1
00:00:00,450 --> 00:00:05,820
In the previous video, we have seen that how to create an undetectable vector.

2
00:00:06,840 --> 00:00:13,380
And now in this video, I will show you how to use it, how to use the backdoor by turning on all of

3
00:00:13,380 --> 00:00:15,240
the securities in Windows.

4
00:00:15,240 --> 00:00:19,650
And we will see still our backdoor is able to bypass all of them.

5
00:00:19,650 --> 00:00:20,220
Right.

6
00:00:20,910 --> 00:00:24,780
So as you know, that this is the path for our backdoor.

7
00:00:25,530 --> 00:00:25,920
Okay.

8
00:00:26,430 --> 00:00:38,010
So first of all, let's open a new terminal and before executing our backdoor, we have to start a listening

9
00:00:38,010 --> 00:00:39,720
port on our machine.

10
00:00:39,720 --> 00:00:46,310
That is attacker machine, because as backdoor runs, it will try to connect back to our machine.

11
00:00:46,320 --> 00:00:46,600
Okay.

12
00:00:46,740 --> 00:00:52,350
So it is important to open a port on which we want to listen, right?

13
00:00:52,500 --> 00:01:00,960
So for this we have to use Metasploit framework console because as you know that at the time of creating

14
00:01:00,960 --> 00:01:07,740
a backdoor, I have selected middle beta as a payload and beta is developed by Metasploit community.

15
00:01:08,430 --> 00:01:11,970
So we have to first run Metasploit framework console.

16
00:01:11,970 --> 00:01:16,680
Then we will start listening on a port which is 80, 80.

17
00:01:18,720 --> 00:01:23,910
So let it open and let me show you that my windows ten.

18
00:01:24,660 --> 00:01:27,390
So this is my Windows ten virtual machine.

19
00:01:28,140 --> 00:01:34,530
And here you can see here at below that my antivirus program is running and I am using pre kill total

20
00:01:34,530 --> 00:01:35,430
security.

21
00:01:35,640 --> 00:01:42,270
And this is my Windows Defender which says real time protection on antivirus and spyware definitions

22
00:01:42,270 --> 00:01:43,380
are up to date.

23
00:01:44,190 --> 00:01:49,500
So I have turned on security for Windows ten right now.

24
00:01:49,500 --> 00:01:51,120
Let's go back to Kali.

25
00:01:54,950 --> 00:01:57,190
Starting the Metasploit framework console.

26
00:01:58,900 --> 00:02:07,600
So let it start and let me open one more terminal and let's copy our backdoor to.

27
00:02:09,520 --> 00:02:10,770
It's HTML folder.

28
00:02:10,780 --> 00:02:19,930
As I told you earlier that I'm going to use Apache Web server, which is an in-built web server on Kali.

29
00:02:19,930 --> 00:02:23,220
So we can use Kali as a website.

30
00:02:24,910 --> 00:02:37,220
So copy where lip will and then there is output compiled and then g.

31
00:02:39,340 --> 00:02:43,510
Well w w w h html done.

32
00:02:45,460 --> 00:02:53,800
Now I know that it is a it's not a good idea to deliver a back door using a website, but as I am showing

33
00:02:53,800 --> 00:02:56,470
just for the demonstration purpose, I am using it.

34
00:02:56,860 --> 00:02:59,700
But in your case, you have to use your creativity.

35
00:02:59,710 --> 00:03:04,570
Maybe you use a USB drive in order to deliver a backdoor to your target system.

36
00:03:06,100 --> 00:03:12,850
Or you can use email attachments, etc. It's up to you to show your creativity.

37
00:03:12,880 --> 00:03:18,160
Right now here we have MSF console.

38
00:03:19,000 --> 00:03:21,460
So let's use.

39
00:03:23,050 --> 00:03:24,160
Exploit.

40
00:03:25,420 --> 00:03:36,100
Melody Handler So we are using a module or from Metasploit framework as Metasploit is a huge database

41
00:03:36,100 --> 00:03:37,450
for penetration testing.

42
00:03:37,450 --> 00:03:40,870
So I am using one of the modules of Metasploit.

43
00:03:44,290 --> 00:03:44,890
Then.

44
00:03:45,460 --> 00:03:46,120
Now.

45
00:03:48,940 --> 00:03:49,590
Sure.

46
00:03:49,960 --> 00:03:51,040
Options.

47
00:03:52,420 --> 00:03:58,600
So here we can see we have to configure our local host and local ports.

48
00:03:58,600 --> 00:04:08,670
So set l host and then the ip of Kali and then set L port, which is 8080.

49
00:04:09,070 --> 00:04:10,990
Done right.

50
00:04:11,290 --> 00:04:14,320
And now let's run show options again.

51
00:04:15,360 --> 00:04:15,970
Okay.

52
00:04:16,560 --> 00:04:17,200
Okay, guys.

53
00:04:17,200 --> 00:04:18,640
So I made a mistake.

54
00:04:18,760 --> 00:04:22,660
First of all, we have to set a payload, right?

55
00:04:25,590 --> 00:04:30,450
So payload would be Windows interpreter.

56
00:04:31,760 --> 00:04:35,360
And the reverse http is right.

57
00:04:36,710 --> 00:04:44,450
This is the part I'm using because if you remember in the previous video, we have created a backdoor

58
00:04:44,450 --> 00:04:53,000
using code programming language and the payload is interpreter and then there is reverse https protocol,

59
00:04:53,000 --> 00:04:53,510
right?

60
00:04:54,320 --> 00:04:56,030
So let's type it.

61
00:04:56,270 --> 00:04:59,600
HTTP s done.

62
00:04:59,780 --> 00:05:10,520
And now let's say show options, c, l host and l port are configured and this is our payload option.

63
00:05:10,820 --> 00:05:15,170
We have to use the same payload as we have used at the time of creating backdoor.

64
00:05:15,170 --> 00:05:15,620
Right.

65
00:05:15,950 --> 00:05:18,710
So guys, this is a live demonstration.

66
00:05:19,520 --> 00:05:25,250
I have not done this practical before earlier and then show you the just the outputs.

67
00:05:25,250 --> 00:05:25,550
Right.

68
00:05:25,550 --> 00:05:27,800
So if I made a mistake, you will be able to see it.

69
00:05:28,870 --> 00:05:32,530
Now we have done our job.

70
00:05:33,400 --> 00:05:40,570
Now let's switch back to Windows and let's open a browser and try to download our backdoor.

71
00:05:41,140 --> 00:05:54,220
So let's try to download our backdoor Bob G Dot xy hit enter, download it, click on run and now let's

72
00:05:54,220 --> 00:05:57,190
switch back to Kali and type exploit.

73
00:06:01,100 --> 00:06:05,480
Now let's wait for our backdoor to start a job.

74
00:06:06,200 --> 00:06:14,570
And once it started, it will use or it will act as a normal service using Internet services in order

75
00:06:14,570 --> 00:06:17,660
to gain access to some website.

76
00:06:18,200 --> 00:06:24,580
So there are very less chances that it will get caught by antivirus programs or firewalls and etc..

77
00:06:24,590 --> 00:06:25,130
Right.

78
00:06:30,810 --> 00:06:34,730
So guys see it says session one opened.

79
00:06:35,700 --> 00:06:44,220
So this is how we can create an undetectable backdoor and then use it in order to gain full control

80
00:06:44,220 --> 00:06:46,110
over our target system.

81
00:06:46,840 --> 00:06:54,210
And it will show me the list of all files and directories present on our target computer system.

82
00:06:54,810 --> 00:07:00,840
But you have noticed one thing I clicked on Run My Backdoor.

83
00:07:00,840 --> 00:07:07,380
But neither the antivirus program has give me a notification that we have detected a virus.

84
00:07:07,410 --> 00:07:11,360
Neither our Windows defender is able to detect this virus.

85
00:07:11,910 --> 00:07:15,480
So this way we have created an undetectable backdoor.

86
00:07:15,840 --> 00:07:17,280
But let me tell you one thing.

87
00:07:17,280 --> 00:07:25,650
By the time you are watching this video, don't try to copy my steps, because if you do, then maybe

88
00:07:25,650 --> 00:07:30,200
there are chances that some antivirus program are able to caught your backdoor.

89
00:07:30,210 --> 00:07:35,010
Because, as I told you, that antivirus programs are continuously updating their databases.

90
00:07:35,010 --> 00:07:35,510
Right.

91
00:07:35,520 --> 00:07:40,800
So the thing which are working right now, maybe they won't work after some time.

92
00:07:41,230 --> 00:07:47,580
Okay, so use your creativity and try to modify some settings when creating a backdoor.

93
00:07:48,180 --> 00:07:54,180
And if you if your backdoor gets caught by any antivirus program, then come back to Kali again.

94
00:07:54,420 --> 00:08:01,640
Try to create a new backdoor by changing different settings, like by changing sleep time to from 15

95
00:08:01,640 --> 00:08:09,240
to 25, then 54, then 61, etc. and test again and again whether this time your backdoor will pass

96
00:08:09,240 --> 00:08:11,190
antivirus program or not.

97
00:08:13,200 --> 00:08:22,470
So my job is to show you how to create an under table backdoor, but it's up to you to use your creativity.

98
00:08:23,400 --> 00:08:30,690
So guys, I hope you now know that how you can create an undetectable backdoor using will framework

99
00:08:31,020 --> 00:08:37,140
and how to perform an attack on Windows ten operating system.

100
00:08:37,440 --> 00:08:42,330
Now, I hope you know that if this backdoor is working on Windows ten, then it means it also works

101
00:08:42,330 --> 00:08:44,700
on Windows eight and Windows seven, etc..