YT YouTube2Text

YouTube2Text → Transcripts → YouTube transcript (uPbQNFuDGUs)

YouTube transcript (uPbQNFuDGUs) — Transcript

4,625 words · 702 segments · language en · Watch on YouTube

Open in transcriber Summarize with AI Download SRT/VTT

Full transcript

0:00You clicked this because you want to
0:01learn how to hack and you're tired of
0:03videos that promise to teach you then
0:05spend 20 minutes telling you to go learn
0:07network or learn Linux first and never
0:10actually show you anything. This is
0:12different. In the next few minutes
0:14you're going to break into a real
0:15computer with your own hands and you'll
0:18understand exactly how you did it. I'm
0:20going to put my hands on the keyboard
0:21with you. Every command, every click,
0:23every line that shows up on your screen
0:25explained. If you have never opened a
0:27terminal in your life you are exactly
0:30who I made this for. Here's what you'll
0:32walk away knowing. The [music] actual
0:33five-step process every professional
0:36hacker uses. How to scan a target and
0:38find its weak points. How to break in
0:41and what to do once you're inside. Not
0:43theory, the real skills, the ones
0:45companies pay six-figures for and we're
0:47not going to practice on anything
0:49illegal. There's a free website that
0:51gives you a real target machine built
0:53specifically for this. You attack it in
0:55your browser. Nothing to install,
0:57completely legal. So open a second tab
0:59right now because you're not going to
1:01watch me hack. You're going to hack
1:03right alongside me. Most people will
1:04watch this whole thing and never type a
1:06single command. They'll stay stuck
1:08forever. Be the one who actually follows
1:10along because 15 minutes from now you'll
1:13have done the thing you've been wanting
1:14to learn for real. Before we touch
1:17anything, one rule and it matters more
1:19than anything else in this video. You
1:21only hack machines you own or machines
1:24you have written permission to attack.
1:26The target we're using today is built
1:27[music] for this. It's legal. It's
1:29designed to be hacked by beginners
1:31learning exactly what you're learning.
1:33That's allowed. What's not allowed?
1:35Pointing these tools at a website, a
1:37network or a device you don't own. Even
1:40just scanning a stranger's system
1:41without permission [music] is a crime in
1:43most countries. Here's the first thing
1:45that's going to change how you see
1:47hacking forever. Hacking is not random
1:49typing until you get in. That's a movie.
1:52Real hacking is a process, a repeatable
1:54step-by-step process. And once you know
1:57it, every hack you ever attempt becomes
1:59the same five steps in the same order.
2:01Professional pen testers follow it.
2:03Government red teams follow it. Bug
2:05bounty hunters follow it. After today,
2:08you'll follow it, too. Write these down.
2:09[music]
2:10Five phases. Phase one, reconnaissance.
2:12You gather information about your
2:14target. Who is it? What is it? What's it
2:17running? Before you ever attack, you
2:19learn. Phase two, scanning. You map the
2:21target. You find its open doors, the
2:24services running behind them. This is
2:26where you find your way in. Phase three,
2:28[music]
2:28exploitation. You take a weakness you
2:30found and you use it to break in. Phase
2:33four, access. You're inside. Now you
2:35take control. You see what you can reach
2:38and you climb to the highest level of
2:39power on the machine. Phase [music]
2:41five, reporting. You document everything
2:43you found because in the real world,
2:45this is the part that pays. Companies
2:47hire you to find the holes, then tell
2:50them how to fix them. That's the entire
2:51craft. Recon, scan, exploit, access,
2:55report. Say it back in your head right
2:57now. Here's why this matters so much for
2:58you as a beginner. Most people drown
3:01because they think they need to memorize
3:02a thousand tricks.
3:04>> [music]
3:04>> They don't. You need to learn one
3:05process, then you just get better at
3:07each phase over time. A beginner thinks
3:09hacking is about secret knowledge. A
3:11professional knows it's about working
3:13the process patiently [music]
3:15every time. And here's the best part.
3:17We're not going to just talk about these
3:18five phases. We're going to walk through
3:20all five on a real machine together
3:22[music] starting right now. So let's get
3:24you set up. Okay, hands on keyboard.
3:26Let's get you set up. Follow along
3:28exactly. I'll wait for you at every
3:30step. Open a new tab. Go to
3:32tryhackme.com. This is the platform
3:34we're using. It's free to start. It
3:37gives you real machines to legally hack.
3:39And the best part, you don't install
3:41anything. Everything runs in your
3:43browser. If you're on a laptop you
3:44bought yesterday or a five-year-old
3:46machine, it doesn't matter. It all
3:48happens in the browser. Sign up for a
3:50free account, email and password. Takes
3:5330 seconds. I'll wait. Pause the video
3:55if you need to. Got your account? Good.
3:57Now, in the search bar at the top, type
3:59the word blue. Just blue. You're looking
4:02for a room called blue. A room is just
4:04TryHackMe's word for a guided hacking
4:06challenge. Click into the blue room.
4:08Now, why this machine? I picked blue on
4:11purpose. It's a Windows computer with a
4:13famous weakness. The exact kind of
4:16weakness that took down hospitals and
4:18companies across the world a few years
4:19ago. You're going to exploit that same
4:22weakness today as your very first hack.
4:25It's dramatic and it works every time.
4:27Perfect for your first win. Here's your
4:29first real action. On the room page,
4:31you'll see a button that says start
4:33machine. Click it.
4:35>> [music]
4:35>> This boots up your target, the actual
4:37computer you're going to hack. It takes
4:38about a minute to start. While it boots,
4:41a box appears, usually at the top of the
4:43page, and it shows you an IP address,
4:46something like [music] 10 10 and then
4:48two more numbers. IP address is your
4:51target. That's the address of the
4:52machine you're attacking. Write it down
4:55or just keep that box visible. You're
4:57going to need it constantly. Every tool
4:59you use, you point at that IP. Quick
5:02explanation, because I don't want you
5:04just copying. I want you understanding.
5:06IP address is just a location on a
5:08network, like a street address for a
5:10computer. When I say point your tool at
5:12the target, I mean send it to that IP.
5:15That's how your attacker machine finds
5:17the target machine across the network.
5:19Now, we need to use your attacker
5:20machine, the computer you attack from.
5:22On the room page, look for a button that
5:24says start attack box. Click it. The
5:27attack box is a ready-made hacking
5:28computer. It runs in your browser. It
5:31already has every tool we need
5:32pre-installed. You don't set up
5:34anything. It just appears on the right
5:36side of your screen. Give it a minute to
5:38load. When it loads, you'll see a
5:40desktop. It looks like a normal computer
5:42desktop, because it is one. It's just
5:44running in your browser and it's loaded
5:46with hacker tools. Now, [music]
5:49the part that scares every single
5:50beginner, the terminal on that attack
5:52box desktop. Find the icon that looks
5:55like a little black screen, usually in
5:57the taskbar. It might be called
5:59terminal. Click it. A black window opens
6:01with some text and a blinking cursor.
6:03Stop. [music] Take a breath. This black
6:05window is not scary. This is just where
6:08you type commands instead of clicking
6:09buttons. That's the only difference
6:11between this and your normal computer.
6:13Instead of clicking icons with the
6:15mouse, you type instructions with words.
6:17That's [music] it. That's all a terminal
6:19is. You type a command. You press enter.
6:22The computer does the thing. Then it
6:23shows you the result. Type, enter, read.
6:26[music] That's the entire rhythm of
6:28everything we're about to do. Let's
6:30prove it's not scary. In that black
6:32window, type this exact word,
6:35press enter. The terminal just told you
6:37which user you are on the attacker
6:39machine. You asked the computer a
6:40question in plain words. It answered.
6:43That's all a terminal is. A
6:44conversation. You just had your first
6:46one. So, let's recap where you are right
6:48now. You have a target machine running
6:50with an IP address. You have your
6:52attacker machine, the attack box, loaded
6:55with tools, and you have a terminal
6:57open, ready for commands. That's a
6:59complete professional hacking setup. You
7:01built it in under 2 minutes. Now, let's
7:03start the actual hack. Phase one,
7:05reconnaissance. Recon means gathering
7:08information before you attack. In the
7:09real world, on a paid job, this phase is
7:12huge. You'd research the company, find
7:15employee names and emails, map out their
7:17public websites, look at what technology
7:19they use. You learn everything you can
7:22before you touch anything. Why? Because
7:24you can't attack what you don't
7:25understand. The more you know about the
7:27target, the more ways in you'll find.
7:29Amateurs rush to attack. Professionals
7:31spend most of their time here, learning.
7:33But for our target today, recon is
7:35[music] simple. We already have the one
7:37thing we need, the target's IP address,
7:40that box on your screen. So, our recon
7:42question is short. What is this machine?
7:44What's running on it? Where are the
7:46doors? And to answer that, we move into
7:48the most important skill you will learn
7:50today, scanning. Phase two, scanning.
7:53Pay close attention here because this is
7:55the skill you will use in every single
7:57hack you ever do. Master this one tool
8:00and you're already ahead of most
8:01beginners. The tool is called Nmap.
8:04Nmap, short for network mapper, it's
8:06free. It's already installed on your
8:08attack box and it is the most important
8:10reconnaissance tool in the world. Every
8:12professional uses it every single day.
8:15Here's what Nmap actually does. Remember
8:16I said the target is like a building.
8:18Nmap walks around that building and
8:20checks every single door and window. It
8:23tells you which ones are open, which are
8:25locked, and what's [music] behind each
8:27open one. In computer terms, those doors
8:29are called ports. A port is just a
8:32numbered entrance into a computer. Each
8:34service running on a machine, a website,
8:36a file share, a remote login, sits
8:38behind a specific port. Find the open
8:41ports and you found your possible ways
8:43in. Let's run your first scan. Go to
8:45your terminal, the black window, and
8:47type this exactly, nmap, then a space,
8:51then your target's IP address. Now you
8:53wait. Nmap is knocking on every door. It
8:55takes a few seconds, maybe a minute.
8:57Don't touch anything. Let it work. And
8:59there it is. Nmap just gave you a list.
9:02Look at it. You'll see a column of
9:04numbers. Each one followed by the word
9:06open or closed. The open ones are what
9:09matter. You'll probably see port 135,
9:11port 139, and the important one, port
9:13445, all open. Right now you know the
9:16doors are open, but you don't know
9:18what's behind them yet. A basic scan
9:20only shows you the doors, not what's
9:22inside. So, let's go deeper. This is
9:24where you learn your first flag. A flag
9:26is just an option you add to a command.
9:28It changes what the tool does.
9:29>> [music]
9:30>> You add a flag by typing a space, then a
9:31dash, then a letter. Type this, nmap
9:34space {dash} capital S capital V space
9:38your IP. That {dash} capital S capital V
9:41means version detection. [music] Now,
9:43Nmap doesn't just tell you a door is
9:45open. It tells you exactly what service
9:47is running behind it and which version
9:49of that service. Press enter. Wait
9:52again. [music]
9:52This one takes a little longer. When it
9:54comes back, look at port 445 next to it.
9:58We'll now see a service name, something
10:00about Microsoft and Windows. Nmap is
10:03telling you this is a Windows machine
10:05and port 445 is running something called
10:07SMB, server message block. It's the
10:10service Windows uses to share files.
10:12This is the moment that matters. Write
10:14down what you see, [music] the operating
10:16system, Windows, the open port, 445, the
10:19service, SMB, because here's the secret
10:22at the center of all hacking. Those
10:24details are your lead, a specific
10:26service on a specific system. Old
10:29software has known weaknesses and when
10:31you know exactly what's running, you can
10:33go find exactly how to break it. Let's
10:35do one more scan, the smartest one.
10:38{dash} capital S capital C runs Nmap's
10:40built-in scripts. These are little
10:42automated checks that look for common
10:44problems. Sometimes, this single command
10:46finds the weakness for you
10:48automatically. Press enter, let it run.
10:51Stop and realize what you just did. You
10:53scanned a real machine. You found its
10:55open ports. You identified the operating
10:58system and you fingerprinted the exact
11:00service running on the target. That is
11:02professional reconnaissance. That's the
11:04first thing I do on every real
11:05engagement I get paid for. And you just
11:08did it on your first date. Quick
11:09question before we break in. Drop a
11:11comment with how many open ports your
11:13scan found. I want to see that you're
11:15actually following along, not just
11:17watching. Type your number, then keep
11:18going. Now you have your lead, Windows
11:20port 445 SMB. In the next phase, we turn
11:24that lead into a way in. This is where
11:26you find the weakness. Let's go. Look,
11:29if this video makes you actually want to
11:31learn hacking, not just watch it. I
11:33built a place for that. Welcome to the
11:35Hacker Academy. Here's some of the
11:37things you get instant access to. The
11:39OSINT Field Manual. Learn how to find
11:41anyone online from a single photo,
11:43username, or email. A full course on
11:46hacking websites and Wi-Fi hacking.
11:48Learn how to build your own AI hacking
11:50agent that runs on your computer 24/7.
11:52The full beginner to pro hacking guide.
11:55And the pro hacking cheat sheets I
11:56personally use every single day. For 9
11:58bucks a month, you get lifetime access
12:00locked at that price point. You can
12:02check it out via the link in the
12:03description. Phase three. Now we find
12:06the weakness. Here is the single most
12:08valuable skill in all of hacking, and
12:10almost nobody teaches it to beginners
12:12directly. So listen closely. Hacking is
12:14not about inventing attacks from
12:16scratch. It's about finding weaknesses
12:18that already exist in software that's
12:20out of date, and then using attacks that
12:23already exist, that other people have
12:25already built. Read that again in your
12:26head. You are not inventing anything.
12:29You are finding a known weakness and
12:31applying a known solution. That's the
12:33job. That realization alone puts you
12:35ahead of 90% of beginners who think they
12:38need to be a genius coder. You [music]
12:39don't. You need to know how to research.
12:42So let's research. You have your lead
12:44from the scan. Windows, [music] port
12:46445, the SMB service. Here's the
12:49process. You take that information and
12:52you go looking for known weaknesses in
12:54it. The simplest version, you literally
12:56search the internet. You'd search the
12:58service, the system, and the word
13:00vulnerability or exploit. But there's a
13:02faster way built right into your
13:04attacker machine. A tool called
13:06searchsploit. Searchsploit is a giant
13:08offline database of known working
13:10exploits, tens of thousands of them.
13:13Pre-built attacks for known weaknesses.
13:14It's already on your attack box. In your
13:16terminal, type searchsploit, then a
13:19space, then SMB Windows. Now simply
13:23press the enter key on your keyboard to
13:24continue. Look at what comes back. A
13:27list of known attacks against Windows
13:29SMB. These are real exploits. Each one
13:32targets a specific weakness. You're
13:33reading a menu of ways into Windows
13:35machines. Now, for our specific target,
13:38[music] there's one weakness that
13:40matters, and it has a name you need to
13:42know. It's officially called MS17-010,
13:46but the world knows it by another name.
13:48The infamous name you need to know is
13:50EternalBlue. Let me tell you what you're
13:51looking at because this is not just any
13:53vulnerability. EternalBlue was developed
13:55in secret by the National Security
13:57Agency, the NSA, as a cyber weapon. It
14:00was stolen, leaked to the public, and
14:03then used to launch the largest
14:04ransomware attack in history. It shut
14:06down hospitals, banks, [music] shipping
14:08companies across 150 countries in a
14:11single weekend. And that exact weakness
14:14is sitting on the machine in front of
14:15you right now, waiting for you to use
14:17it. That's why I picked this machine for
14:19your first hack. You're not breaking
14:21into some toy. You're about to run one
14:23of the most infamous exploits in the
14:25history of computing on your first day.
14:27Let me break that down so you're not
14:28just copying. -p 445 tells Nmap only
14:32look at port 445. --script tells Nmap to
14:36run one specific check, and
14:37smb-vuln-ms17-010
14:41is [music] the name of the check for
14:42EternalBlue. Now, press enter again and
14:45wait for the results to appear. And
14:46there's your answer. Look for one word
14:48in the output, vulnerable. If you see
14:50it, the machine is wide open to
14:52EternalBlue. You've confirmed your way
14:54in. Stop and appreciate this for a
14:56second. You scanned the target. You
14:58identified what it was [music] running.
14:59You researched a known weakness, and you
15:01confirmed that weakness exists. That is
15:04the complete vulnerability research
15:06process, the same process a professional
15:08follows on a real engagement. You just
15:10did it. Now comes the part you've been
15:12waiting for since you clicked this
15:14video. We take this weakness, and we use
15:16it to break in. Phase four,
15:18exploitation. Let's get inside. We're
15:20going to use the most famous hacking
15:22tool in the world. It's called
15:24Metasploit. Think of it as a massive
15:26toolbox of ready-made exploits,
15:28thousands of them, pre-built. All you do
15:30is pick the right one, point it at your
15:32target, and fire. It's already installed
15:34on your attack box. Let's open it. In
15:36your terminal, type this one word,
15:38msfconsole. Now, wait. The first time it
15:40opens, it takes a moment. You'll see
15:42some artwork appear, maybe a logo made
15:44of text. That's normal. That's
15:46Metasploit starting up. When it's ready,
15:48your prompt changes. Instead of the
15:50normal terminal line, you'll now see
15:53something that starts with msf and then
15:55a number. [music]
15:56That's how you know you're inside
15:57Metasploit now. You're in a different
15:59environment, a command center. First,
16:01[music] we find our exploit. In that msf
16:03prompt, type search space eternalblue.
16:07Press enter. Metasploit searches its
16:09database and shows you a list of modules
16:11related to eternalblue. Look at the
16:13list. You'll see entries with numbers
16:15next to them, 0, [music] 1, 2, and so
16:18on. We want the main exploit. It's the
16:20one with ms17-010
16:22in the name and the word eternalblue.
16:24Here's the easy way to select it. Each
16:26item has a number on the left. Find the
16:28one that says exploit and has
16:30eternalblue and ms17_010
16:33in the path. Note its number. Usually,
16:35it's 0. To select it, type use space and
16:38that number. So, if it's 0, you type use
16:41space 0, press enter. Watch your prompt
16:43again. It just changed. It now shows the
16:45name of the exploit in red. That's
16:47Metasploit telling you this exploit is
16:49now loaded and ready. You've picked your
16:51weapon. Now, we have to tell it two
16:53things, what to attack and where to send
16:55the results. First, what to attack, the
16:57target. In [music] Metasploit, the
16:59target is called RHOSTS, remote host,
17:01the machine you're attacking remotely.
17:03[music] Type set space r h o s t s
17:07space, and then your target's IP
17:09address, the one from the top of your
17:11screen. Second, where to send the
17:13results. When you break into the target,
17:14it It to call back to you, to your
17:16attacker machine. That callback address
17:18is called L-host, local host, it's you.
17:21Now, this is the one spot beginners get
17:23stuck. So, pay attention. You need your
17:25attack boxes own IP address, not the
17:28targets, yours. [music]
17:29On the attack box, your IP is usually
17:31shown somewhere on screen already. Often
17:33labeled as your VPN or tun0 address. If
17:36you can see it, use it. If you're not
17:38sure, there's a simple way. Open a
17:40second terminal and [music] type IP
17:42space A, press enter. Look for the
17:45address under something called tun0.
17:47That's your attacker IP. Once you have
17:49it, [music] back in Metasploit, type set
17:52space Lhost space and your attack box
17:55IP, press enter. Now, Metasploit knows
17:58both things, what to attack and where to
18:00send the shell when it gets in. Before
18:02we fire, let's do what professionals do.
18:04We confirm. Type check, press enter.
18:07Metasploit reaches out to the target,
18:09tests it and tells you. If you see the
18:11words, the target is vulnerable, you're
18:14about to succeed. That's the green
18:15light. Now, the moment. Type one word,
18:18exploit. Press enter. Watch the screen.
18:21You'll see lines start to appear.
18:22Metasploit is sending the attack. You'll
18:24see it sending the exploit, making the
18:26connection, and then, the line you're
18:28waiting for.
18:29>> [music]
18:29>> Meterpreter session one opened. Stop.
18:32Read that line. Meterpreter session
18:34open. That means you are in. You just
18:36broke into a Windows machine. The attack
18:38worked. You are now inside the target.
18:40If you see that line, take a breath
18:42because you just did the thing. The
18:43thing you clicked this video to learn.
18:45You hacked a computer. Now, quick
18:47reassurance because beginners panic
18:49here. After [music] it breaks in, your
18:51prompt changes again. It now says
18:53meterpreter with an arrow. That is not
18:56an error. That is the most beautiful
18:58word in hacking. It means you have a
18:59live connection into the machine you
19:01just compromised. You're not looking at
19:03your computer anymore. You're commanding
19:05theirs. If the exploit didn't work the
19:07first time, don't panic. It happens.
19:09Just type exploit and run it again.
19:11Sometimes Eternal Blue needs a second
19:13attempt. Run it twice. It almost always
19:15lands. So, take stock of what just
19:17happened. You opened Metasploit. You
19:19loaded the NSA's leaked exploit. You set
19:22your [music] target. You confirmed it
19:24was vulnerable, and you fired. And it
19:26worked. You have a live shell inside a
19:28Windows machine. That's not a simulation
19:30of hacking. That is [music] hacking, the
19:31real thing, and you're inside. Now,
19:33let's find out exactly how much power
19:35you have. Because what you're about to
19:37see surprises every beginner. Phase four
19:40continues. What to do once you're in.
19:42You're inside, but right now you have
19:44what's called a basic shell, a plain
19:46command line on the target. It works,
19:48but it's limited, and it can be
19:50unstable. It can drop on you. So, the
19:52first thing a professional does is
19:54upgrade to something better, a
19:55meterpreter shell. Meterpreter is a far
19:58more powerful way to control the
19:59machine. More commands, more stability,
20:02more control. So, let's upgrade. First,
20:05we set this shell aside without closing
20:07it. In your terminal, press control and
20:09Z at the same time. It'll ask if you
20:11want to background the session.
20:13>> [music]
20:13>> Type Y and press enter. That just parked
20:16your shell safely in the background.
20:17It's still alive. You just stepped away
20:19from it for a second. Now, we use a
20:21built-in Metasploit tool that upgrades a
20:23basic shell into a meterpreter shell.
20:25Type [music] search space shell
20:27{underscore} to {underscore} meterpreter
20:29and press enter. You'll see a module
20:31appear. Its path is post {slash} multi
20:33{slash} manage {slash} shell
20:35{underscore} to {underscore}
20:36meterpreter. Select [music] it, type use
20:39space, and the number next to it,
20:41usually zero, and press enter. Now, this
20:43tool needs to know which shell to
20:44upgrade, the one you just parked. Type
20:47set space session space one, and press
20:50enter. That points it at your
20:51backgrounded shell, session one. Now,
20:54type run and press enter. Metasploit
20:57takes your basic shell and upgrades it.
20:59In a few seconds, you'll see a new
21:00meterpreter session open. You just
21:02leveled up your access.
21:04>> [music]
21:04>> To jump into it, type sessions. Then,
21:06look at the list, find the one that says
21:08meterpreter, note its number, then type
21:11session space and that number. Press
21:13enter. Now the question every hacker
21:15asks, who am I? Type getuid and press
21:19enter. [music]
21:19Look at what it says, NT Authority
21:22backslash system. Stop. System is the
21:25single highest level of power on a
21:27Windows machine, higher than the
21:29administrator, higher than the owner.
21:31System means total control, every file,
21:34every password, every account, all of
21:37it, yours. Here's why that's remarkable.
21:39On most hacks, you break in as some weak
21:43limited user, and then you have to grind
21:45through a whole phase called privilege
21:48escalation, climbing your way up to the
21:50top. EternalBlue is so powerful it put
21:53you near the very top immediately. But
21:55here's a subtle thing the pros know.
21:57Being system is not the same as your
21:58process being stable as system. To lock
22:01in rock solid control, we migrate into a
22:03process that's already running as
22:05system. Type PS and press enter. This
22:08lists every running process on the
22:09machine. Look down the list, find one
22:11running as NT Authority system. A common
22:15reliable one is a process that handles
22:17Windows internals. Note the process ID,
22:20>> [music]
22:20>> then type migrate space and that process
22:22ID. Press enter. Metasploit moves your
22:25session into that stable process. Now
22:27your foothold is solid, it won't drop on
22:29you. This is exactly the move a real
22:31operator makes. Now let's collect the
22:33proof. The room wants you to find flags,
22:36hidden pieces of text that prove you had
22:37access. They're scattered in specific
22:40locations, the system root, a user's
22:42folder, the administrator's files. The
22:44fastest professional way to find them,
22:47drop into a shell on the target. Type
22:49shell and press enter. You're now in a
22:52Windows command line on their machine.
22:54Then you search the entire drive for
22:55anything named [music] flag. The flags
22:57are sitting in those key locations. As
22:59you find each one, you copy the text
23:02inside.
23:02>> [music]
23:02>> Then back on the Blue Room page in your
23:04browser, you paste each flag into its
23:06answer box and submit. And when that
23:08final answer turns green, that's it.
23:10[music] The room is solved, officially.
23:12You scanned the target, found its
23:14weakness, exploited it, upgraded your
23:17access,
23:17>> [music]
23:17>> migrated to a stable system process, and
23:20you proved your control. You completed a
23:22full, real-world attack chain. Take a
23:25real moment with that, because most
23:27people who say they want to learn
23:28hacking never get this far. They watch,
23:31they plan, they tell themselves someday.
23:34You didn't plan. You did it today. But
23:37owning the machine is only four of the
23:39five phases. There's one more, and in
23:42the real world, it's the phase that
23:43actually pays your salary. Let me show
23:45you the part that turns this from a
23:47hobby into a career. Phase five,
23:50reporting. And I know what you're
23:51thinking. Writing a report sounds like
23:53the most boring part of hacking. So let
23:56me change your mind in about 60 seconds.
23:58Here's the truth nobody tells beginners.
24:00The hacking you just did, the scanning,
24:03the exploiting, the breaking in, that's
24:05not what companies pay you for. They pay
24:07you for the report. Think about it. A
24:09company hires an ethical hacker, a
24:12penetration tester, to break into their
24:14systems on purpose. Why? Because they
24:17want to know where the holes are before
24:19a real criminal finds them. The break-in
24:21proves the hole exists, but the report
24:24is what let them fix it. The report is
24:26the product. It's literally the thing
24:28you deliver. It's the thing they're
24:30paying for. A hacker who can break in
24:32but can't write it up doesn't get hired
24:34twice. A hacker who can break in and
24:36explain it clearly names their price.

About this transcript

This page contains the full transcript of YouTube transcript (uPbQNFuDGUs) , generated from the public captions YouTube serves with the video. The transcript has 4,625 words across 702 segments, with the original timestamps preserved so you can click any line to jump to that moment in the embedded player.

What you can do with it

Use the transcript to take notes, quote the speaker, build a study guide, generate a summary with ChatGPT or Claude via the YouTube Summary tool, or export it as a timed subtitle file with YouTube to SRT. You can also re-open it in the transcriber to translate the transcript into 100+ languages.

Free YouTube transcript tool

YouTube2Text is a free YouTube transcript generator — no signup, no daily limit. Paste any YouTube link and get the full transcript instantly, with timestamps, click-to-jump, translation to 100+ languages, AI prompts for ChatGPT, Claude, and Gemini, and exports to TXT, SRT, VTT, or Markdown.