1
00:00:01,040 --> 00:00:07,370
In the previous lesson, we have seen how to clone Viele framework from GitHub dotcom.

2
00:00:07,370 --> 00:00:07,970
Right.

3
00:00:08,690 --> 00:00:16,670
Then we have seen how to download all of the dependencies, or should I say prerequisites of will using

4
00:00:16,670 --> 00:00:18,590
a setup dot file.

5
00:00:19,340 --> 00:00:26,000
Now in this lesson, we will see how we can use real to create an undetectable backdoor.

6
00:00:26,180 --> 00:00:27,980
So let's see how to do that.

7
00:00:28,610 --> 00:00:32,060
So first of all, let's navigate to the OPPT folder.

8
00:00:32,270 --> 00:00:40,280
It stands for Optional Softwares because I have moved my wheel directory to this folder.

9
00:00:43,960 --> 00:00:50,920
Now if you do RLS, you will find this file which says Will dot pie.

10
00:00:51,880 --> 00:00:53,590
So let's run it.

11
00:00:59,060 --> 00:01:06,530
Now it says will framework loaded and it mentions to tools loaded.

12
00:01:06,860 --> 00:01:11,450
So the first one is evasion and the second one is ordnance.

13
00:01:11,810 --> 00:01:18,080
So we were going to use the first option, which is evasion, to create an undetectable backdoor.

14
00:01:18,110 --> 00:01:18,710
Right.

15
00:01:19,250 --> 00:01:26,000
And the second one, you can assume this option as a helper tool for the first one.

16
00:01:26,420 --> 00:01:32,080
And what I mean by that helper tool is like it will create payloads.

17
00:01:32,090 --> 00:01:38,600
So payload is a code inside our backdoor which do evil things, right?

18
00:01:38,930 --> 00:01:43,340
So to do all of the evil things, we are going to use a payload.

19
00:01:43,820 --> 00:01:44,300
Right.

20
00:01:44,720 --> 00:01:47,180
And here are some available commands.

21
00:01:47,930 --> 00:01:57,560
So exit simply exit will then info information on a specific tool, then list to list of all available

22
00:01:57,590 --> 00:01:58,130
tools.

23
00:01:58,130 --> 00:02:01,670
Then there is options to show will configuration.

24
00:02:01,880 --> 00:02:03,170
Then update.

25
00:02:03,380 --> 00:02:09,620
See guys, it is a very important option before creating any backdoor.

26
00:02:09,650 --> 00:02:14,540
Make sure you run update command in order to update real framework.

27
00:02:14,540 --> 00:02:20,210
Because all of the antivirus programs update every second.

28
00:02:20,210 --> 00:02:20,660
Right?

29
00:02:20,660 --> 00:02:22,880
Update their database every second.

30
00:02:23,030 --> 00:02:23,630
Right.

31
00:02:23,630 --> 00:02:29,760
So it is important to update your vehicle in order to create an undetectable backdoor.

32
00:02:29,780 --> 00:02:31,370
Or should I say malware?

33
00:02:31,400 --> 00:02:32,000
Right.

34
00:02:33,770 --> 00:02:37,760
Then there is last command which says use to use a specific tool.

35
00:02:37,790 --> 00:02:38,350
Right.

36
00:02:38,360 --> 00:02:42,110
So first of all, let's do list and we have two options.

37
00:02:42,110 --> 00:02:44,180
So let's use first one.

38
00:02:45,630 --> 00:02:50,040
Now it says there are a total of 41 payloads loaded.

39
00:02:50,220 --> 00:02:50,820
Right.

40
00:02:51,300 --> 00:02:55,500
So let's check them out now.

41
00:02:55,740 --> 00:02:57,330
Here you see all of them.

42
00:02:57,480 --> 00:02:58,110
Right.

43
00:02:59,430 --> 00:03:03,510
So, first of all, let's understand this what it means.

44
00:03:03,810 --> 00:03:07,020
So these are generally divided into three parts.

45
00:03:07,950 --> 00:03:12,270
So the first one, this one is the programming language.

46
00:03:12,960 --> 00:03:20,130
So it's going to use C programming language to, let's say, wrap up our payload.

47
00:03:21,120 --> 00:03:29,550
It's like giving a gift by wrapping up it so that the person doesn't know that what's inside it.

48
00:03:29,610 --> 00:03:36,030
So this is the programming language which we are going to use to wrap on our payload.

49
00:03:37,260 --> 00:03:39,600
So this is C programming language.

50
00:03:39,600 --> 00:03:44,940
Then there is go, then there is other like pull, PowerShell, etc..

51
00:03:45,270 --> 00:03:45,780
Right.

52
00:03:46,110 --> 00:03:48,150
So let's understand this one.

53
00:03:49,050 --> 00:03:54,480
So the first one is the programming language which which helps us to wrap up our payload.

54
00:03:55,170 --> 00:03:59,340
So this is the programming language which our target system understand.

55
00:03:59,910 --> 00:04:01,520
Then there is metatrader.

56
00:04:01,980 --> 00:04:07,740
It is a payload which makes using Metasploit framework.

57
00:04:08,040 --> 00:04:15,030
Right now Metasploit is a huge database which is helpful for pen testing purposes.

58
00:04:15,450 --> 00:04:15,990
Right.

59
00:04:16,740 --> 00:04:18,900
I already told you about Metasploit.

60
00:04:19,830 --> 00:04:21,840
Now there is rail.

61
00:04:22,110 --> 00:04:28,250
Rail stands for reverse and then there is http dot py.

62
00:04:28,260 --> 00:04:30,980
So it is a protocol which we are going to use.

63
00:04:30,990 --> 00:04:31,690
Right.

64
00:04:31,710 --> 00:04:41,160
So what we are actually doing is we are inserting this payload inside our target system so that when

65
00:04:41,280 --> 00:04:48,870
our target run this code, then our backdoor try to establish a connection back to our PC.

66
00:04:48,900 --> 00:04:49,470
Right.

67
00:04:49,470 --> 00:04:53,680
So in this case, we are not going to connect to our target.

68
00:04:53,700 --> 00:04:57,210
Instead, our target is going to connect to us.

69
00:04:57,570 --> 00:05:06,840
So this way it will be very helpful to bypass so many securities out there because we are not targeting

70
00:05:06,840 --> 00:05:07,920
our target.

71
00:05:07,950 --> 00:05:11,460
Instead, our target wants to connect to our system.

72
00:05:12,030 --> 00:05:19,920
So it's easy for us to not get detected by antivirus or firewalls or defender, etc..

73
00:05:21,090 --> 00:05:23,370
So let's see how to use it.

74
00:05:24,870 --> 00:05:31,080
So let's say we will try this option.

75
00:05:32,550 --> 00:05:38,120
We will use go programming language and this is the payload and http s.

76
00:05:38,400 --> 00:05:40,830
Okay, so let's use it.

77
00:05:41,220 --> 00:05:44,310
So use its number is 15.

78
00:05:47,260 --> 00:05:49,510
So it says this.

79
00:05:49,720 --> 00:05:54,020
These are the options which are available to be used with our backdoor.

80
00:05:54,550 --> 00:05:58,180
We can modify all of these if we want.

81
00:05:59,860 --> 00:06:05,290
The more option you modify, the more secure your backdoor will be.

82
00:06:06,250 --> 00:06:09,550
Secure means not get detected by antivirus programs.

83
00:06:11,100 --> 00:06:13,980
So let's configure some of these.

84
00:06:13,980 --> 00:06:17,640
So this one is important, which is localhost.

85
00:06:18,180 --> 00:06:19,830
So let's configure it.

86
00:06:20,280 --> 00:06:24,600
So use command set and then l host.

87
00:06:27,530 --> 00:06:30,140
Then the IP of our Kali.

88
00:06:30,410 --> 00:06:34,040
So let me open a new terminal and let's check its IP.

89
00:06:35,630 --> 00:06:36,350
Okay.

90
00:06:37,460 --> 00:06:41,120
So ten .0. 2.15.

91
00:06:43,250 --> 00:06:50,210
Now let's do one more thing and let's configure the local port, which is set to 80.

92
00:06:50,240 --> 00:06:52,230
Now, 80 is a good port.

93
00:06:52,250 --> 00:07:00,140
But I have Apache Web server running on this virtual machine and it's using port number 80.

94
00:07:00,140 --> 00:07:03,320
So Port 80 is busy right now.

95
00:07:03,320 --> 00:07:10,070
So let's use one other port, let's say 80, 80.

96
00:07:10,640 --> 00:07:16,550
This port also used for connecting purposes like using your browser in order to connect to a website.

97
00:07:16,850 --> 00:07:17,360
Right.

98
00:07:18,230 --> 00:07:28,280
So when our backdoor gets executed, the system thinks that it will going to connect to a secure website.

99
00:07:28,550 --> 00:07:29,090
Right.

100
00:07:29,090 --> 00:07:31,060
Because it's using port number 80.

101
00:07:31,070 --> 00:07:31,560
80.

102
00:07:33,200 --> 00:07:38,780
So hit enter then now to generate a backdoor.

103
00:07:38,810 --> 00:07:41,780
Simply type generate and hit enter.

104
00:07:42,380 --> 00:07:45,620
And that's how you can create a backdoor using well.

105
00:07:45,920 --> 00:07:48,680
But there is a problem with this.

106
00:07:49,280 --> 00:07:57,740
We have configured a general backdoor, which there are chances that it gets caught by antivirus programs

107
00:07:57,740 --> 00:07:58,600
out there.

108
00:07:58,610 --> 00:07:59,270
Right.

109
00:08:00,500 --> 00:08:06,830
So we can do some more things, which I will show you in the next lesson.