All right, my friends, this situation, and I hope you're following me thoroughly throughout this
course.
Let's get started or below.
Our next job is basically to make our payload very much effective and become stronger as well so that
it becomes more and more undetectable.
And I'll also show you even on the antivirus and before we going into the target machine, I'll also
show you how many devices can actually detect our payload as well.
So we'll talk about this not just specific to our target machine, but even about several lentiviruses
and their detection ratio is OK.
So let's get started and start making more payload more and more undetectable.
All right.
So this is our candy machine and we can you at this moment.
OK, so let's start making use of Pennsylvania.
And as you already know for your friends, you can always make use of my iPhone.
iPhone has for.
Oh, sorry, that's my bad.
I have to have.
Usually when you see the red, that's when there's something wrong with it or not.
The note come out.
So this is what you can always refer to for knowing much more.
Commander, for your reference, in fact.
OK, so let's start building it.
So MSF venom.
OK, so then we took the payload.
We can keep it as simple as we have tried earlier so we can keep it like windows Victor.
And then I remember one thing by default, it's always by default whenever you create the bailout,
it's always for a business.
Again, if you want to make it for X 64, 64 bit architecture, you can do it here, 64.
So 64 and this one.
But in this situation, if you want to keep it just for the 60, 86, sorry, you don't need to specify
by default it is taking 86 to reverse.
You can even drive for Stoebe or CBS.
Right.
We'll keep it simple.
All right.
Once it is done, then we'll have to defend the host.
But we have our own system.
IP, at this point of time will define our borders.
Well, we can keep it for you.
Whatever you feel like can be any random number.
Now, this is from now on.
What's your real job?
Start to make your payload even more stronger, more undetectable.
Right.
So as a part of this action will try to make use of an encoding algorithm.
There are many the most popular one is basically Chicot.
I've gotten nine and that's what we got to using it.
So let's let's make use of it first.
Let's remove some bad character in the payload so that we can be our payload looks pretty clear so you
can make it like this way and then and then use this will remove any bad character from the system.
And then there are some changes that you have to do in the opposite.
Slept is basically that's where you define values that can bend land size of the payload, in fact.
So you can specify any random number, maybe gets it one zero one two, maybe over one zero anytime
one zero one zero zero.
And then you define the format of your system.
I mean, so the encoding is what the encoder is like.
This you have to specify minus E Ifni.
That's how you define all.
Probably you can make use of hyphen IP encoded as this way.
OK, so once that is done then you specify the name of it.
That could be x 86 and then you specify the name that's called Secada and Nine.
So we have selected the selected encoder.
Now let's have some iteration, the number of time your people get going so you can specify and you
can even go for maybe just to keep, but you don't even have to try multiple more times as well, so
that if you start trying to encode your payload more than, you know, more than a nutritional value
or an event number, it might make your payload corrupted as well.
OK.
So we will be talking about this now.
Once it is done, then you can finally see your payload as you can, of course, define the format of
the system going forward to be ACCE and then you can save this file into your the directory that you
wish to save it.
So I'll keep it on my system itself and they will get it so.
So I specified but group encoded.
Sorry.
And go with the payload ecac.
That's going to be for Windows.
That's why I emc now in our usual practice for the real world, whenever somebody makes the payload
it has to be in such a way that it kind of means the user.
Right.
So we definitely not going to use this name.
We probably we can probably you might use the W or something like this.
Right.
Or maybe salary slip on the stuff.
Right.
This where it makes a beeline for the target user or the victim to download this file from the system.
OK, the moment you hit under this payload get generated and you might see the number of iteration that's.
Let's get started.
Let's see how it.
End up generating the people.
OK, lovely.
You have seen it have it has cried 12 times in person.
All right.
To this way, our pilot has been diverted.
You can see that currently we are, of course, in the room directly.
And then you can see or hear this is how the pilot has been treated with the encoder.
Right.
So this makes the pilot even more unpredictable.
So you need they look for the stations, how to how to scan, how to scan your sample across multiple
devices and to know which antivirus can be bypassed and which one can scan your payload as a virus or
malware on any infected file.
All right.
So I hope you got the idea.
Will catch you in the next mission then.
Thank you.