Hello and welcome to this lecture.
So in the previous lecture we saw how we can just use that command to make the payload bay the payload
was completely not right because it was a C in this compiler virgin.
There was not a payload that we want to create.
So if we go over here in the source it was over here.
But why we go to this compilers and it was not converted to DOD EMC and that there is no doubt the payload
dirty sexy.
So what has happened is basically in this module are basically while making the payload these were the
some of these payload options like there was user name processors so that also matters while making
the payload.
So if you just make any mistake or if it is customized that is beyond its capability then it is not
going to execute our basically our compiler is not going to make us that payload.
So what do you have to do is you have to be inside sort and boundary in order to make that payload.
So let's make that correctly in this selector now.
So first of all what I want to do is let me just make this a little bit bigger.
So I've that this is the veil.
So I have just opened this veil you know how to open go to the snarls because we have here the optional.
So first of all let me show you this.
Go back to our computer.
And here we have these OPD.
So let me show you that in the inside this computer we have these OPD folder instead.
So pretty full you can see the veil.
So in order to open that simply open this will be WAY YOU'LL JUST GET THESE console or you'll just get
this frame again.
So in order to make these so first of all you have to use that is now in this case I have to list first.
So I'll just say list and there is all the payload I want to use these 15 no pillar.
So let's see ops and so one more time so I have this since this yellows.
That is the IP address of this column missing l bought to this entity and I haven't since the user name
let me just change the processes because let's say that if we want to make a unique let's say I want
to change these processors and I want one passes.
So let's check again options.
So it should be all in lowercase because it is the case sensitive.
You can see we have now said the processor is a one and now what do you want to do is simply type generate.
And this is the command that is going to generate as a payload.
So now let's give some names so in this case I want to give the name as a payload again and let's wait
for sorting time and let's see if this works or not so it has completely made us that this payload and
it has shown that this payload is inside over here which is this executable.
So in order to this go to this location first of all let's now be good over there from this user interface.
And this is inside this var library.
Vale is right here and it is in output.
And now you can see in this compiling source you will have these payload.
So let's go for this compile and you can see this is our pillar that is going to listen on that board.
And it is going to have that connection on that host.
So next thing what you need to do is you have to set a listener because while sending this payload to
the client blind to get the connection to the server.
So there should be some port that the server is going to listen so that that line too will this get
connection from that port.
So let's make that.
And in order to make that connection you have to this first of all use this console.
And this is the interface that is given by the meter reader so you can clearly see over here it is saying
meter interpreter.
So this is given are basically this is the framework or you can also say the enterprise that is going
to have us some handler in order to communicate with these columns since.
So let's make that console are basically that handler over here.
So let's create the new window and the interface that we are going to use is the MSF console.
So first of all the step MSF console.
That's it into and it is going to give us the application inside this terminal so let's wait for a moment.
It is going to take some time.
So now it is saying that it is starting the might exploit primo console.
And this is the framework that is giving us these village vision.
So let's go over here and first handler you have to use is to exploit Mark Di handler so this is a sort
of exploit.
So this is the handler that we are going to use to have the connections.
So it is done using the socket in the case of a Python programming.
So we'll see about that in the next upcoming sections.
But in the color it is so easy to do with this image of console.
So let's eat into now and you can see now we are inside this multi handler.
So the next thing what you can do is I'll just so options and let's see these adoptions but we don't
have anything over here.
That is the name of the payload or the whole host or real port.
So let's set that first.
So in order to set that is the same method that we just did in this valley vision.
So what you need to do is first of all set these payload the name.
So if you just see that we had written something that is in our live buried over here that is go meter
better and the reverse yes GDP is.
So we have to now use this name of a pillar right here.
So it is in these windows because first of all we have to see where this is going to be executed.
It is in the windows and the meter reader.
And after that you have to just give the name is reverse and okay it's the reverse.
Yes TTP is if you use the payload that is made by the veil that can be the reverse the DCP then you
have to type here the previous DCP if it is reversed says TTP you can just type reverse its GDP to make
sure that this is the name of your payload or basically it is what we have over here right here.
So you can see if we use this name Let us reverse DCP service.
You have to just type right over here and now if I hate into then less so Dobson's one more time and
you should see now that is we have this pillar now.
So it was hidden in the previous case.
Now we have this God this payload ups on right here.
So now you could clearly see we have this payload options and it is showing that it is Windows metropolitan
reverses previous.
So we can see here we have these two attribute that is name which is the El host and El port.
And this should be exactly the same which we use while making that payload.
So the list should be the IP address of Kali.
So I'll just say I'll host and it is 1 9 2 1 6 8 1.
And it is twelve.
So this is my colleague missing.
He'll host said airport now and that should be AT&T.
Now if you see one more time that is Dobson's you'll see we have now said inside this bailout option
that is they'll host and they'll board.
And this is the board that client is going to communicate with the server which is our limousine.
So less now type this exploit to or I.T. exploit to initiate this handler.
So now if I just said into then it is going to now listen on that board and you can clearly see it had
just started this reverse handler because this is reverse.
We had using this reverse DCP or reverse yesterday Piers bellowed.
That is the meaning of this reverse handler so what happens is this guy limousine is not going to interact
with our client.
Instead client a machine or a Windows machine come to communicate with us in this limousine so that
the firewall will get the permission or basically will thus get the permission to run the payload in
the client was in because it is the case that limousine is not going to interact if a limousine had
to interact with the client then it is not possible because there is antivirus is that will just block
our connection.
But in this case client Muhsin is going to communicate us in the limousine that means you can clearly
see that it is a reverse cell or you can also see this is a backdrop.
We'll also see the implementation in the next lecture and in the python leg.
So we will see how we can just use this backdoor to capture the key logs.
We'll see how to capture every information and we can also see how to capture this clean source will
make all of those in the python LEXA.
But for now you can see we have this handler here which is going to listen on that board.
So in the next Lexa will just make a simple delivery technique which will let get that payload delivered
to the client and blind to this download that and it will just execute.
And basically this is not the proper delivery method but you can iGEM or you can use some social engineering
technique like you can just e-mail it with something else or you can package it and making something
like you can say use the auto language in order to convert it to the video file so that it will be just
a genuine file for the client so that they will just downloaded the list install it.
So it's up to you of your imagination how you can just Creek or you can just entice your client to computer.
So this will be ready for this lecture in next leg so we'll see the simple delivery technique.
And will this implement this vale framework patterns or basically we have here.
That is a matter exploit that is going to now communicate with this client machine and we'll just execute
some of the commands in the client Amazon in the next Alexa soon the next one.