Welcome to this Alexia.
So let's get everything all together now in this lecture.
So what we just did was in the first couple of lectures before we just made a clear logo which was named
with these the main key logo so you can simply just convert it to the basically in our XY file with
the spying installer.
So first of all you have to install this by installer by backers.
So first of all this type.
People installed by installer and let's forget that all packages and make this I've already installed
that.
So it in the sea already installed.
And now let's say something like buy installer and in our case it is main key logger dot be a file.
So if you do this it is going to convert.
So before that you have to navigate to the folder where you have these men key logger.
So in my case it is in the desktop.
So I'll just go over here and if I do desire then you can see I have this main key logger that we way.
So in order to convert that Python value into though we actually file it should be done with it.
With this by installer and I'll just say that is the main key logger Derby way if I hit into it is going
to grab all the file and you'll just build that now.
That is the backdoor are the key logger basically in this case it is a key logger and it will be just
do some tax over here that is converting and now within a minute it is ready so you can just go to the
dist folder and over here you'll have this main key logger and this is your file which is with the extension
of Dodi XY.
So it is very easy to convert.
So we have now this file that is in the web server.
So if I just go to the college Linux and if I just go to the computer part Val and we have in this w
w w as Daniel and I have in this file.
So this was our python file and this is my main key logger dot e XY.
Now this is executable.
So we'll just get this executable to be downloaded in the Kali machine or basically in the windows machine
which is the client now.
So let's go to the Python and you could see this was the download we just talked about in the previous
leg so we just saw how we can just download that images we saw how we just responds with this request
method and we get that 200 instead of scores which determines that it was valid or basically there was
the request to that you.
And I have also told you that this part which is 0 the others should be the absolute but it cannot be
something that is leading to maybe yes dismal page or something like that.
It should lead you to file.
Either it can be the e-mails file which contains dividers or the AP can file it was condensed the virus
or the executable switch contains the virus.
So in my case it is inside here.
So you could see it is inside this file folder in this main key logger dot XY.
And now let's go over here in the windows and if I just saw fire that is the first thing we have to
go in this is indeed your network.
So when I just opened this you can see it has shown the hackers rule.
So before that you have to have that a party server running in your column columns.
So in order to take you can see that is in my here I have run.
That is a party server.
So in order to run a party server for yourselves what do you need to do is simply type service a party
to and if you type B status it is going to so if it is running or not what I want to just start it.
So when it is type you start in my case I've already started.
If you want to be stop you simply type stop.
So now you can see that your home base will be rendered in the client site.
OK.
Way I'm opening that I have to open these windows.
So after that we have that key logger in the file.
So file is a basically folder where we have give that key logger dot EMC.
So when it is pressed into it is going to give us the information of that file.
And now we are not going to download this admin key logger dot boy.
Now we have to download this many key logger dirty sexy.
So if I hate into this is going to give us directly the main killer which is what we just want in the
other.
We don't want any peace to be rendered.
Instead we want this file to be downloaded.
When we just passed that you add.
That means we have now.
That is absolute.
But let's go to the item again which is our colleague Linux let's open here.
So now what I want to do is make use of this a download method.
So I'll just make use of this download method.
We'll just pass here.
That is a you add all of that key logger and let's make user to download it.
So in this download matter.
Let me just get that is the result first and the result will be from this request dart get method.
We have already seen this get method it is going to take a you all that is sent over here in this download
method and now what do you want to do is you want to get the other end if you see our you URL is going
to look something like this.
So our you will be one ninety two one six eight dot one dot eleven which is my IP of the Kali.
After that it is inside this file.
And after that it should be mean and it should be key logger dart e XY so this will be out you had a
list stick one more time.
So if I use this maybe if I just see in these files you can see it is the main key logger dot EMC and
where I'm opening this.
So I just wanted to have everything because I don't want any spill over here because this certainly
due directly to the main key logger.
So let me just pasted down here which is our main killer now.
If you just run this spot in your client was in this is going to download you the main key logger so
we have to just get that over here.
What I want to do is first of all we have to only gather the file name because we want to just run this
admin key logger.
So first up a list extract only this main key logger are basically the file name of our evil file over
here.
So in order to extract I want this you are all to be split.
So I want to split maybe from that these deaths which is basically the words less that the domains we
are just taking something that is out of this new URL which is with this SLAs and I want from the last
if you do from the first there is one thing that is a file folder.
So basically if you do from the last that is going to give it only this part.
So this is going to be our file name over here which is done.
So if you remember in the indexing part what we did was this was the negative indexing that refers that
we are just indexing from the last of the file name.
So next thing what I want to do is open now and I want to open that file name which is the same file
them in our case it is a main key logger and if we just remember this statement is going to be executed.
This instrument is going to just download the main key logger in our Kali.
So that means after you download you can just execute it over here.
So we'll just execute it with this right binary and the say is out file.
We have learned the file handling in the previous lecture.
So this should not be any problem for you.
So the old file Dot.
Right.
So now I want to write.
That is the response to this result.
So I have shown you what discontent does.
We'll also see about this contained in the upcoming lecture well we'll make our own Web crawler with
the python.
But now this content is going to get the content of the final hymn which in this case will be the result.
So now what you need to do is simply call this download method.
So if you just remember what was the content our main key logger if I a school in this main key logger
we had these send an email.
So this was inside our main key logger itself.
That means we don't have to just get that equates to basically from here or basically what I mean to
say is instead of just having the same mail in this download we will be in in the normal cases because
if we just made something that is a simple key logger and it doesn't have the same e-mail then you have
to implement this sends email over here in the download RBI.
But in this case we have already the standards implemented in the main killer.
That means we won't be executing that the assembly piece over again in this downloader boy.
But what we are going to do is we are going to execute now these men key logger files and if we just
remember what we just did in the previous section was this backdoor and we use so many method in this
backdoor to execute the command.
And if you just remember we had that is a saw process module in order to just call for that.
The responses are basically to execute our payload on the cell.
So let's do something that is first of all I want to maybe that download to be called because first
of all we want this download.
And in here I want this you all to be seen because I want this main killer to be downloaded less bested
over here.
Now we have seen this to the download now we have a link to download this.
So this is a basically download method is going to download.
Now we have to execute that main killer on the cell.
So in order to execute that I'll just say that is slow process.
So we have already imported that surprises.
And you know this process is going to execute the command on our cell and we have so many methods in
these separatists one each check output which we do normally if you want the result if you want the
results so basically what happens is if you want the result if you want to send that to the G.M. then
you can use that check out.
But in this case we have a lady that is the G.M. sensible method inside our main dealer.
That means we don't want to result in this case.
We don't we don't want anything like this that did take out what we want to only run.
That is a be open.
So I'll just say be open is the matter.
That is going to run which is our takes or in this case which is our main key logger.
So I just say main key logger makes sure this is the same file dot EMC.
This is going to execute and as I say it should be executed in the sale.
So we just did here.
That is to execute these command which in this case the downloaded key logger in the client in the cell.
So now we don't have to send mail because we don't want this method because it is already in the killer.
This is going to just send us over here so we'll just remove this if it was a case like maybe you say
something like you made that payload that is going to have a reversal but it is not going to give us
any information in that case.
You have to first type here instead of pure open you have to you take output because take output is
the method that is going to give us a result.
And that is the result of the command.
And after that result you get that result you are going to send that result to the G.M. but in this
case it is not possible because it is not possible or you can also do it.
But we have already done it over here.
So it is useless to do again because we don't want to send e-mail multiple times.
So let's go ahead remove this send mail.
I think you are getting my point.
What I'm talking about.
So we have a lady this sends e-mail which is in the case of this man key logger.
So we don't want this tech output because tech output is going to give us a result of that command and
b what one is going to execute that command.
So basically we just did here.
That is the execution be open.
Now what you can do is simply hold this around this saw in order to run.
So we don't want to run this basically we have to first make this file executable by again declined.
So in order to do that let me go back here in my Python projects are bytes and project which is right
here and the name here will be downloaded be way so you can also convert these CPA files to the execute
tables and also the packaging technique in the next lecture.
But for now what I need to do is simply go to the VAR where our server is hosted.
So it will be in the the estimate.
So inside the file I'll just put this download derby right.
Let me just copy this and paste it over here inside this download dot file.
Let's go back to our here that is in the client side so you can just refresh this base you'll see now
the download dot boy.
Let me just download this first.
Let me say this.
Open the folder.
Where do we have this download be way and OK.
I just closed the window machine.
So here I want to close this.
And let me sit on the command prompt because I want to just sit on that file so I'll say download should
be executed.
So let me hit into and it is saying that it hasn't imported the request module.
Obviously it doesn't contain the request module so first of all you have to install that request package
over here
so you can see that we have to make again declined to install that request package which will obviously
this client is not going to do that.
So what you can do is we have to make this download python file into the executable so that no modules
would be installed by this client.
But in this case I'm going to do that because the packaging technique will be learned in the next lecture.
So now I want to execute this download Derby way and again it is showing the exception maybe about the
file.
Let's go back to our bytes some and let's see what is happening.
So it is main key logger dot XY.
Maybe the file name has the problem because this should be given with yet CTP.
So let's put everything over here with the S2 TB and let's execute it again.
And now let's go back and we have to again change the file so it was the download file.
Let's copy one more time.
Let's go here and let me this.
Replace so I have replaced over here.
So let's go back to our window machine here as this running in this python download dark boy file.
So before that it is not the same pilot we just downloaded.
We have to go again to the server of the limousine.
So was go here inside the file.
We have to download again this downloaded file and let's set this view downloads.
Okay.
I just downloaded.
Let's go back here.
We sort of have this download and let me this remove this first
list.
Execute over here.
So what I'm going to do is I'll just execute this download or way.
And it is executing now and it is saying that there is some module that is not opening but if we could
see here we have this main key logger you could directly see that this main key logger has been downloaded.
So let me show you one more time I'll disclose this.
This may be I won't close simply because we have to navigate again.
So instead of closing it has this remote this main key logger.
And this is big file to solicit this download file and let's see if I just run that python file which
is download file it is going to download us that main key logger that we created in this column was
in the.
So I would say that these lists go first in the python or basically in this window.
And I'll say see over here in this file which is in the download file.
So if I just sit into over here in this python download dot be a command.
If I just split into then let's go over here and let's see that it has now main key logger and this
is the application.
So you could clearly see now this is the application just running so whatever I type.
Now here let me say I just type again the Google dot com and here has say hey it is Google who is running
so let's see if we captured this or not.
So in order to see it as go back to our columnist in less open my e-mail because key logger is going
to log out all the file over here.
So let's wait for some time because it is going to give us information so let's see if this will work
or not.
Let's see what is happening so I think I didn't catch it as it has not been caught.
So let's go back and run it one more time maybe I'll just sit on it one more time.
Sometimes it happens so you have to stay on it one more time to check if this is working or not.
So let me again.
Okay you have to.
This type CMT let me say I want to run the python download and DEF in order to download it.
So it has now again the main key logger.
So it has downloaded.
That means if I go back to the calorie nuts you will see that this process has been executed it has
executed and it has given us that main killer file but now this process has to execute.
So what.
The one thing you can also do over here is you can simply say check output and just print that output
so this can be also done in order to see that.
And this will also work.
So now we have this main key logger dirty X running.
So let's stick if this works or not so let's go back to Cali and you could see this is the main key
logger and this is working maybe and now all we want to do is I want to go again to here and let's write
something maybe.
Let's see.
Hey Google.
How are you doing.
Maybe some messes like this and let's see.
I will just go to the Hotmail to Hotmail logging
so we went somewhere here.
So let's go back and see if this works or not.
So let's go to the missing let's work here.
OK.
It is working.
So it is taking time and you could see that it has captured everything that we this type but it is taking
time so you could clearly see I had type this Hey Google How are you doing.
Key and inter.
So it is working.
Let me give her time and you should give you information of the Hotmail too.
So let's go back here in the column Linux and I have.
We had in the Linux obviously.
So let's go over here.
That is in despite some.
And let me show you that.
You can also do something like you just take the output with this take output and use this type that
is take output over here.
So basically what this method is doing is let me show you over here in the columns in what this is doing
is after users download it which is the method download method is called You are just opening the CMB
again.
That is so going to be the sale which is done by the Sol process and you are saying something like main
key logger which is downloaded dot EMC has been executed like this but you could see that we don't have
that byte and thirty seven dot DL file which is going to load the library so you can use that is check
output method in order to simply work with that.
So basically what happens is you can send this through the mill instead of just having this sends e-mail
over here.
You can just type that method over here that is defining the same e-mail and you just capture that result
like this result or by here and send that result to the e-mail so we can do that.
So let's see if we can this segment so before that you have to get the assembly be word and everything
again.
We have talked about the bill over in the previous lecture.
So that is also doing the same tag.
So what you can do is simply grab that bee logger and paste that file that is the blogger XY file in
your here which is in this various demo.
And here is the Web Sara and you can just type here that is the same court which is in this by jam and
you can just download that blogger on the client and you can just execute that come on with this.
So this will be read for this lecture soon in the next one.