Welcome to this lecture.
So in this Celexa we're going to talk about another tool so that is important tool in the case of the
windows machine where we can do this again.
The creator insists that has been followed and by the user.
So if users forget that credentials you can just use that application.
But it is also useful had the hackers because hacker can use that and get the information by running
that application on.
And you can send that result back to the e-mail or back to the server.
So what you can do is first of all let me just take this.
Our key logger that is main key logger and lipstick if this is powerful enough or not.
So first of all I'll just say Go over here which sees an Alice source for bytes total to take.
Which of these viruses are antivirus this will just capture our application and let's go first in this
virus total.
You have also another Web site which is not distribute but I prefer a virus total and not distribute.
So let's choose the file.
So I have that file.
So I have this in the downloads maybe.
No it was not in the downloads
so it is in here which is our host.
So I want that file which is main key logger dirty sexy.
So OK I want to scan this.
Let's see which of these antivirus is that is the top antivirus this will capture our key logger and
you can also modified this killer because this antivirus is basically tracked for some of the codes.
And if that keyboard is in your court then they will just say that it has a antivirus is database in
the antivirus is there is basically the way to track which is if you just one that antivirus doesn't
crack your code is in viruses then you can just make a changes in a software that there won't be such
keyword something like a killer.
So if you have a key logger word in your programming they can just drag that because that is a one type
of for keywords that determines that it is a viruses.
So it is going on.
So process is going on.
And Alexis is carrying on so you can clearly see we have this big defender which is the top antivirus
application said that this is a clean well we don't have and you can see the Mac if he had said this
is also clean.
That means it is not a virus.
So our top of these applications have sonars that this is clean.
It is no.
Not a virus but and you can see it out of 64 had shown that this is a virus and this way some of these
applications that source that our application is a virus.
So if you want to make the call that even this type of antivirus it doesn't track you then you can simply
change the record in a way that it doesn't be traced by this so you can just take the documentation
of these antivirus is how they work and you can make the changes on the court accordingly.
So in this Celexa we're going to talk about and another the important program and that is Lassen.
So we just call this lesson in.
Basically this is the application that is going to give us information about the is stored a password
that is in your machine.
So it is also available in all of these platform and it is a bit of world.
So it has been there for quite a long time.
You can see the Verizon version has these two two point four point two.
And credit goes to this developer over here.
So let's see our antivirus is has dragged some of these application but you can see the top applications
are top antivirus is like McAfee and Kaspersky has given us a clean sheet that this is not the virus.
So this will just let me disclose this now.
So in this lecture where is this going to give this a try to this lesson and we'll see how this works.
So first of all let's go to the client side and see how this lesson is going to work over here.
So first of all open your browser and just source for this lesson.
So what you need to do is a source for this lesson application and you'll just get this github link
a place that github link and you'll just get here.
And this is a window missing so I'm going to just run this end according to your platform you can just
download that file for your platform.
So in that case it is less under the taxi and user.
Remember this application is going to be deleted automatically if you download by the window defender.
So make sure that you close that Windows Defender.
So if we just run these SLAs on or basically if you close these windows defender in your actual machine
then that is going to give us more problems.
So it is better to this tested in the virtual box.
So here the window defender I want to this make off to all of these protections.
So these are the tech files and apps and all of these has been off in my case.
So let me disclose it.
And you can now download.
So after downloading I have just downloaded over here you can clearly see Lassen is over here.
So if I have to run this application all you need to do is type the CMT over here and if I said desired
this is going to give us all the directories on the look out and location.
So I want this lesson to be daunting and it is the last Sun which is this application.
Dot EMC and if you take out the documentation part over here then it was so that it is going to be executed
by all funds.
So let me just go in the next link and let me show you that in order to run this.
Okay.
I was in the next.
Let's go in this first link.
So it was so you that if you want to run this you have to type less on dirty sexy and all come on to
this launch.
This module and show you how this works so I'll just go over here and I'll just say all.
So when I just sit into this is going to run our project and it will give you the information of the
password that is saved over here.
I haven't saved any password in these virtual box that means it will thus type this message.
What do you can get a Facebook password.
Even Facebook password and email password over here.
So now what we're going to do in these select so is we're going to make a project which will download
this lesson automatically to this client and we'll get the information of every password that is saved
on this machine back to our email.
So let's make that for us.
So I'll just go to the Carly because Carly is the server that is going to get the information about
downloading and sending mail to the server or the hacker.
So let's go over here which is our columnist in the.
So before that you have to also download that lesson in this column was in because we want this to be
inserted in our machine so you can see that I have it here.
That is a.
Download it over here.
Audio.
And I want that to be stored in these survived.
W w w estimated in a file which is our collection of the files that should be downloaded.
So now let's go back to our PI gem and over here we want to make some changes here.
So first of all you can clearly see this download is going to download that key logger.
But for now it is not going to be main key logger.
It is going to be less sun so it is less sand or the XY so makes sure that it is all in lowercase.
Let's go back.
OK.
It is all in lowercase less than dirty XY or you can simply grab or let me just rename it so that we
could use.
OK.
This copy everything and the school back here in the PI.
And the space to right here which will be over here and you could see now we have to execute that lesson
so we'll just execute this lass under DSC and now we'll just execute over here with the check output
method.
So before that let me make another method to send the email.
So as I say send mail and you know in order to send mail you have to import as empty B library.
So I'll just go over here and I'll just say import me a same DP life and over here in this send the
mail I'll just send the mail.
And the first here I want to send is the e-mail while calling and the password and the message will
be the result.
So message sent to the email will be the result of the lesson which will be collection of the password
of that client machine.
So let's make the server first.
We have done this before so it should be with the system to be library.
Let's call this the same teepee.
And here I have to pass the host of the e-mail.
So it is a simple teepee G.M. dot com.
So next argument here is a 587 which is the port of the G.M..
So I want to start this sober with this is start Mr.
let's log into our e-mail now with this logging method with this e-mail and password.
And after that I want to just send the mail.
So in order to send mail you have these send mail matter.
So I want to send.
So first it is from address why I want the address also the mail and e-mail is to address that means
we want to send this to this e-mail address that we just passed to this send mail method.
And the masses we want to send.
So after that will the squid that server.
So I have just created this send mail method and you can clearly see that it has also been created in
the couple of letters before.
So after that we have this download which is calling this a download you idle in it he basically gets
that file.
And after that we are here to just sit on that with this tech output meter we just get that meter so
if we just remember it was not only this last on dot EMC come on.
It has also been with the all.
So if I just go back in our window machine and open that same day then you could clearly see that it
was with this on dot EMC and all command was thus given with this file name so it to print all of these
user name.
So let's go back and go back to our colleague and here we are just executing this command in this cell
and I've said this a couple of times before too so after that we'll just call this send mail matter
in here.
I have to pass first the e-mail so let's pass the e-mail here.
Makes you that you make the new e-mail for this
and I'll just say my email list password also should be given here.
And after that I'll just say that I want to send the result.
So we have completed that is here.
And what we just did here was we just download it first.
What is the last on the application.
After that we just take the output and check out what is basically going to just sit on this command.
And we just get the result.
And because in this time it is not going to be the be open.
And this is not going to work because we wanted the result from this command.
So that means we have to just pass the take output and after we get the result we'll just send that
result to the e-mail which is basically with this method.
So let's see if this works or not so before this so working we have to send this again to our client.
So let me go over here and let me this copy there.
Download again which is obviously in our bytes on project.
So let's go back and let me see where that was.
It was maybe in the home.
So it is in the home by some project Max sensor it is download dot be a file that is going to be here
and I some copy this and store in our server.
Let me just replace it now.
And now let's go back to our client and here I'll just navigate to file Max you that web server is up
and running lists go to this download that profile.
Let's save this first.
And let me just open the folder to and let me run this download one more time.
So let me just remove this download first.
Let me also remove this lesson because we are going to download this from Dr. Sara.
So let me just remove that.
Let's see if we can just rename this.
And now I'm going to run it here and this is going to first download the lesson over here makes you
that window defender is closed.
And after that I'll just say something that is first bite and download Darby way.
Let me just read into it is going to download us for it's the lesson
OK.
It has now downloaded the lesson so you can clearly see.
So if you just go over here lesson has been downloaded and it has been executed now.
So let's go back to our colleague missing and I think the result has been send it to our Firefox in
our email account and you can clearly see it has been it in here.
Let me open this.
So you could see it has the vault password and everything that has been executed now in the client and
you could see the user also.
I haven't any password in that Glenn because I have no account created in this window missing but if
you a create any account of the Facebook or email it will be captured by this lesson and sent back to
you with the e-mail account.
So this will be there for this elixir soon the next one.