated list of what's going on.

2:59And what it's doing in actuality is saying,

3:03"are we up to date inside of our operating system?"

3:07This is akin to kind of a Windows update,

3:09but we're inside of Kali.

3:10And this is also includes the tools

3:13that are installed in Kali by default

3:15when we went through the installation as well.

3:18So now that we have, we ran our update,

3:21which is updating our list of things that can be upgraded.

3:23We see that we have 1,750 programs or packages

3:27that can be upgraded and we just simply hit up

3:31and make sure, instead of update, we say upgrade.

3:35Now these two commands can be ran

3:37at the same time with ampersands,

3:39and we'll do that way later on in the course.

3:41But I'm running these separately to make sure

3:43that we understand the difference between "update"

3:46and "upgrade" as far as our apt goes inside of the terminal.

3:50So when we run it this time,

3:51notice it didn't ask for a password,

3:53that's because we're within that time limit

3:56of our session of using the password

3:59for sudo inside a terminal.

4:01Now, when I did the command of upgrade,

4:05you can see that these are all the packages

4:07that need to be updated

4:09inside of our Kali distribution here.

4:11And this is something that we need to do regardless

4:14of the version of the operating system we download

4:17from the Kali website.

4:19We always wanna make sure that we're up to date

4:22on tools, updates, patches, and anything else

4:26that may be covered by the upgrade and update,

4:28because some tools may have been modified

4:30to attack different versions of operating systems.

4:33There may have been a Windows update out there

4:35for Windows Professional that previous versions of Kali

4:39may not be able to exploit,

4:40but we're going to fix that

4:43by doing this update and upgrade.

4:46Now, I also wanna clarify too, it's not necessarily Kali,

4:49the operating system, that's doing the attacking later on,

4:51it's gonna be the programs within.

4:53And we will touch on that.

4:54Hold on one second.

4:55We're gonna hit "yes" for continue,

4:57and it's gonna contact our repositories

5:00that are in our sources.list.

5:03Now again, we'll be getting into that a little bit later,

5:06but these are the defaults set up inside of Kali

5:10as far as the operating system is installed.

5:13And as you can see here, it's now doing a bunch of gets,

5:16and so it's downloading the packages

5:18to the local operating system

5:20and getting them ready to install.

5:22Now this is going to take a little bit,

5:24and that's why we're going to do a pause in the recording,

5:28and we're magically gonna come back at the snap of a finger

5:32after this has all been installed and done

5:34so that way we don't have to wait for another hour.

5:36Are you ready? 1, 2, 3. (snaps fingers)

5:39Everything installed, and now we're left with a prompt

5:41of what do we want to do next?

5:43And that's because some of the things that installed

5:45require changes to the service

5:47and to the kernel overall inside the operating system.

5:50So do we wanna "restart these services

5:54during package upgrades without asking?"

5:56And we're gonna say "yes",

5:57because we don't wanna go through one by one

5:59and install all these,

6:02or restart all of these services individually.

6:05So again, this is gonna take a little bit

6:07because now we're going through services

6:09and installing things that are related to the kernel itself.

6:13So after another snap, we'll be back

6:15after this part finishes. (snaps fingers)

6:17Everything was fully installed and upgraded.

6:20And as you'll notice, we've had a little bit of a change

6:23inside of our Kali operating system here.

6:26And that's because regardless of what distribution

6:28of Kali we're on, reasonably,

6:30let's say within a year or two,

6:32if you are installing from a previous ISO,

6:35after you run the update on this

6:39and get everything downloaded from the repositories,

6:42it'll upgrade it, even look and all,

6:44to the current Kali distributions

6:47offered on their actual download website.

6:50And this works out in cases to where time is a factor

6:53and we have a Kali OS that's already installed

6:57on a virtual machine or an actual physical host,

6:59and we just wanna do an update to it real quick

7:02and not necessarily reinstall the entire OS.

7:05Maybe internet's an issue or something along those lines.

7:09But now that we have everything installed,

7:11I would highly recommend to go ahead and restart the system.

7:14But at this point, we're gonna take a pause

7:16and get ready for looking at some of the tools

7:18that we're gonna be using

7:19throughout the rest of this course.

0:00<v ->Now, there are a wide variety of tools inside of Kali</v>

0:03as far as the operating system is concerned,

0:05because it's prepackaged with nearly everything

0:07and anything that we can think of

0:09to test out vulnerabilities,

0:11and cause just havoc and mayhem,

0:13or I mean pen testing purposes,

0:15making sure that we're staying inside

0:17of what our organization is allowing us to do, right?

0:20Yes, that's exactly where we were going in this.

0:23But we're gonna take a look around Kali real quick,

0:25and look at some of the default programs

0:27that we have installed and how they're categorized.

0:30And then we're gonna take a look at the one

0:31that we're gonna be using the most throughout this course

0:33to test everything, metasploit.

0:34Let's take a look.

0:36Inside of our Kali OS,

0:38we have the top left little dragon icon right there,

0:42very similar to Windows as our start menu.

0:45And you can see that we have different categories

0:46of what's actually going on here.

0:48And we have it broken down into different types of groups.

0:52We have information gathering, vulnerability analysis,

0:55web analysis tools,

0:56database, password, wireless, reverse engineering,

1:01exploitation, sniffing and spoofing, post exploitation,

1:05forensics, reporting, and social engineering,

1:08and my favorite, 42, the Kali offset links.

1:12Basically, if you are lost, go there,

1:14and you can find everything for the true answer of life,

1:16the universe, and everything.

1:18Now, I generally come in here and press the start button

1:20or the little dragon button,

1:22and just start typing in meta, as in META,

1:25and then see metasploit framework right there.

1:29Now, doing it this way

1:30is just done with regular user permissions,

1:33because even though we're logged in

1:34as an administrator inside of the OS,

1:36we have to run pseudo if we wanna be able to do anything,

1:40which is why this comes up.

1:41And we see pseudo password for Eric,

1:43and we know that that's lowercase password.

1:47And it's starting our database,

1:49and you'll see a little bit of ask yard here,

1:53just a second as it's going through its initial startup

1:54of creating internal databases, logs,

1:56getting everything ready for a fresh run right here,

2:02creating initial database schema.

2:04And depending on the allocation

2:06we did for resources on this particular system,

2:09this may take a little bit.

2:11Now, we do have a little good chunk of resources here

2:15for Kali as far as this virtual box VM is concerned.

2:19So we should be running pretty decently.

2:21And you can see here that we have been granted

2:23with a cal for this run.

2:26Now we're not gonna go too deep in the weeds

2:28on actually running metasploit for this particular skill.

2:32We will be doing this throughout the course.

2:34I just wanted to show you where it's at.

2:36And if you scroll up all the way up to the top

2:39and we highlight this line right here,

2:40you can actually see the command line

2:42that you would type in the terminal to be able to do this.

2:45See, the start icon or the little dragon icon

2:48is just basically a GUI overlay,

2:51because in a POSIX-based system,

2:53everything tries its best to run inside of the actual kernel

2:56or the terminal command line itself.

3:00Whereas inside of Windows,

3:01we usually get everything run as an executable

3:05inside of its own little environment.

3:07And that can be good and bad,

3:09depending on what we're trying to do.

3:10Whereas if the GUI fails here, if our start menu craps out

3:15and we don't see anything in the background

3:17and we just have nothing but terminal,

3:19we can still run these applications.

3:21Something to definitely keep in mind,

3:22and as we go through this course,

3:24it might be good to write some of these commands down.

3:26Hint, hint, nudge, nudge.

0:00<v ->All right everybody, I got a bit of a challenge for you</v>

0:02for those playing at home.

0:04And we've already been through our VirtualBox installation.

0:07We've already installed Kali.

0:09We've even taken a spin at taking a look at Metasploit,

0:12just on the surface of it, but we're gonna need a target.

0:16And that target in this course

0:18is probably going to be a Windows box.

0:20And more specifically,

0:21since we wanna stay as up to date as possible, Windows 11.

0:25Now we're gonna be using Windows 11 Pro

0:27as some of our targeting objectives.

0:30And for that, I just wanna go over a couple of things

0:32with you real quick.

0:34Now, I'm gonna be having the link for this

0:36right above the video,

0:39and this is the site where you could download

0:41the installation media, whether it be ISO

0:43or whichever format that you prefer to do

0:46for your Windows 11 installation.

0:49And we wanna stay inside of our virtual environment,

0:52which brings me to this right here,

0:54which is our challenge for this skill.

0:57Now, again, for those playing at home, as we've gone through

1:00on how to install the VirtualBox,

1:02you won't need to do that again,

1:04but we will have to go through the setup

1:06of installing a new operating system.

1:09Now, I wanted to show you this right here

1:11to let you know that I've already got

1:12our Windows 11 Pro demo box set up,

1:15and we're gonna take a look at some of the settings

1:17on that behind the scenes.

1:18But more specifically,

1:20I wanted to show you inside of Windows 11 itself,

1:22when you type in the winver command,

1:25we have Windows 11 version 22H2.

1:29Whichever version that you install of Windows 11,

1:32depending on when you actually view this skill,

1:34that's okay, we'll try to keep it within generalized terms

1:39as far as some of the targeting methods go.

1:41That's okay, I'm gonna close that out

1:43and then I'm gonna pop back over to VirtualBox for a second

1:46just to go over some of my settings,

1:48just so you can get an idea or hints

1:50on how to do this on your own.

1:52So we'll Right Click on the actual Windows 11 VM

1:54that's running and go into our settings.

1:58And inside of system,

1:59you can see that I have the base memory set at eight gigs,

2:02and then I have the default chip set.

2:06I have the the default boot orders.

2:09And then under the processor tab,

2:10you can see that I have it set at two cores.

2:13And this is some of the stuff that we went over

2:15when we were initializing our Kali box to begin with.

2:18And do keep in mind that if you decide to run

2:20both of these boxes at the same time,

2:22you will still need an ample amount of resources

2:24to overflow, make sure that you have everything in order.

2:29Because if they're running two processors

2:32on the Windows 11 VM and two processors on the Kali VM,

2:36we'll definitely need more than four, logically, at least,

2:41for the system overall.

2:42Now, this one right here has 12 logical sockets

2:45for the processor, so that leaves us eight to mess with

2:48here on the host system itself.

2:51And inside of storage,

2:53you can see that I have the Windows 11 VDI,

2:55and if I select it, we have our location,

2:58Which in the D Drive VirtualBox folder

3:01that we created for our Kali VM.

3:05Now, I created a sub Windows 11 folder

3:08and moved everything inside of there,

3:09so I can kind of compartmentalize everything.

3:11But these are just some of the things to think about

3:13as we start building out our targeting boxes.

3:17Definitely some of the things to keep in mind

3:19as you start to progress

3:21and make your own virtual environment inside a VirtualBox,

3:25and remember that it needs to be on the same network

3:28as well too,

3:30but leaving everything by default on the network

3:32during installation will take care of that for us

3:35automatically.

3:35As this course continues,

3:37we'll talk about network segmentation

3:39and how to divide that up inside of VirtualBox

3:41to replicate some different VLANs,

3:44different networking requirements, routing, subnets,

3:46et cetera, et cetera.

3:48But definitely keep this in mind

3:49and know that this won't be the last time

3:52that we're inside creating VMs inside a VirtualBox.

0:00<v ->We have a lot of our preparatory work out of the way,</v>

0:02and we got a basic understanding of our virtual environment

0:05inside a virtual box, and we have Kali installed,

0:08and we're even introduced ever so briefly to Metasploit.

0:13So let's go ahead and start knocking out those objectives

0:15one by one as we start making our way

0:17through CompTIA CySA+.

0:21I hope this has been informative for you,

0:22and I'd like to thank you for viewing.