Welcome in the US lecture we saw that.
How did black hat hackers hide their preluded in order to get files to hack their devices.
So in this lecture we are going to see how to hide in malware in normal PDL file as you know Delphi
has become really common in everyday work.
It's hard to imagine business proposals without the ups.
The format is usually in almost all companies to share business deals company brokers and even invitation's
previous years.
We are not good for the users as several celebrities.
We had a publisher that such as buffer overflow levity were sent here to worse than nine a lot of the
attacks we had observed trying to abuse the book by using social engineering or by hosting malicious
files on the Internet just the simple act of opening the paedophile would exploit libretti who ultimately
downloaded malicious code from the internet and display it quite a while to trick you into Baloo that
nothing wrong was happening.
As against the injured the percentage of this bag using creating you are already a so let's see how
to do this.
Here we are using a metal plate framework to create a more malicious video file so when criminal and
I and most of console stock let play.
Next we are going to use all on those score of underscore and Belward underscore the Exley underscore
no jealous group promote Ramadi will create our malicious parody of it is a modified version of the
IT ALL media embittered easy social engineering.
This question does not require a script to be enabled and does not required you to be added to the query
of the axes embedded in the PDA in a nonstandard matter.
Using hex and quitting so I use exploit slashed windows slash file format slash arroba underscore Boudia
underscore and Bernard underscore XTi underscore no javascript.
Now lets see the options of this tool.
I show options as a Kensi to report names of our Lord and Pooya file.
If you want to do a different name to your PDL file I said file name.
Now enter the name which you want to do here.
How you an invitation next do we need to start with that type of payload.
We are going to use.
So here we are using Windows slash we do Preter slash rewords underscore DCP now and the local would
be done on the machine.
Similarly to state local port number on which the connection is dual use and for machine I said and
put it in Next I put on to create to you a malicious parody of file as a currency or a file is created
and sirra in dark MSA for Pooler.
Now to see our pillar file go to door for local folder.
Here is our militias really are File next to a need to create a handler to listen.
It was connection.
So back to the terminal and type back.
Now to that handler I use these live handler now to set your payload type set payload windows slash
with the operator slash underscore DCP similarly to set a hoist and airport police and on with him.
I said I'll host one and do not 168 43 dog to say one.
Now that said Alvord I said and put it in a now I ran or explained to start a listener.
Now we are ready to listen and incoming connection.
Here you can see I sent my malicious Boudia file to the machine.
Now let's try to open these
against the easy exit.
Did we take the and we got a deliberate decision in our.
Now from here we can control over war machine.
So that's how the hackers and where they are in normal political files who hack their machines tank.