Welcome back, everyone.
This is a session this is first of all, and you are watching the session on creating a bit of a mess
of venom.
All right.
So from this decision on what will be really getting into action, will be making a bailout slash longer
and the beans will be exploiting our target with the same with the same feeling.
So let's get started.
Let's first understand a couple of Javins and comments in Texas about why massive venom is basically
a tool.
It's a tool which is big, which is used to build the payload.
OK, and this makes you use make make use of multiple, multiple techniques in order to make the payload
from very simple to even complex as advances.
All right.
So the command to start the massive payload assembly, MSF, m. you just have to go to the Catley and
you can simply type of venom and get started if you want to get more detail about how the command really
looks like, will it be going into it?
But I'll let you know again for further.
MSF Venom Python from health.
I can give you the all the available options.
Now, there are multiple ways you can build the payload, even the advanced payload as well.
This could be starting with assigning the kind of payload you want to go for.
So as I told you about, there are multiple type of payload.
You can make use of reverse rewash mind churl in even in the reverse shell itself, you have BCB reverse
DCB Shell.
Then we can have reverse htp shell, then we can have reverse a special as well.
And this can even be for multiple platforms, it can be for Windows, for Linux, for, you know, web
application, BHP to many more for Java platform as well.
For every different platform applications are, you know, operating system as it might change and even
the kind of platform that you are looking for as well.
Right.
There's something going wrong with the printer, which will be talking about it as well to make sure
we if we have you have a kind of persistent connection.
Even if the system, even even if you lose the connection because of Internet, because of Vansickle,
you want the moment the system goes online, you still be having the connection back to their adoption
with that materialisation.
Right.
So in order to make use of payload, you simply say you can start off with the names of men and women
and then you can select which payload to go for by making use A minus B or hyphenation from payload
as well.
That's going to work.
Then you can also make use of an encoder encoder encoded start to start, including your payload, so
that it becomes a bit different.
And, you know, some of the operating system.
In fact, let's talk about the windows.
They might find it difficult to detect as a malicious traffic so we can possibly try possibly to possibly
try to build type of encoding mechanism in order to make our payload a bit more undetectable.
All right.
So it all depends on the kind of antivirus which is being used for on the target sites as target site
as well.
So we have to plan accordingly what kind of a mechanism, what tools we should really go for.
You can selected by minus E or hyphenation encoded encoders, but then encryption.
You can make use of encryption as well if you're going for a steeps so or even generic as you can make
use of kind of encryption.
You want to go for maybe a year, two, four, five, six or eight is 128 as well.
And the way to make use of it is the hyphen, hyphen, encrypt and last.
But there are two more options that you can go for.
Iteration is the number of times you iterate the same payload in order to make it kind of fun, you
know, kind of shelbie where the multiple times and get it iterated and becomes a bit more undetectable.
You're trying to make it at least.
And then additional code you can make use of additional code which can be used as this show or indications
to the cell injections.
You know, with and this is a pretty much an.
Technique for this, there are some of the tools as well.
There's one project as well for the same activity.
If we can make use of animation and we can make use of the project as well for the same activity.
OK, as we go in more advanced, learn about that, too.
All right.
So let's get started.
Let's start building a first and I would say the basic payload and let's get started for this.
We need to go to virtual machine.
Sorry.
Oh yeah.
So here it is.
We are in a washing machine and at this moment, the building or below.
OK, so the first thing that you have to do is type MSF venom, OK?
The moment you do that, you get an option of health.
See, as I told you earlier, you get an option, a payload, you get an option for encoder all the
stuff.
Right.
So we'll be building the first basic kind of payload and will be saving it on our system as well.
All right.
So let's get started.
Will it be that being MSF venom then will select our field?
So to make it simple enough to be our target will be Windows 10.
I'm taking windows and straight away because I don't want to waste time walking on Windows seven and
on legacy platforms, because that's not something that you would find as a target most of the time.
All right.
In fact, most of the time you're going to find Windows 10 for sure.
OK, so then you defined your buildup.
So make sure this is the kind of payload you have to remember.
Or even if you don't remember, you can go and check out in the MSF console as well, which I can even
show you.
Or here is.
But so if you want to see what are the different payloads available, you can even go to the.
Let me go to.
And Andrew and Deepti, massive console, and in here you get to see all possible payloads available,
so best you get the Naem at least, right.
Which payload to go for.
So you can type you are currently on the Midas touch despite Fienberg here.
You can search for people the moment you hit and you see it start with everything.
Payload Windows 64.
This is 64 architecture that will be very as.
And accordingly, if you remember, I talked about Shell Bindweed and you believe in financial risk,
reverse DCB.
That would be an asset as well as tips as well.
You see, this was a city that never sleeps well, and this is a part of me troubador.
If you remember, I told you interpretor is is used to form a kind of persistent connection.
So even if you lose the connection, you're still able to regain a victim decision.
All right.
So these are the many options.
But remember, these structured works like this, the payload, the slash, the the platform and then
the architecture, and then you define either you want to make use of printer, which will we will be
using it and then the shell, OK.
Exactly the same way we're making use of it windows and then Mr. Better than slash it was DCB.
So as of now it's it's very clear that we are making use of regular shuttle or DCB, which is pretty
basic one, and then we'll define our host localhost and look at both.
So let's define our course, which is going to be almost equal to Bendat Segador one nine and the space
port equal to you can make use of any random board, but you can even go for Phi Phi Phi or you can
even make use of aspergillus.
Then it's pretty simple.
Now you just have to save it or you will find multiple methods.
You can make use of minus or as well as a saving to the output file.
Or probably you can save it to a different profile as well as you wish.
So let's say if you if you would like to save it to to certain somewhere so you can make use of it like
slash through slashed and finally.
Right.
Don't you see it's that simple at the moment.
You hit it.
Oh my God.
I was right.
Oh all right.
Really sorry.
And it's a venom.
And then we'll see the magic happening.
You will find it will take some time and then you see the encoder and not as specified.
We haven't selected any encoder.
We haven't selected any architecture.
It means we haven't defined whether it should be used for it except six or 64.
We haven't selected a platform as well, but we mean by default it's going to be making use of X as
well.
But you can also make use of minus.
You know, accordingly, the platform will be selected.
It's all up to you.
You can define hyphenation platform and then you can run windows as well.
It's up to you by default.
It's going to work.
So this is what the basic platform really looks like.
Now, if you want to make use of multiple other elements and you you can see where it is being stored.
So you can go to these dashboard for Denver and then type a list and then you will see your payload
X is available right now.
This this is the way we have created this payload.
The moment this payload of this this payload is delivered to the target and the target.
Open up this file.
It should start it should be ready to get compromised.
OK, but we'll talk about how the how we're attacking the machine.
And in this situation, our tally machine will be opening up a listening station.
If you remember what I talked in the reverse showed our our malware never really opened up any listening
station.
In fact, on the other hand, our machine needs to open a listening station.
So there is still something need to be done on this machine, on the scaley machine to open up a listening.
Session, which we haven't done so far.
OK, so I don't know, I have only give you an idea about how to create a bill and a very, very basic
level as we go ahead, will be making use of more and more texture to it, like Encoder will be selecting
and Godor will be selecting architecture, will be selecting platform and many more.
This is just to be very specific about how to make it very, very simple in the current situation.
And most of the windows then, even if you drive everything, the no antivirus on the system as well,
it will definitely might not work for sure.
And the reasons this this has a lot of things to be done.
But just to make you an idea about how to get started with the basic minimum command, this is what
you have to start with.
All right.
So from the next session, try to make our Bangalor even more concrete, more solid and more effective
as well.
Thank you.
We'll get to the.