1 00:00:00,780 --> 00:00:04,800 In the previous video, we have seen how to create phishing email. 2 00:00:04,830 --> 00:00:12,450 Now in this video, we will see how to create malicious files so that we can send this malicious file 3 00:00:12,750 --> 00:00:14,790 with our phishing email. 4 00:00:15,540 --> 00:00:18,540 So, first of all, let's open the terminal. 5 00:00:20,960 --> 00:00:21,710 Right. 6 00:00:22,280 --> 00:00:28,750 And now type command, a toolkit that is social engineering toolkit. 7 00:00:28,760 --> 00:00:29,390 Right. 8 00:00:35,680 --> 00:00:42,190 So again, select the first option which says social engineering attacks. 9 00:00:49,430 --> 00:00:53,090 Now, this time we won't select this option. 10 00:00:53,630 --> 00:00:56,120 We have done this in previous lesson. 11 00:00:58,190 --> 00:01:02,590 Now we will going to select the first option, which is a spear phishing attack vectors. 12 00:01:02,600 --> 00:01:03,860 So let's do that. 13 00:01:05,870 --> 00:01:13,700 Now it says the spear phishing module allows you to specifically craft email messages and send them 14 00:01:13,700 --> 00:01:20,390 to a large or small number of people with attached file format, which is a malicious payload. 15 00:01:21,320 --> 00:01:29,000 So you have three different options here, and we will select the second one which says create a file 16 00:01:29,000 --> 00:01:30,260 format payload. 17 00:01:31,580 --> 00:01:38,870 Now here is a list of all the payloads and let's try 18 00:01:41,900 --> 00:01:44,520 this one, which is Arrow Pdaf. 19 00:01:47,180 --> 00:01:48,860 So number 17. 20 00:01:50,870 --> 00:01:53,930 Now there are two options. 21 00:01:54,200 --> 00:02:00,560 Either use your own player for attack or you can use building in blank period for attack. 22 00:02:01,670 --> 00:02:03,770 So for now, let's select the second one. 23 00:02:04,760 --> 00:02:07,700 And here, let's select this one. 24 00:02:08,240 --> 00:02:09,590 Reverse TCP. 25 00:02:10,700 --> 00:02:12,980 So to enter. 26 00:02:18,710 --> 00:02:19,820 And let's wait. 27 00:02:26,100 --> 00:02:30,150 Now it asks you to enter either URL or your IP address. 28 00:02:30,270 --> 00:02:31,950 So let's do that. 29 00:02:32,220 --> 00:02:34,740 And this is the IP of my colleague. 30 00:02:36,310 --> 00:02:37,440 I would ask for port. 31 00:02:37,590 --> 00:02:38,190 So yes. 32 00:02:38,190 --> 00:02:39,030 For for three is. 33 00:02:39,030 --> 00:02:39,350 Okay. 34 00:02:39,360 --> 00:02:40,410 So hit enter. 35 00:02:42,250 --> 00:02:42,670 Right. 36 00:02:42,880 --> 00:02:48,850 So it has started listening to this IP address on four, four, three port number. 37 00:02:49,450 --> 00:02:50,050 Right. 38 00:02:55,190 --> 00:02:59,450 Now the process has been completed and it says payload creation complete. 39 00:02:59,480 --> 00:03:03,620 All payloads are sent to the template directory. 40 00:03:04,310 --> 00:03:04,880 Good. 41 00:03:05,300 --> 00:03:07,880 Now we have two options. 42 00:03:08,240 --> 00:03:09,050 Keep the file. 43 00:03:09,050 --> 00:03:09,920 I don't care. 44 00:03:09,920 --> 00:03:11,630 Or rename the file. 45 00:03:11,660 --> 00:03:18,290 So this time we will select the second one because it is a good idea to rename your file. 46 00:03:18,800 --> 00:03:20,440 So give it a new file name. 47 00:03:20,450 --> 00:03:24,230 Let's say security 48 00:03:26,390 --> 00:03:29,720 report, hit enter. 49 00:03:31,040 --> 00:03:33,170 And now it says, what do you want to do? 50 00:03:33,410 --> 00:03:37,970 So email attack, single mail address or mass mailer. 51 00:03:38,180 --> 00:03:40,700 So select single email address. 52 00:03:41,840 --> 00:03:48,020 Right now it asks you to use either pre-defined template or one time use email template. 53 00:03:48,020 --> 00:03:51,320 So select from the predefined email template. 54 00:03:51,920 --> 00:03:57,050 Now here are some prebuilt email templates. 55 00:03:57,170 --> 00:04:00,680 So let's select this one, which is a status report. 56 00:04:01,100 --> 00:04:07,910 Because if you remember in the previous lesson, we pretend to be customer care team from Gmail, right? 57 00:04:07,910 --> 00:04:13,760 So it's a good idea to use the third one, which is status report template. 58 00:04:14,270 --> 00:04:17,790 Right now it asks to send email to OC. 59 00:04:17,810 --> 00:04:20,930 So enter the email address of your target right now. 60 00:04:20,930 --> 00:04:25,100 The rest of the process is same as I described in the previous video. 61 00:04:25,100 --> 00:04:25,520 Right? 62 00:04:25,520 --> 00:04:27,920 So I'm not going to do it again. 63 00:04:28,010 --> 00:04:28,580 Right. 64 00:04:28,580 --> 00:04:32,360 But if you want go to the previous lesson, watch it again.