So in the previous lesson, we performed a basic Ossy command injection example.
Now, from the very first point to a reverse shell, we've done everything manually.
And now, if you're new to this field or even if you're an experienced veteran, sooner or later you're
going to want to automate what you do.
So you can use tools or code your own.
So on this question, I want to use the tool comics for the command injection.
Comics actually ships with Karlie.
And this is the latest version.
However, I couldn't run it due to a bug and I didn't even get to fix the bugs, so instead of using
this version, I'm going to use a previous version.
So it's a long way around, just showing you that I will go to its GitHub page.
And you see under the releases, you're going to see different releases.
So I'm just going to download this one.
All download the source code and save it.
And go to the download folder.
Extract the files.
OK, so now I'm going to go back to the terminal.
And go to that directory.
All right, so here are the files.
And you can run it directly from here, show options by specifying the H parameter.
It has many options.
You can test everyone if you like, but I'm going to go on, so go to Firefox's.
And send the traffic to berp.
We're going to look up.
Now, copy this request to a file.
And name it, whatever you want to and save.
Then let there Cresco.
Now we have nothing with Bourbon Firefox.
So let's use comix.
So type comics dot p y dash r to specify the file that we saved P is for the parameter and the request
to test.
And all to test and check for everything Comics' tests.
And hit enter.
So it gets something.
OK, I'm not alone, Comics' also displays a password file first.
Now, it also enumerates this system in detail.
And below, it asks to open a shell style interface, so of course, I hit enter to accept.
And this is the comics style, Shel.
So now you can run those commands from here.
Your name, Dashi.
EDD.
And comics can also create a reverse shell for us.
So type in reverse, TCP.
Now, you may recall Métis Point.
OK, so set the localhost to the IP address of your Caleigh.
And then set the local port on Kalani to listen for the river, his connection.
I'm going to say four, four, four, five.
And now you must choose which type of shell you want.
And let's see, we've already done the net cat style shell, so choose to.
Now, you must choose which type of reverse TCP shell, so I'm going to say eight and it will generate
the payload for us.
And then create a medical resource file.
All right, so I'm going to just put the window.
Then copy the resource file.
And paste it in here and add a Q.
For the parameter to start Métis boite in quiet mode.
Then hit enter.
Now, the U.S. file creates a multi handler with his options.
And then exploit.
So that way that generated reverse TCP payload on B box connects to the handler and Kelly.
And the interpreter session is open.
So type this info.
And this command shows a short view of the system and the session information.
And get Eweida for the user of the session.
Now you can run your post modules or do some privilege escalations on the system, that's entirely up
to you, whatever you want.
Oh, and one last thing.
So as I observe this shell, it's not as consistent as a Boyte reverse DCP shells, so.
I don't know why this would be, but in your system, it may indeed still be different.