Hello and welcome to this lecture.
So in the previous lecture we just made this a payload under its crib where you can send the mail of
the input are basically the command that is inputted on the sill and executed over here and we just
get the result and we send that result through this chain mail method.
But you can see that this payload on a script is not quite practical because in this execution of this
script you have to get access to the client machine but in the practical you will never have that because
if you have access to the client Muhsin.
So that means that you don't need to hack anything.
You can simply go to the client and basically execute any command like a desire command everything.
But in the real life we don't have access to the client Muhsin that means we cannot execute this file
on the client must indirectly.
So we have to do some social engineering trick in order to get these files downloaded in the limousine.
So first of all in this letter we'll see how to make our download process and just execute it through
that and basically we'll see in the upcoming letter how do does make the payload much more advanced
and we'll also see the packaging technique.
So that client won't get suspicious and execute the command successfully on the client side.
So in this letter we're going to execute our download process.
So how we can just see the download process and basically allow us to see how to just get the grab the
file and basically and we'll see all of that in this Lexus so let's begin.
So we have this completed file but now will make use of this college Linux because we have this too
much since on the virtual machine which is this window machine which will be outlined.
And here is the limousine which is this machine and this will be our server side.
So I have just opened my byte I'm over here.
So let me just open my new file and here I want to just create a new python file and I'll just say this
is download.
So first of all as always you have to import some of the modules so in this case it will be a request
module.
And we haven't downloaded this request module.
So first of all go to the settings and here on your project end the project folder you'll have this
project interpreter go to this plus sign and list source for this request
so this will be your back is let me just press install this backwards and let you to give her time to
install the package makes your dear internet connects and is up and running so we have successfully
installed the packages on our interpreter.
Let's go back and less press this okay button.
Now you could see it will not so any right now because the request package has been successfully downloaded.
So let's define some method so let's the download method.
Because this is going through this download so it is not.
Yes on load it is download.
So in this download you have to pass something.
So in this case I want to pass you at all.
That is to be downloaded.
So you can be contained or basically what it will contain any of the other that can be something like
that you add all of the payload that you want to execute on a client order come on or anything.
This you can be anything but just remember that this should be not the delay to you at all.
Basically this you all should just reach out to the particular files.
So if I said something like let me say that if this mural is maybe set list let's take the example.
So let me say hacker zone hack hackers on dot com SLAs maybe files dart PSP.
So this cannot be your you at all.
So if you want that you are all that should be the perfect URL that will send you or that will just
give you some files to be downloaded something like Let me see the board dart deputy.
So if you see this is going to give us a link that is going to just download that gypsy file or it can
be dart DPRK or it can be let me say a backdoor Dr. P.K. anything like that or backdoor dart maybe see
file.
So this could just download some files.
So this is not your page or something that should be exactly the files that is to be downloaded over
here.
So this you cannot be the relative you at.
So let's take the result now.
So in this result I want first a request back is and here in order to download from the URL we have
this important matter that is getting better.
Just remember this method.
This is very powerful method.
And this is going to take only the until it is going to download that you URL and get information in
this result.
So now we're going to do that is simply print that result.
We are not going to do something over here and you could see we have done something like that in the
previous lecture so and this will be carried out in the upcoming lecture where we just make important
the way we scraping tool with the help of a python.
So this will be important module over there too.
So for now we're just printing now so you could see now.
Now it's time to call this download method so download method and have so new that this should be perfect
to you.
So this call cannot be something that is yes Daniel page this story just lead you to somewhere that
can be the e-mails that can be the virus or that can be the any file that you want to download to the
client.
So let's open here that is in the galley.
I'll just open my browser let's search for some pile because we haven't made any key logger on any backdoor
in this case.
So I want to just download some files so I'll just say something like bird.
I want to download the bird so let's go to them it is in here.
OK let me just take this bird so you could see now if I just copy this link and if I just pasted here.
OK copy the link again or maybe copy him his location.
And if I posted here and if I just press go this is going to give us one in his file.
So this is your perfectly you are.
It cannot be something like let me say this cannot be if I just go to the visit.
So this is not your you are.
So if I see you.
This is not going to lead us somewhere.
Basically this is going to lead us only to the base not to a specific file.
So this cannot be your perfect URL but if we seen these emails it has in there to the extents and let
me just go over here and say that this has ended with the extension that is saying da deputy.
So this is a perfect you at all because this will just lead to some images.
So in the upcoming lecture too we'll just make our own rewards a sale or we'll also make our key logger.
So that should be also the absolute power.
So that cannot be the reality but so let's copy that first.
Let's go back to bite some and here the oral.
I want to send would be in this scored because this will be a string so I'll just paste it over here.
So this is a long link but will this is stick to this link now so you can see we have this again.
This file now.
So let's add on this here.
So I want to run.
That is download boy profile and let's go then it is suing us.
That is a response of a status court.
Two hundred.
So this is a very important object of this response.
So you could see that this is the request object.
And basically we see here that these are two hundred instead of score.
That means there is a link that is named with this.
So that means we have successfully sworn that there will be the leak request or there is basically the
request to that file.
Now you could see that this link exists.
That means it is suing us.
Two hundred.
Status scored.
That means this link exists and this request has successfully grabbed the content from that to you at
all.
So now in order to see the content we have this content to attribute over here.
So let's run this and assure you that pages.
So this is your the content of that file which is a deputy file in the form of binary code.
So this is your binary code.
This is not the actual content.
It has converted and you can see this.
It starts with the B.
That means it is a binary file.
And basically it has converted that file which we just see in here.
That is this is has been converted into that binary file.
And you could see we have successfully grabbed the content of the request that is done with this request
back is.
So now in the upcoming lecture what we can do is simply Institute of this deputy will just make our
own key logger and it will just send this key logger or you can also see this same file instead of that
key lever.
We can also make this file that is in the form of data actually we can make use of a pine installer
package in order to convert despite and file into the E XY and we'll just send this EMC file over here
and it will just make another payload that is with this download.
And basically when this is done it will automatically download that file onto that file or basically
it will automatically download that file onto the client and it will execute that and will just get
complete access and basically instead of just directly accessing the client computer we can now assist
a client computer from this download method.
And first of all we have to make this back is will just send this will just delivered in a way that
this one to be suspicious and plan to execute that and basically we'll just get now from this download.
So basically what happens is the user need not have to download again manually they will just do this
with this method.
So this will be covered in the upcoming laser how to make our payload much more advanced than before.
So soon the next one.