Embedded Files
One of our first labs during our actual Cybersecurity unit was a sandboxing simulation. We used a virtual machine (a digital computer with a computer) to simulate an environment that has been infected with a virus. While also getting rid of the virus.
We used the WannaCry ransomware and Bonzi Buddy adware.
(sadly the Bonzi Buddy adware would not work)
The WannaCry ransomware worked. When the VM was infected by the ransomware I was not able to open any files or applications. I was immediatley redirected to these applications shown by the images. These show the ransomware in action, it demands payment through Bitcoin to give back control and files on the machine.
If you would like to see the lab document simply click on the link of the title.
Kali Linux and CLI
Our second lab was learning commands for CLI(command line interface) we used Kali Linux to create files and manipulate them all withing CLI.
We used commands like ls witch lists everything that is present in the folder/directory you are currently in.
We used the cd command to navigate through CLI, cd stands for change directory, so it essentially its used to change the folder/directory you are in.
Creating Malware Project
Our project for our first marking period was to create a ransomware(malware where the attacker demands money if the victim wants their information back)
This was our ransomware code, this code is designed to hide the victims own data by encrypting it from them so that the only way for the victim to get their information back would be to pay.
This was our decryption code, this code undo's the previous encryption after the target has sent the payment.
Server Password Cracking
SSH Onto A Server
SSH Onto A Server
In this lab we simulated a simpler version of breaking into a server utilizing the Kali Linux Operating System and the SSH protocol. This server was a Raspberry Pi.
SSH is a remote access protocal as it is used to access computers and systems remotely.
Using the information from the screenshot we were able to gather the private IP address of the Raspberry Pi, this will allow us to initiate the attack.
Using the "sudo ssh Hackter@10.197.145.185" command we are able to remotely login to the Raspberry Pi the only problem being that we don't have the password. So we will proceed to do a Brute Force attack, a brute force attack is where we try to input all possible combinations but that is very slow when doing manually, it also didn't work.
After trying a brute force attack the next type of attack we performed was a dictionary attack, is an attack that uses a list of possible passwords that are run through the system to find the real password. We used the "sudo hydra -l "Hakhter" -p hackedwords.txt 10.197.145.185 ssh" command (-l is specifying that when logging in the Hakhter username is used while -p is specifying that passwrods from the hackedwords.txt are being used.) It took about 11 minutes to find the right password, Goku44.
Now with the knolage of the actual password we were able to actually login to the Rasberry Pi server as shown with the fact that the imput section has now changed to "Hakhter@HakhterPi:~$" this shows that my CLI now shows connection to the server, now I can access the server the same way i would if I wasn't accessing it remotely.
Page updated
Report abuse