>> Hey guys, welcome back to
the Cyber Kill Chain course on savagery.
This is Abdulrahman Alnaim,
and today's episode we're going to cover delivery.
We went through reconnaissance,
we gathered as much information as we can,
and I know I bored you with this.
However, reconnaissance is
>> an extremely important phase.
>> We're going to use the information that
we learned from reconnaissance in
delivery because we want to create
a successful social engineering attack,
or if we're going to use an open FTP,
that's something that we would have
learned about doing reconnaissance.
In weaponization, we
covered creating the payload
using Unicorn and the Metasploit,
and now we move to delivery.
In delivery, our goal
is to send the malicious payload that
we created in weaponization to the victim's side.
This can be in multiple ways.
The first one is open surfaces.
If you're lucky enough,
and the company, or the target that you're trying to
attack has an open service,
that would be a lot easier because
you can deliver the payload through that open service.
Let's say they have an open FTP port that
allows anonymous connection, and
it gives you some privileges,
you can go ahead, and deliver
the payload using that open service.
The other one is social engineering.
Social engineering is extremely popular, and might
be one of the most skills, or one of
the most tools used to be able
>> to deliver a payload, or at
>> least fish some information back from the target.
The last method is it can be physical.
As we said, attacks are not only technical,
they can be physical.
That's something that I've seen before.
A USB is dropped in
the parking lot, or in the lobby,
>> or something like that.
>> It would have something like a tag that
says compensation 2019, or something like that.
A lot of people would find this interesting, and just
connect it to the workstations.
Then the payload, and the USB
will be delivered to the network
using that USB connection,
or the user that is not really vigilant,
they're connected, that USB to the workstation.
There is a lot of popular,
>> or extremely popular examples
>> of something like this happening.
In today's episode,
what we're going to cover
is the social engineering toolkit,
and it's a fairly simple tool.
We're not actually sending the email, or something,
but we're going to go through
the social engineering toolkit.
I'm going to leave a link to some of
the resources that has
to do with social engineering toolkit.
It comes built-in in Kali Linux.
You just have to open it.
It's one of the easiest tools that you will ever use.
That's the social engineering toolkit.
It was created by a trusted sec,
which is the same guys that created Unicorn.
It gives you a number of options.
The first one is a social engineering attack.
We're going to get into it in a minute.
There's penetration testing.
This is not usually used a lot for penetration testing,
they have a number of third-party models.
Then you can update, and so on because I got
the Kali Linux built-in, social engineering toolkit.
When I update my Kali Linux,
this is automatically updated with it, and obviously,
I did not do my homework,
I did not upgrade my Kali Linux in a while.
Let's go into social engineering attacks.
Again, as I said, this is fairly simple tool.
You can create spear-phishing attacks from here.
Basically, you can perform a mass email attack,
you can create a file format attack,
a social engineering template,
and then we go back,
website attack vectors and
that's extremely popular as well
where you create a website that has a payload,
and then use another tool within
the social engineering tool kit to
>> send an email that has
>> a false link that would
send the victim to the website that you created.
There's a lot of features here.
Mass mailer is one of them.
You can create a mass email attack,
I'm not going to do that.
Let's go backward send a single email as well.
There's also SMS spoofing,
but you need a web service to do that.
Obviously, wireless access point is another one.
If the attacker is doing a physical attack,
he can spoof a wireless access point using this tool,
and then maybe one of
the employees within the company would connect
to his, or the target,
I'm sorry,` I'm assuming it's a company and the target
will connect to his access point
or the log access point,
and the attacker will be able to
deliver the payload that way.
That's the Social Engineering Toolkit.
As I said, I'm going to leave a number of documents in
the resources page that would go
more over Social Engineering Toolkit
and the capabilities of Social Engineering Toolkit.
What is the purpose of the delivery phase?
What we do in the delivery phase,
our main purpose or goal of
the delivery phase is to
deliver our payload to the other side,
to the target of the attack.
There are multiple ways of doing it.
It can be using office services,
social engineering, or even physical.
True or false, a reconnaissance phase
is normally not used during the delivery phase.
As you noticed, in delivery and then weaponization,
I've talked about a lot about reconnaissance.
Because if you did collect reconnaissance,
you will know what interest to the system admin has,
what interests does the CEO has or the CFO has.
Then you can create
a fairly successful social engineering attack or
campaign that would trick them
into helping you deliver your payload.
Finally, social engineering can only be used to get
the FTP server's passwords
in order to upload the payload.
That's one way to use social engineering
is get them to put in their username,
create a website using Social Engineering Toolkit,
a cloner website that looks like that FTP server,
and let them put in their username, and password,
then use this username and password on the FTP server.
However, that's not the only way out there.
As I said, in social engineering,
you can let them click on the link.
The link would send them to a page or
a fake page that would automatically
download, or restore your payload on their machine.
In today's episode, we covered delivery phase,
and we talked a little bit
about the social engineering toolkit.
In the next episode,
we go to exploitation, and installation.
The next episode is
where the hacking begin. See you then.