Welcome to this lecture.
So from this lecture on what we'll just start making the malware and basically will rate in these Python
cell and in the upcoming lecture.
Will this make a more bonds or basically we'll just update this simple payload which is just right in
this case.
So let's just start.
So first of all I mean this client side that you can see this is the Windows 10 missing.
So what we are going to do is import some of the modules as always and we'll just make a command that
will be executed on the command line or a cell or a terminal based on your platform.
So first of all I'll just say something that is import me so a process which is the module that is going
to execute our command under terminal.
So we have done this in many time in the previous lecture where we just made the backdoor repair cell
and we just executed it on the terminal.
So first thing what I'd want to make here is the command that we are going to run.
So in this case I want to just get all the directory of the current location I'm not using the OIS module
to get the part or anything we'll just execute this command under current location.
So now let's make use of this sub process module and here the method that I'm going to use is a P open
method and we have use this method also in the previous Lexus many time.
So here I want to just pass this Come on that we want to execute and it should be executed on this cell.
So I'm just saying that execute this command is a process on this cell.
So basically this be open is going to execute your command is a process and it do this return the result
in the same terminal.
So we can see that we have just created this command.
So this command which is desire is going to this to list out all the directories of the current location.
But if you want to execute some commands in the Linux or in the Mac OS X then you can do something like
the.
Yeah.
So this is going to list all of these files are a folder that is inside that current location.
But now I'm on these windows that means I have to do the area command.
So you could see only based on these command it is going to execute on the sale.
So this is the cross platform core where you can execute multiple commands based on your platform.
If I do something like let me say a dailies or a or you can also start with the sudo and if you do this
then it is going to be the payload for the Linux if you want to do for the Mac.
It is the same.
And if I do that is another command let me say give the masses and I want to just give the masses as
you have been had.
So these masses will be prone to on this machine which is the windows.
So this is the payload that is not going to work on the Linux or Mac OS X because this is the platform
specific at this command.
But the whole code other payload is cross platform but only the command which we just write here is
your specific platform based.
So if I just say directly that is desire.
This is not going to work under Linux or Mac OS X because we don't have any command that is desire in
the Linux you can also try it or whatever but in the case of this command prompt we can say if I just
say desire it is going to list all the directories in the current location.
So now let me say this we have executed or we have basically ruled our command or the simple my over
here.
So what I need to do is simply say this is the my way and give the python extension go in the deck stop
and I'll just say video if you are using the Mac OS X or Linux then you can simply just extend this
command to your platform is specific.
So in order to execute this malware all you need to do is again run your CRM delist navigate to the
folder where this malware is restored and in my case it is in the desktop if I use this list out the
directory you'll see that it is over here with the name of malware in order to execute that python file
as the same malware Derby way.
And now let me just hit into this is going through this list out all the directories over here which
is basically executing this be open come on and this will just execute that command and give us all
the information of the current directory is over here.
So you could see how easy it is to execute the command under seal so you could wonder why this is the
it otherwise it is called is a mile away.
Then we'll obviously modify discord in the upcoming Lexa like we can just get this information.
Are these the result of the command.
And we can just send this back to the hacker.
So one ways can be done by the socket.
We have already seen how to connect back to the server.
Basically in the previous lecture days just building the socket communication through the host and a
aboard and basically server we listen to the board and when there is a connection then the result will
be just sent back to the server so that can be the one way and the second way is to send to the email.
So in the upcoming licks what we're going to do is we are going to get some important information of
this client and we're going to just get that information and send that information to the email.
So we have to just configure the email and we have to just get all this information or the critical
information of this client and we'll just send that to the hackers email.
So that will be covered in the next letter.
So see you in the next one.