Switching things around a bit, we're now going to do this to Ubuntu using Kali as a live operating
system. I'll show you why here in a second. Now, there is a different version of Kali for this.
I already have it placed inside of your C drive hirons folder, and I will put the link below to
where you can get the Kali live OS version. Slightly different than the actual install
that we have in our virtual machine. This is more optimized to run inside of that memory
of the RAM. Now that we have all the settings done, because I did the exact same thing to
this one. I changed the boot order and added the ISO. We're going to start our Ubuntu desktop,
and it will go straight into the Kali loader. We're going to select live system AMD64.
Now, depending on the type of system, you may need to select something else,
because there are other architect types out there. So live system, we're going to go do it to it,
and this will take just a second. So I will skip straight to it when it's loaded.
That took about two minutes. I just wanted to let you know, it's also dependent upon the actual
system hardware that you have on that physical system. Now, why did I do this? Well, I wanted
to show you that when we go into file system, we see that there is a shadowed 106 gigabyte volume.
That 106 gigabyte volume that's kind of grayed out is the actual hard drive of the Ubuntu
operating system that's physically on the system. So in this case, we took a Ubuntu hard drive,
cloned it, and put it in our virtual environment, sent the original back. Now it mounted it,
and you can start scrolling through here and go into where you know, the passwords are stored at
Etsy shadow. So go inside of Etsy and we're going to search for shadow.
And you see it right there. We're going to open this up in mouse pad.
There we go. And permission denied because even in Kali OS or any other live operating system that
you go into, you still need to remember that there are file permissions on any file that was
already on a hard drive. So the way that you get around this is, is inside of the Etsy folder,
you right click and go to open as root. You'll notice that you have a orange warning that says
warning, you are in as root. So any changes that you make in here are applied to the actual hard
drive itself, which is something we would like to know. So shadow again, and we're going to double
click it. And right here, it opens up just fine. And we scroll down and you can see here, this is
the learners hashed password for that operating system. Now you may notice that the first part of
that hash starts with a six, meaning that this is a different type of hashing algorithm than what
Kali uses, but allow me to show you something real quick. Let me pop this up for you. I have here on
the documentation page of Ubuntu itself, that the different hash types that are supported for
password hashing on or in Ubuntu, for example, and you will notice that YesCrypt is there.
That's good information to know. And I'm going to show you why, but I also want to point out too,
that in the future that don't be afraid to pull up documentation of the operating system that
you're working with, just in case you need a little bit of tidbit like I did. So going back
to our Hyper-V manager in our lab here, the reason I pointed that out is because I want to open up my
Kali virtual machine. I already have it open right here. And if I open that up, you can see that I
already have the shadow for the Kali box loaded. I could very well just copy the selected part right
here, and I'm going to zoom in to show you. You'll notice that starts with a Y, meaning YesCrypt.
I could copy that line right there and paste it in the shadow file of the Ubuntu system,
and that would change the password for learner to whatever it is right here.
Time to roll for a bonus action. Can you do it?
So we're in our shadow file on the actual Ubuntu system itself. We're going to open up
the actual hash from our Kali system that we normally use. We're going to copy that
and replace just the part where it starts with the dollar sign and paste that in there.
Now it should look something like this. And if you remember that password from the Kali system
is Kali. So we're going to hit control S to save it, and we're going to go and shut down the system
first. Yep, like a normal Kali system, I can do this. Shut down the system, disengage the ISO for
the actual live OS in the settings, go into the DVD and none. And don't worry about the actual
boot order, because if it doesn't see anything in the DVD slot, it'll just continue. So we're
going to start up our Ubuntu desktop. And now that Ubuntu has started up, we're going to click
on learner for our password. And I want you to keep note of how many characters I'm putting in
here, because I can't show you my keyboard. K-A-L-I, four characters, because we changed
the password on this. We're going to hit enter. It's going to think about it because it's having
to go through its computations on that hash. And there you go. We're in that Ubuntu desktop
because we changed the actual shadow file using Kali live OS as a means of physical password
attacking.