Pass ECCouncil CEH 312-50 Exam in First Attempt Easily

Build Your Lab - In the Future We will offer an Online Solution

1. Create A VeraCrypt Container to Protect Your Laptop or Desktop

I'm going to show you a trick that you are going to thank me a million times over for showing you this.I know for a fact that you are going to be using the same machine that you use for work, for school, or for many other things as you do for doing this hacking course. And oh, wouldn't it be nice for us to separate those things? As a matter of fact, if you have antivirus on your machine and we download some files, more than likely the next day when you get up, those files won't be there because they'll be recognised as malware. I'm going to solve that problem for you. What we're going to do is we're going tocreate what I used to call a TrueCrypt container. In reality, we're now using something called VeraCrit. So we're going to go out to Veracript, and we're going to download the latest version.

So I'm going to go here and download Veracript, and we're going to download the one for the operating system that you're using. Now, I'm going to be doing all my demonstrations on Windows. And so I'm going to be downloading the one for Windows and accepting the terms of service. I'm going to tell it I want it to install for all users—that kind of thing. And what I'm going to be doing right here is I'mgoing to be creating, for lack of a better word, an isolated bubble that I'm going to be keeping all of myVMs, I'm going to be keeping all of my malware. I'm going to be keeping all of my nasty little things that you would typically use when you're using things for ethical hacking. It's installed. I'm going to click on Finish, okay? Now the first thing it's going to do is, "I want to go ahead and create a new volume, all right?" Now I'm going to create an encrypted file container. I could create a non-system partition drive. I don't want to do that. I can encrypt the system partition or an entire drive. I don't want to do that because I want to be able to move this from file to file. And maybe I want to be able to take this and put it onto a portable drive and move it from place to place. So what I'm going to do is I'm going to create an encrypted file container, all right? I don't want it to be hidden. I want it to be a standard volume. and it's going to say if I want to select a file. TrueCrypt now always ends theirs with TC. Now imagine that Veracript is probably going to be a VC. Let's see if I can write E.

And I'm going to put it underneath the TrueCrypt container, underneath work, and I'm going to put it here, and I'm going to call this the Ethical Hacker Container, see? And I'm guessing that's what it's going to use, all right? and I'm going to click on next. It's basically using AES sha.512, and that's plenty fine for me. Free space on the drive is 1.1 terabytes. I want to be able to use at least about 125 gigs of hard drive space. So I'm going to say gigabytes, and I want to say 125. All right, I'm going to say that next. Now, the password is important because if I forget it, it won't be a good boating trip. I'm going to say I do want to store large files, and the file system I wanted to use is NTFS. And it's asking me to create some randomness by using my mouse movement. Okay. And I'm going to go ahead and say what I want to format. I'll pause the video. Now, once your volume has been created, what we're going to do is mount that as a drive letter. So what we're going to need to do is we'regoing to pick the select File button and we're goingto navigate to where we saved that image. So I'm going to click on local drives on mine, and I'm going to tell it where I put that. All right? And in my case, I named it the Ethical HackerContainer VC. So in this case, right here, it's pointing to where it's located, and I'm going to pick drive letter O as my drive letter. I'm going to click on Mount, and I'm going to put in the password. So what's going to happen right here is that it's simply going to mount that drive letter, drive letter O, and it's going to be completely separate from the rest of my system. And there you have it. All I need to do now is double click on that, and I'll have everything that's within that particular drive letter. What I'm going to do is store everything inside of my drive "O." That way, all of my virtual machines, all of the malware that I download, and everything that I do in my ethical hacker environment will be stored on that drive letter O, and it will not interfere with anything else that I do in my production environment.

Naturally, I'll want to take my antivirus software and instruct it to ignore anything on drive letter O. This is the best way that I've found to be able to get double duty out of your laptop and your work machine, all right? Now, if you are using your work machine, make sure your boss and your upper echelon are familiar with what you are doing, but make sure that you store all of this information on there because your antivirus will come back and clean house, and it will light this up like a Christmas tree. So make sure you keep this somewhere safe and disconnect it so it can't get to it. This is without a doubt the best thing you can do. So when you download all of the VMs, you should download them to that drive letter O. And I'm going to suggest some hierarchy for you to use. So let's go over here, and I'm going to just go ahead and open up my drive letter O. And I'm going to create a directory out here. And the directory is out here; I'm going to call VMs. All right? That's where I'm going to put, guess what? I'm going to create another one out here that I'm going to call an ISO file. There will be a number of files that are utilities.

One of them is called Udemy Portable ISO, and you'll want to use and mount it for a variety of purposes. There's also going to be some labs, and there are going to be some test questions. There's going to be some cheat sheetsand some various things like that. It really doesn't matter as long as you keep track of your own bookkeeping system. Now, I'm going to make suggestions as we go along, but it's going to be hard for me to keep track and tell you where you put them. If you don't remember yourself, keep in mind that VMware Workstation is going to want to open up the drive letter off of CCove, your personal directory, and then virtual machines. We don't want this. You're going to want to point it to drive letter O, then VMs, and then open them up from there. Okay? So that's where you're going to open up all of your VMs. It will also be perplexing to you because when you create and install the files used in the open virtualization format, it will also attempt to install them on your local C drive beneath your Documents folder. You're going to want to redirect that underneath the drive letter O. Now I'm going to walk you through that on the very first one to make sure that you put that in the correct place. Otherwise, you're going to be searching all over for it. And more than likely, you're going to end up having stuff strewn all over the place. And it's going to completely defeat the purpose of having this encrypted folder.

2. Build a Manual Lab 01

To begin building our lab, we must first visit VMware and obtain VMware Workstation Professional. Now the easiest way to do that is to actually go out to VMware and register for a free evaluation, which will be for 30 days. They may be for 60 days now, but you need to log in with your user ID and password. They will send an email back somewhere looking for you. Click on it. I happened to have a catch-all email address on my domain, and so I can log in with whatever name I want to make up. So I'm just going to go ahead and login if I come over here to do my evaluations.

And one of them is not VMware Workstation, so I can go ahead and download that. If you're using a Mac, you can also download VMware Fusion Pro. But I'm going to demonstrate how to log in and use VMware Workstation Pro. I'm simply going to download the free trial. And this is Workstation Pro 12.5, and you have the choice of downloading it for Windows or for Linux. And it looks like they no longer offer a 32-bit version. So you need to download this one for a 64-bit version of Windows or Linux. So I'm going to go ahead and download it as soon as it gets downloaded and I get started with the install. I'll be right back. Now I started the install, and it's going ahead and installing, and this is kind of what it looks like. It's computing the space requirements, and so on and so forth. Now the reason that we are installing VMware Workstation Pro as opposed to VMware Player, which never expires, is that VMware Workstation Pro will allow us to snapshot something and roll back that snapshot. That's going to be important for us in our rootkit lab. So I'm just going to click on "Next." I'm going to leave that off there and check for updates, so on and so forth. Go through the rest of it.

Now I'm going to pause the video, so otherwise it's about as exciting as watching paint dry. So let's just hold on for just a moment. So as you can see right now, it's gone up to where it's asking us to enter in a licence or push finish. Now of course, we don't have a licence for this, and VMware won't give us one until we pay for it. So we'll just collect the snow telling us that I need to restart my system for configuration changes to take effect. and I'll be back when that's done. The first time you pull it up, it may prompt you to enter a license, or you can choose to skip. You can also just choose the trial period, and that's going to give you 30 to 60 days, depending on what they're doing right now. VMware also gives a student discount, and so any type of student ID, whether you make one or have one, will work. Simply send a copy of that to VMware, and they will provide you with the product for $99 USD. Now, the goal here is not necessarily to spend a lot of money, but to get you the education that you need. and I think it's a fantastic product. $99 is a great price. But I'm sure with some of the other things we've covered, you probably found out how to obtain serial numbers for this as well. One thing I want to emphasise is that you should not run the serial number generator on the same computer that you installed it on. This is a common ploy for hackers. There's no free lunch. They want your computer. They want to take over your computer or something like that. And so if you started up a VM, stuck it into the VM, ran that, and then got rid of the VM, that's perfectly fine. Again, not that you would do that.

3. Lab Legalities

It never ceases to amaze me that some bureaucrats gum up the works when you're just trying to educate individuals on how things work. In this section, I'm going into title lab legalities. For the longest time, Microsoft refused to even let us use a trial version of Microsoft Windows. They have since relaxed that rule, and now they are offering to provide us operating systems that are good for about 180 days. That gives us plenty of time to do whatever devil tree we want. Now. Part of being an ethical hacker is having ethics. And I tout myself as a white-hat hacker. And I would not be a very good role model if I asked you to steal software in order to further your education. So I want to keep us out of hot water. So there's got to be a way around this. I did some digging and came up with a solution with the help of a good friend of mine who's an attorney. There are loopholes. This is called a downgraded exception. This allows you to run a previous version, even an outdated and unsupported version, of a Microsoft operating system for testing purposes as long as you own a newer version. For example, if you own Windows Ten, youcould test 8817 Vista XP 2003, 2000 andback and be perfectly legal to doing so. Check with your attorney to make sure this meets with their approval and do not download the offered OS versions. If you do not have a newer OS version, I have included the commercial licencing brief (called Downgrade Writes for Microsoft Commercial Licensing OEM) and the full product licenses. Please review this with your attorney. I am not an attorney, although I play one on YouTube. So please do not hold me to this. So please check with your attorney to make sure that this is all up and running. It is my understanding that this is perfectly legal. The commercial licence brief has been attached for your perusal.

4. Getting to Know Your Win2k VM

Guys, I wanted to take a moment to let you know a couple of things. First off, all of the passwords for all ofthe virtual machines, possibly with the exception of KaliLinux which is root, and Tour which is Rootsfell backwards, but all of the passwords will be here in the description field. So if you ever wonder what the password is, all you need to do is click on View and then Console View, even when it's running, and it will display this for you. Now, I did want to mention a couple of things. If you're going to be working with other people, such as on a network, you should make sure to randomize your Mac addresses. So you're going to do that by clicking on the Network Adapter. You're going to click on Advanced and generate a new Mac address. Click okay. You should also change the name slightly to make it easier to remember. Maybe call it Tom or Bob or whoever you are.

One last thing is and I'll show you this when boot up because the Windows 2000 has a little bit of Idiosyncrasies, because it is an older operating system. And keep in mind, I'm using the older ones so I can show you stuff. It's not because I can't use the newer ones. Well, I can't use the newer ones to show you some of the stuff, but you need to make sure that you understand these concepts because you'll get asked questions on them. And I will be doing you a disservice unless I use these. Now I'm going to be using the newer operating systems as much as possible. All right? So I'm going to go ahead and power this machine on, and you'll see a couple of idiosyncrasies when it powers on. This is the first cosmetic error message. Just simply click "Okay." and another one. Now you're going to see where it says to press Control Alt Delete.To log into VMware, press control. Alt insert. And remember, if you don't remember what the name of it was, just click on Console View.

There's the password we're going to put in. Okay, so I'm going to put in the password and password, and you may even see a couple of more cosmetic error messages. You may not. All right, so it looks like this one looks okay. Do not try to update the VMware tools on this because it's using an older version of some libraries. Yes, I could update this, but then I couldn't show you some of the things I need to show you. Okay? If you are working in pairs, what you'regoing to want to do is you're goingto want to right click on my computer,click on Properties, click on Network Identification. again on properties. And this name right here will need to be different than the other ones within your same network segment. So if your name is Bob or Rob or whatever, It simply needs to be unique. That is just as good as anything else. You want to try and keep this under 15 characters because we're going to be showing you some things with Net BIOS. And Net BIOS requires that we have 15 characters. So I'm going to call this win two Ks, Master. All right, click okay. Now if you're not working with anyone else and you're doing this by yourself, then you're going to be just fine because this is the only one that you'll have on your system. Before I actually restart, I'm going to show you a couple of things that I've already added here. Items are usually found in the lab folder when we do our lab. Now in the lab folders, we have various pieces. We bought one called Elite Wrap. We'll be using Get Admin, PW Dump Sub 7, This one right here is one I do want to mention to you. and here under folder options, even though we know the extensions of them. All right? So I'm going to click, okay? And as you can see, this is specifically named to generate user passwords: BH TXT. Now, if an overzealous student double-clicks on it with the TXT, nothing happens. It will simply open it up. As a matter of fact, I can show you what it's going to do: it's going to add all of these users so that we can crack passwords in the future. Okay, so what you'll do is you'll just simply renamethat and take off that TXT extension when you to. And then you'll double click on it, and you'll have about 1000 users without having to type them in. So that's going to work out really well.

5. Getting to Know Your XPAttacker VM

Okay, so I'm going to go ahead and show you getting to know the XP attacker from my online labhoping to make available to you at some time herein the fall or perhaps next year. But be that as it may, it's exactly the same virtual machine. So naturally, we're going to have our same tools and things of that nature in here. And of course we're going to have the lab folders, which are the more popular ones that we're going to be using in here. The wind is XP Rootkit and the XPR PC exploit GUI The one I want to really call your attention to is this one. The little double greater than sign right here under security What we've done right here is basically take all of the tools that we'll be using and put them right here. Of course, you could look for these tools by going to the start menu and clicking on programmes and seeing if you can navigate and find them that way as well. But you know how sometimes a perfect example might be KLC is called SMAC, which stands for Switch Mac Address.

All right, so what we've done right here is we've just basically named all the tools right here, and we didn't call it KLC here, we call it Smack, which is what you would expect. All right? So all the tools that we'll be using here have already been installed and are ready to d and arSo you're not going to have to go in and do a whole bunch of things in here. All right? So that's going to make it kind of nice. We're going to have a number of utilities and things of that nature. We're going to have some anonymizing utilities like Jack. We'll have utilities like the Engage packet builder that I'll use, where we'll use this to illustrate the flags on a TCP packet, how TCP fragmentation works, and a number of things like that. So that's going to be very helpful as well. And so I wanted to make sure that you were aware of this. All right? And naturally you're aware of the refresh desktop command; don't trust this information here unless you refresh the desktop with this button. Okay? Now, naturally, you could open up a command prompt and get this information with IP configuration, but it doesn't automatically refresh. So you're going to want to refresh the desktop, and then you can pretty much trust that information. All right, so that's just a real quick overview of the XP hacker, alright?

6. Getting to Know You Win7 VM

Now, I wanted to give you just a little bit of a go-through on the Windows 7 machine. Now a couple of things that we're going to need to be aware of are that I've got something called Webgoat, the Net.net version of Webgoat. There's also a webgoat that we'll use in some other sections. Now, if you haven't noticed it by now, I'mgiving you all the machines that I'm going tobe using for a whole range of courses. And so if you end up liking this course, I'm going to be doing courses on certifying for the GIC GPN. I'm going to be doing courses on certifying for the mile-two CPTs course. So you'll be able to get a lot of certification courses out of this. But I'm going to be using mostly the core of the original, and then I'm going to deviate from the original by showing you things that you need to know. Everyone should understand the fundamentals.

So I'm going to show you things that are a little bit different than some of the other ones. So unless I tell you to actually download and install these, you may wish not to do this. A couple of things that we are going to have We're going to have something called mini cats here. And this is going to if you're not familiar withthis, this is absolutely going to knock your socks off. A couple of things I need you to make sure you do not do: please make sure that you do not upgrade any of these virtual machines because I need them to be at a certain level to pull off some of the things that I want to show you. And while this particular machine is perfectly legal because I downloaded it from the IE Windows Seven thing, you know how things go. I forgot to make a snapshot of it. And so it's timed out and says the copy is not genuine. It really is, but in reality, in Windows Seven, it doesn't do anything but give you this little nasty message.

So if you can get over that little nasty message there, then we're going to be in good shape. Windows Eight and Windows Twelve, on the other hand, will reboot after a little while. So you probably need to make some other adjustments. Okay, so I'm not going to click on restart now because I don't want to do that. We're going to refresh our desktop, and then the desktop is going to come in here and show us what our current IP address is. And we've got a number of little things that are inherent that I'll show you as we go through here.

Silverlight maintenance. And I'm even going to be doing a mobile hacking course. And I'll be using this Windows Seven for that mobile hacking course. I think that's about it for this one. And again, if you need to know what address to log on to, simply come out here. Here's where all of the addresses are to log in. Now, I'm not going to go through colienic and metasploitable because I'll go through those as we use those, all right? But I wanted to make sure that you're familiar with where I put some of this stuff so that you'll be a little bit familiar with it as we go through some of the labs. Look forward to making this the best course you've ever had.

Hide