Hacking Using Metasploit with OTW (Linux Tutorial)

[@yanivhoffman]

Hi Everyone, my latest video with OTW about Metasploit fundamentals . Enjoy !

[@romeondlovu5911]

I like your videos which are at least 40 minutes to 1 hour. You never lose concentration and make you go back again and again if you didn't understand. These long 10, 12 to 15 Hours videos they're a turn off from the word go. Thank you guys for great content with David Bombal.

[@yanivhoffman]

@@romeondlovu5911 thx so much. Very nice of you

[@muhammadmoaz819]

Such an amazing video successfully ruined by the music in the background

[@yanivhoffman]

Thx for the feedback….. Appreciate it as I want to learn and improve

[@sararisotti6106]

I like the song it just needs to be lower than your voice

[@yanivhoffman]

Thx a lot for it from few and appreciate the feedback ❤️

[@bunnyslayer14]

It's not as bad as they make it seem haha. Great video

[@brianbrian5842]

​@@bunnyslayer14 Non native English speakers may have difficulty understanding what's being said with the music playing at the music to speech ratio in this video, especially if they have little exposure to the terms being used.

[@pavi013]

Amazing video, i just started reading OTW's books and my brain is like 🤯

[@yanivhoffman]

Great! Thx for watching

[@samha1513]

Where is the link to the book?

[@yanivhoffman]

@@samha1513 in the description of the video

[@samha1513]

@@yanivhoffman thanks got it.

[@anonymous4201]

Love the simple explanation provided here about Metasploit 👍 More videos like this please

[@yanivhoffman]

Thx for watching and nice feedback

[@GeorgeRagsdale-i7v]

Definitely. Amazing video but music is too loud and annoying. Love his channel though will continue to watch.

[@yanivhoffman]

yes apologise. got many similar feedbacks and will correct

[@Joke167]

תודה יניב . מחכה בקוצר רוח לכל סרטון שיוצא . כל אחד יותר טוב מהשני תודה מלך❤

[@yanivhoffman]

תודה רבה , מאד חשוב לי לשמוע ❤️

[@SammyRoblox]

Awesome video and editing 😮

[@yanivhoffman]

Thx a lot Appreciate it

[@canala7624]

Surprisingly, the music kept me in suspension and awake, good taste.

[@yanivhoffman]

Many complain on music so we aligned it in new videos but good to hear it helped here 😆

[@RoyPerez-drumnote]

Superb content as always, thank you Yaniv!

[@yanivhoffman]

Thx so much Roy ❤️

[@HusseinAyeni]

more subs ahead,you really deserve it

[@yanivhoffman]

Thx a lot man ❤️

[@myfirsthak]

There's hackers then there's occupy the web. Next level dude,

[@yanivhoffman]

🔥🔥🔥🔥🔥🔥

[@corneilius8681]

Love OTW content. I would like to have the music turned down a notch as it is slightly distracting to me. Otherwise great stuff!!!

[@yanivhoffman]

Thx a lot for similar comments and definitely will learn for the future

[@corneilius8681]

@@yanivhoffman thank you for the response!!! Look forward to more content.

[@Numbers1877]

Dude there is a huge window of text over your video, blocking the view

[@matteryoda]

finally a english speaker showing metasploit

[@yanivhoffman]

@@matteryoda thx a lot

[@elia180]

thank you Yaniv for the video . Note , the Otw website is chaotic , i couldn't understand what subscription to choose , i hope otw see this comment to update his website for a better one

[@yanivhoffman]

Hi buddy , long time. How are you ? I will forward the message. You can write me in private what are you looking for and I will guide you and help you

[@elia180]

@@yanivhoffman am fine , hope you do well , thank you Yaniv , i will send you in privet... 😃

[@JohnD0h_IT]

It should be great if you remove the background music from your video, cause it make it less clear to ear 100% of what OTW say!

[@yanivhoffman]

Yes learned from this mistake. Will not happen again

[@abzakherr]

really cool video, just wished if the music sound was lower, or i personally prefer no music at all.

[@yanivhoffman]

Thx so much. Indeed we had a rare issue with music so it impact the enjoyment of the video. Thx for the feedback…

[@Geengeleerde]

You need to make a playlist for a complete beginner. Also, maybe a knowledge roadmap, not a certification roadmap.

[@yanivhoffman]

great idea - will think about it

[@lilham9044]

Great video!!! love the background music

[@yanivhoffman]

Thx so much 🙏

[@marinob7433]

great introductory video for this great tool. thanx

[@yanivhoffman]

Thx a lot my friend

[@isaacmihaeli3261]

The video was excellent and very informativ.

[@yanivhoffman]

Thank you for watching . Music didn’t bother you? I got many complaints

[@kiaramugambi]

loving your videos

[@yanivhoffman]

❤️

[@happyeverafter1797]

A Quote & A Question Quote: "A door once opened may be stepped through in either direction." Question: Are these types of attacks like open doors? Whereby either side can step through, so that if the victim is aware and has the right tools can take over the attacker's system and give 'em a dose of their own medicine? AND if not, then how can we make so? ~ Tifkat *Quote Citation: Reinette, The Girl in the Fireplace, Doctor Who.

[@hamzahelmy]

Awesome video.. However, I need therapy to get that music out of my head :)

[@yanivhoffman]

@@hamzahelmy yes unfortunately we did mistake with audio . We will upload it again without the music

[@kongpanha1816]

thanks, needs more sir.

[@yanivhoffman]

Thx for watching ❤️

[@Darth_Necro]

What editing software is this?

[@systembreaker4651]

Should I do port forwarding to us metasploit

[@AJ3000_]

Let’s gooo!

[@yanivhoffman]

Lets Gooooo🔥🔥🔥

[@Darkregen9545]

You cant run http on any port. Im not sure why the professional hacker said that.

[@yanivhoffman]

You can’t indeed. You remember which part you heard it ? I will check again. Thx for your feedback , appreciate it

[@Darkregen9545]

Somewhere after the 33 minute mark

[@Darkregen9545]

33:47

[@Darkregen9545]

Port 80 and 8080 is the only ports accepting http while 443 is for https and https can use 8080 as well. Any other port uses TCP and Udp with other forms of udp for all other ports. Which is at least what I've been told.

[@yanivhoffman]

@@Darkregen9545 thx for the pin point. I will check it out. But in general - Yes, HTTP can run on ports other than the standard port 80. Port 8080 is a popular alternative, especially for development environments, proxy servers, or when the standard port is already in use or restricted. In fact, HTTP can run on virtually any port, as long as the client and server are configured to communicate over that specific port. Ports like 8080, 8000, and 8888 are commonly used alternatives for various purposes, including testing or running secondary web servers. So maybe it was not clarified enough

[@canala7624]

Awesome video.

[@yanivhoffman]

Thx a lot

[@konstantinrebrov675]

Very nice tutorial.

[@yanivhoffman]

Thx 🙏

[@davidlu1003]

very useful, thank you so much.😁😁😁

[@yanivhoffman]

Thx for watching

[@MeMe-ic6rc]

the music is so annoying

[@yanivhoffman]

Yes sorry for that. We learned from our mistake

[@actionstudio2506]

Please improve otw's audio quality.

[@yanivhoffman]

@@actionstudio2506 it actually was also my fault in this video . But thank You for the comment. We will improve

[@actionstudio2506]

@@yanivhoffman appreciate ur quick response 😊

[@Driftss]

The website isn’t working for me

[@yanivhoffman]

which one? what exactly doesnt work?

[@e2hawk21]

@@yanivhoffman otw website is down

[@StevenOwen-qo3wn]

Metasploit is always something I've seen as a training tool and nothing there really works on an even remotely hardened system.

[@dereklee2590]

How do I hack website for doing illegal activity

[@yanivhoffman]

We only educate on ethical hacking here , sorry

[@dereklee2590]

@@yanivhoffman U can help me their doing illegal activity

[@bunnyslayer14]

​@@yanivhoffmanI think he means that the website is doing unethical illegal activity, and he wants to stop it using hacking skills! Like DDoSing the Church of Scientology!

[@dereklee2590]

​@@yanivhoffman Why not these people are doing illegally no one is doing anything about it so why not help me do something about people doing illegal activity on the website

[@dereklee2590]

​@@yanivhoffman Help me so I can stop their doing illegal activity

[@E-Power2023]

All out dated not working now ...

[@ancour]

Does anyone know how to install kali in vps please need a video.

[@RustySilver-w1q]

OCTW ? not... is OTW

[@yanivhoffman]

Yes thumbnail will get update

[@00Jimmy00]

great video but i have few comments. 1. nmap is very noisy, IDS or similar system will detect it so even with -T0 switch. 2. background music in this video is not in background so much so i had trouble to hear OTW

[@yanivhoffman]

Thx a lot for this great feedback. On music I also got few other comments so taking it as something I will change or avoid in future. Thx a lot

[@EladSelaTV]

אלוף!

[@yanivhoffman]

היי ממש תודה ❤️

[@danielsoto2667]

the background music is so distracting cant hear OTW

[@yanivhoffman]

Yes terribly apologize . This will not happen again. We had some internal issue on our system and only after upload we notice and got many other feedbacks. So sorry

[@danielsoto2667]

it's all good! I am still watching @@yanivhoffman

[@iamwitchergeraltofrivia9670]

Next Video how to control security for iOS

[@yanivhoffman]

Good ideas 💡

[@sneakybeakycat]

מת עליך יניב

[@yanivhoffman]

תודה רבה ❤️

[@fanyfany596]

thanks

[@yanivhoffman]

Thx for watching ❤️

[@Chillsivabdp]

Bg music is ruined my concentration pls don't add any music...

[@yanivhoffman]

Yes true!!! fixed since then in newer video's

[@421sap]

God bless you abundantly, Yaniv Hoffman in Jesus' Amen ✝️✡️🇮🇱

[@carsonjamesiv2512]

😃👍

[@Joke167]

תודה!

[@yanivhoffman]

ואהוו ❤️❤️❤️

[@AnouarNeghmouchi]

Please Bro How to get Netflix Premium accounts for free?

[@DNETREAPER]

Music kills this video never play music when a Master is talking show respect.

[@yanivhoffman]

True and will not happen again

[@timecop1983Two]

New trick

[@yanivhoffman]

Thx a lot

[@Zeeshan3as]

Plss remove bg music

[@yanivhoffman]

yes I know. we did mistake there

[@iamwitchergeraltofrivia9670]

Ok more malware Protection with sandbox end endpoint Security

[@yanivhoffman]

Ok wait for upcoming video with Filipi Pires on malware coming at of this week

[@iamwitchergeraltofrivia9670]

@@yanivhoffmanok

[@iamwitchergeraltofrivia9670]

@@yanivhoffmanok hacking me i calling the police

[@yanivhoffman]

@@iamwitchergeraltofrivia9670 hahah only ethical hacking for educating . I don’t promote or support hacking without permission.

[@justinkassinger8238]

The music is stupid

[@netbin]

First!

[@yanivhoffman]

Nice ! ❤️

[@QuadDerrick]

why is the entire world stupid and uses this framework for exploits ? metasploit have taken over the exploit "marked" ,, i dont like it,, its seriously stupid to LOGIN ,,, and id'ing yourself , and reaching out to metaspolits database anytime u want to hack anything,, and not a single video i see of metasploit usage even mentioning it.. im old school,, i hate metaspolit, it have ruined the way exploits are made, used. and abused. its a tragedy.

[@yanivhoffman]

Im old school as well

[@QuadDerrick]

@@yanivhoffman oh video creator himself replying, cool. that do give me a chance to ,, well,, first confess i did not see all 48 minutes, and still go on to ask ,, did you warn people that metasploit is ,,, not a smart tool to use if you actually want to hack someone and not get caught ? seeing how 99& of metaspolit users will be signed in and identifiable in 99 more different ways by using metasploit , than by downloading a exploit from some "random" website, compiling it, running it. are you not sad to the core by thinking about how many young people falls into the trap of using this framework out of curiosity and getting them self caught ,, just for the share single purpose of your own amusement so you can present your self as a "ethical" person making a video ? saw video from beginning now, yea think we about same age old timer. have not seen all still but, i think my main question still is , how you going to execute metaspolits payloads from a remote machine ? im not going to load it up from my own machine if i am breaking into ,, anywhere real that is not my own home lab.. every video i see the video creator have kali pre installed and all is ready to go. nobody says anything about real world examples.

[@QuadDerrick]

@@yanivhoffman oh reply from the creator,, great, let me use the chance. I looked at your face i think, and yea well we about same age. Do you not have any empathy for the young children that will see your video and think "aah metasploit is a good thing to use on my local computer where i am logged in" and identifiable in 99 more ways, than they would be if they did things properly and had a remote machine they launched they'r exploit from ? u know,, to downloaded some exploit from some site , compiled it manually , run it. not saying that everyone needs to learn to compile but, in real world when you not sit in your lab , you do not have a metasploit framework on the compromised machine. you have wget if you lucky. why ,, and how how ,, have the entire world gone insane with this whitehat metasploit school crap? it is a badly made framework that barely holds together, that are for nobody but blue team \ whitehat \ double morale snake face people that do not think very far ahead or so i think.. but then again, the all oldest largest exploit publishers are also supporting metasploit exploits so,,, i dunno what to really think but, i do think that is under a lot of influence of big tech companys like google. i just dont think its a good thing... do you have any other inputs on this,, besides that your a old timer too ?

[@DEBO5]

All metasploit hashes are already detectable by every antivirus software. Actually establishing a reverse shell on a real life target would be extremely difficult

[@bunnyslayer14]

It's only detectible if you use it out of the box...you have to modify the payload obviously before attacking so the hash and everything are different and undetectable...not that hard if you know what you're doing...pen testers and black hats alike use metasploit all the time, but keep in mind that it's open source so millions of different "versions" probably exist

[@DEBO5]

@@bunnyslayer14 hashing isn't the only way to detect a payload there are heuristic based detection and other ways for an antivirus to catch a payload. Especially when they do pattern based payload detection there's only so many ways to obscure

[@DEBO5]

@@bunnyslayer14 and Metasploit works less well for Windows because it lacks a lot of post-exploit modules that are readily available in other frameworks, and the techniques employed by the meterpreter are first on the checklist of every antivirus software out there - "Hack like a Ghost" - SparcFlow