OK, so one other thing that we can do that's very helpful with with the interpreter is actually installing
a back door.
So when you gain access to a house like we do have now, you know, you want to make sure that you can
retain your access.
And I'm aware to how you do this is installing the back doors.
This is pretty much just a change to the computer to ensure that you can always get back in.
So let's go in and check how my interpreter can allow us to create somewhat of a back door.
OK, so let's go ahead and try to get this back door set up.
So it's pretty neat.
So I'm an interpreter or I'm in metastable and I have I did the sessions commands.
You have a session right now over 80.
That's pretty much what we just did.
So what we're going to do is we're going to actually create another executable and then we're going
to inject that over and have our back door.
So the first thing that we're going to want to do, you remember that that photo that I showed you guys?
I had a bunch of windows Balnaves in them.
We're going to use one of those.
So we're going to create another malware.
Using something in there is the Penlington.
So I'm going to do a little bit something like new when it comes to a massive.
So let's just open up a new tab here so we'll see MSF venom and then we're going to do P then this is
the payload.
So Windows interpreter slash reverse.
Tsipi There we go.
And then we're going to put our hosts just a usual one on to the one six eight five six seven oh port.
This time we're going to send our port to four four three.
So that's the port that we're going to be listening over dash e.
We're going to use the same exact encoder because that it's going to help us get past the antivirus.
So she a good night and then we're going to do we're going to air through nine times this time to obfuscate
it a little bit more, help protect us from that, maybe just a little bit more.
The file type stuff is going to be easy this time.
We're actually going to do a dash X and this is going to allow us to pick a file to actually inject
our payload into our creating.
So in this case, we're going to do slash USAR, share slash windows resources, such binaries, slash
P link that you see, that's what we're going to use and then we're going to do a dash o and just say,
hey, I'll put it.
Is this going to call it the TCP XY and then go to enter and then it should work out at about a minute
or two and then we're going to hop back into metastable.
OK, so I'm back in my display.
So now we're going to go ahead and use the module that's going to allow us to install a back door.
So that's going to use post windows, slash, manage, slash persistance.
Assistance underscore, you see there you go.
So now we're here, so we're going to do options.
We've got two new options, spelled it correctly and as you can see, already have some stuff set up
here.
So what you're going to want to do is set the artistic path.
So set this is just the payload that we created, so set.
So you just do whatever it is.
So me, it is slash Holmes Ashkali slash payloads, slash TCAP that you see.
So that's already set for me.
And then Yasou also.
So you see up here when I did the sessions come in, we have an ID number for the session.
We need this session open in order to do this.
So right now it's 11, so I'm going to set the session to 11.
And then we're good to go after that.
So now all you have to do is type and exploit and you'll be good to go.
It's going to go through and appear to is doing is going to the machine using their session, is copying
this file over and putting it somewhere where it's going to automatically run whenever the system is
put it up.
And the way that you can actually test this out is to go to that Windows machine, reboot it and log
back in.
And then but you also don't want to start a handler here.
So once this is done, we're going to start a handler and we're going to be listening for the connection.
So whenever they log back in, it's going to be trying to, like, reach out to us.
So let's see.
Let's go to use multi handler.
So now we already have our Peloso, just two options, real quick to make sure we get to go.
So here we're going to want to set out four to four for three, because that's the port that our our
payload is trying to reach out to us over.
And outside of that, we don't really have to do much except hit, run and then wait for it.
And all you have to do is really if you reboot the Windows machine.
It will attempt well, pretty much when I suspect it will run the file and then it will start beaconing
out to you and then you'll get a show pretty much.
So you just run this within the machine and you kind of just wait.
OK, so we started the machine.
I waited a couple of minutes and now we have some interpretor sessions going.
So you might see that it opens up a couple or quite a few.
I've Kano's.
I think it's because I've done this multiple times.
I didn't clean it up.
But when you do it, you'll see that you have to show typing like help and you have full access and
you do everything that you need to do.
You can start watching the keystrokes.
You could take screen shots, you do all kinds of stuffs.
So now you know how to create a back door that's going to be persistent no matter what.
And you always have access to that machine.
OK, so now we know how to get into a network, we know how to conduct post exploitation activities,
we know how to create back doors, so we know how to hack into networks.
And now it's up to you to kind of take those skills and foster them, try a lot of different of the
commands that we didn't do, just experiment a little bit.
So the next thing we need to do is actually going over how to hack into Web applications.
So I appreciate you listening as far.
And I'll see you guys in the next section.