1
00:00:00,360 --> 00:00:04,710
In the previous video, we have seen how to create malicious files.

2
00:00:05,520 --> 00:00:11,370
And now in this video we will see how we can create a malicious USB drive.

3
00:00:11,490 --> 00:00:18,540
That is how to make your pen drive malicious using social engineering toolkit.

4
00:00:18,900 --> 00:00:21,480
So let's run a C toolkit.

5
00:00:27,350 --> 00:00:35,300
Now, as we done in the previous videos, select the first option that is social engineering attacks.

6
00:00:40,310 --> 00:00:41,180
Let it load.

7
00:00:43,050 --> 00:00:49,410
And now this time we will go into select the third option, which is infectious media generator.

8
00:00:49,770 --> 00:00:52,980
So three enter here.

9
00:00:53,130 --> 00:00:58,920
You have two options file format exploits and standard Metasploit executable.

10
00:01:00,120 --> 00:01:02,130
So we will select the second one.

11
00:01:03,420 --> 00:01:10,590
And here let's select this one which says Windows to reverse http s.

12
00:01:10,770 --> 00:01:15,570
If you remember, we have used this before in our, in one of our previous videos.

13
00:01:15,690 --> 00:01:22,590
So seven enter now it says IP address for the payload listener.

14
00:01:22,920 --> 00:01:30,690
So enter the IP of the attacker machine and enter the port for the reverse listener.

15
00:01:30,840 --> 00:01:32,670
So let's say four, four, three.

16
00:01:34,950 --> 00:01:39,960
Now it's generating the payload, so we have to wait till the process gets completed.

17
00:01:43,300 --> 00:01:50,620
So the payload has been created and it says payload has been exported to this part which is slash route

18
00:01:51,820 --> 00:01:53,770
with the name payload dot xy.

19
00:01:54,940 --> 00:01:55,540
Right.

20
00:01:56,440 --> 00:02:02,770
Now what happens is it has created two different files for our USB drive.

21
00:02:02,920 --> 00:02:04,660
One is auto run.

22
00:02:04,990 --> 00:02:08,950
You can see it here and the other one is mid repeater.

23
00:02:10,220 --> 00:02:13,820
So I would say is create a listener right now.

24
00:02:14,120 --> 00:02:14,530
Okay.

25
00:02:15,290 --> 00:02:15,460
Yes.

26
00:02:16,600 --> 00:02:23,080
Now it will go into launch Metasploit framework console from here.

27
00:02:24,470 --> 00:02:25,970
That is a of console.

28
00:02:32,400 --> 00:02:39,600
So now it says it started HTTP as reverse handler here on port four, four, three.

29
00:02:39,720 --> 00:02:41,510
Now it's up to you.

30
00:02:41,520 --> 00:02:46,190
You can change this port number to anything like one, two, three, four or five, six, seven, eight,

31
00:02:46,200 --> 00:02:47,040
etc..

32
00:02:47,820 --> 00:02:55,470
Now the only job left is to attach your USB drive with your machine and copy your payload.

33
00:02:56,010 --> 00:03:03,090
Then take that pen driven, attach it on your target computer system and it will automatically run and

34
00:03:03,090 --> 00:03:05,160
create a session for us.

35
00:03:06,900 --> 00:03:08,880
So that's it for this tutorial.