Welcome to this lecture.
So in this lecture we're going to talk about new packaging technique.
So we're going to learn about how to wrap our payload or this script with the help of PDL file so any
user that will open our payload are the script creeped out the biters will think that they're only opening
the video file but in that same PTO file they will also open the key logo or basically any viruses that
you can wrap.
So first of all you can open the item and you can see this is the same file that we're going to wrap
with.
So you could see we have this large on over here which is going to give us the information about the
password of that client and we're sending that result back to this email.
So now what we need to do here is we can just do something that is downloading some other file instead
of just Lasn.
So first of all what I want to do is instead of just downloading to the current location I want to change
the current location to something that is temporarily directory.
So what this does is basically we'll just download now this file are the lights on or any other file.
Not in the current directory because that can be suspicious for the user.
So instead we'll just download that in the temporary directory where user want to have any suspicion
because this is the temporary they can contain any files.
So in order to do that we have this temporary file dot and we have these gate temp directory.
So first of all we haven't imported maybe yes we haven't bought it.
So let's import this damn file and in this dim pile.
So in this temporary file module we have this get temp or directory meter.
So this is going to get us the temporary directory.
So next is we have to also import that waste module because now we have to change the current directory
to this temporary directory so that can be done with these it's a desire.
Come on in let me show you that this voice is not the platform is specific because this is the module
of the python.
That means it is going to work either in the Mac OS X or Linux or even in the windows.
So we are going to the states the direct you to now to this temporary directory after we teens that
we just download this file and just make you see that this is the file that we have in these survived
w w w and stammer.
Let's go to that place.
So it should be over here.
So let's see.
It should be in the file w w w and estimate and inside this file we have this last under EMC which is
basically going to download us that file and update this download.
You are going to execute and basically you can see we are just calling this a tick output because we
want the information of this lesson to be sent back to this information which is that simple information.
So next thing what I want to do is just before this so you can see this is our payload.
But before just downloading the payload let me just download in another file and in this case I want
to download to the user that is maybe the file.
So it should be on the same.
That is W W W W.
So let me just copy everything because this should be same instead of the file.
So finally it will be different.
So let me just copy here and pasted over here.
So instead of let's under DFT the first file I want to so is the paedophile.
So first of all let me open that in the file explorer.
So this will be normal paedophiles you can download any other paedophile.
So let me say this and now let me just go over here and our download is really let me just grab that
file let me just got it from the analysts.
Go and paste it in our web server.
So this has listen to that PDA.
So all you need to do is copy that name and let's go back to our buy some and instead of that last under
you see in here are basically the first we have to pass that these to find them.
So that should be listened to the video.
So first of all we're going to download that video and we are execute that.
So in order to execute we have this slow process and I'll just say be open.
And here we have to this run that download data.
So it is listen to da PDA.
So we are just running this and will say sale is true.
OK.
The D should be up for OK.
So we have now this be open method which is going to execute this in a different processes which does
not collide with this process which is take output and basically we'll just assign that result and send
it to this email.
So we had made this pillar now.
So this payload is going to do something that is first download this video and user will think that
it is just working with the PDA but inside it is a payload that will just surround the lesson and it
will just give the information that lesson can grab into this e-mail.
So first of all what you need to do is simply go to this project folder.
In this case I have this home and I have in despite some project.
So if you just remember in the previous lecture we have seen how to convert despite an filing to the
executive was from the Linux.
So we can do now easily with the help of a Linux so what they need to do is simply grab that file.
So that is download we file.
Let me copy this and let me just paste it over here button.
I don't want this python file to be sent.
I just want the file that is the excel file so let's convert this into the XY file you know how to convert.
So first of all I want to use this a wine which is the configuration and the part where we have this
by installer installed.
So it is in the wine and.
OK.
In the wine.
And it should be drive C inside this drive C see we have these Python twenty seven which is the folder
which has this script folder again.
And inside this is script we have installed these Python installer which is by installer which is a
dirty sexy file.
And this is going to just convert our download dot be way which is despite and file into the executable
is with only one file.
And I want no console.
And let me just read into it is going to work now and let me tell you what time it is going to bind
and build everything.
And it could see we have now this 2 folder and this is big file which is basically going to the source.
What is the modules are the library that it has use or this python file he'll use.
So inside this disk we have this now download dot excel file.
Let me just grab that.
Let's go back here and let me just paste you down here so I'll just remove this disc folder and everything
because the folder that we are interested is this download excel file.
And now what you can do is you can simply go over here and source for a virus total in order to check
if this sees the file that will be detected by any antivirus or not.
So let's go over here and I'll just choose a file and in my case it is this download dot EMC.
Let's see that.
And I have to also you can also taking the north distribute.
This is also good website so you can also take in this one but I personally like this divide total so
I just browse again and it is in the var w w w it's dismal.
And it is instead file and the name is download all the XY it is right here.
And let me just heat it can file again and now you can see that most of these application has detected
so big defender has detected so out of 69 23 has detected our files but it has also got bypassed by
the cosplay sky and some of these Web sites that these like McAfee but some of these like you can see
a Vita has detected obviously so many applications are many programs or P.C. will have disappeared that
means we have to just customize our program so that this list of detection will be smaller so you can
do by distancing with the python code.
So for now you can also take for the know distribute and it will also give the same information.
So let's go back and let's see how we can just sit on this and see the information so before that I
have to go to the window missing and the window missing first of all you have to go to this location
which is basically the host and before that I have to make sure that a party server is running so let
me just see if it is run OK it is running.
So now I wanted this download dot e XY so what do you can also do is simply you can type your download
dot EMC and you could see this is the you are all that has this payload so you can just send this you
URL in the form that no one will understand so you can use the services like bit late and you can this
OK convert your link in to the less suspicious link so you can just pasted that link and get that link
which is very much a Sartain version and after that you can use.
So here are what I need to do is simply download dot EMC and you could see it is same file let me say
this and uh let me just viewed the download.
It is this scanning in it is just giving us information that it has been detected by the windows defender.
And I want to just run it anyway.
So let's see.
So it has deleted this file.
Okay.
This has been detected now but we can just change this file as ways to run.
So before that because it has the lesson.
So that means he to the stage.
So let me just remove this from here and you should be off.
So I think it was off but it just
remove that so you can also draw anything in any way.
So I sit on it
so we do this again I have anyway so we'll see how we can modify it and we'll just get to in the next
lecture so soon the next one.