Hack your first website (legally in a safe environment) and experience an ethical hacker's job.
Offensive Security is about thinking like an attacker to find weaknesses before real hackers do.
In this room, you'll hack your first website in a safe and legal environment to see how ethical hackers operate.
Which term describes simulating a hacker's actions to find weaknesses?
This room uses a virtual desktop to simulate a real system. A browser will automatically open, displaying FakeBank, a fake banking application. This is what you will be targeting.
What is the bank account number in the FakeBank application?
Find a weakness in the FakeBank application. One common mistake is leaving hidden pages accessible.
Open the terminal on the machine. You will be using this to run your first hacking tool, dirbuster. The terminal icon looks like this:
Let's launch the terminal by clicking the green button below:
To find hidden pages using Dirbuster, we will use dirb and the URL that we wish to search:
dirb http://fakebank.thmAny lines from the output that start with + are pages that have been found. Dirb will find two URLs.
Dirb found one URL, http://fakebank.thm/images.
What is the other hidden URL?
You should now have found a hidden admin panel that lets you add money to your account.
To open this URL in the browser of the simulated desktop:
/bank-transfer to the URL in the browser.
Use your account number 8881 and deposit $2000 (or more). After depositing, return to your account page and confirm the balance is now positive.
When your balance turns positive, a pop-up with green text appears.
Enter the green words as the answer (ALL CAPS)
Add the following: