Hello and welcome.
In this new session, I'm going to show you how to create your own chancre using this bill by using
Metasploit Insight Linux.
So this link here you can get from my notes and I share for you an internal session.
You can go in there.
So we are going to use Metasploit in.
You need to run your Linux.
Avoiding stories from the earlier section, which I taught you how to install Kali Linux and the pacity
login is already shared with you.
Is username is Kali and your password.
So after you are locked in into your calibrator machine, you need to create a folder.
So good of our system here and then.
Yaser Kalihi for the Clingan in California.
Again, we are going to create a new food they chocolates.
So just right click here and select create for the anguish.
Michelle Corey, Schellekens Kinkead.
We are going to start all our Chalco inside this folder and then get on Kapela into how a shareholder
so that we can retrieve it from Windows Machine.
He's a shareholder.
OK, next thing we have to do is start your Metasploit.
So open it, Daniel, by clicking this icon here.
And then.
He can start Metasploit by using the Met F console command and Taseff Council can enter.
And after a while, the console has started.
So the first thing you do is change directory to your new Chalco directory.
You can view your current path by clicking by typing BWT, which stands for preened, looking at a tree
and enter.
And he shows you you are now in just for the Calhoon.
So you are here home.
Currey.
So in sight Kaleo home.
You had your Chako for doveish you've just created.
You can confirm that by typing to content presidenta.
And you see your shellcode.
For those who were here.
So we are going to change into this for them by typing a combined.
Which means Chidiac tree spacebar and a name of these for the struggles that sahd in Presti techi for
auto completion and hit enter.
And now you are in your shuckers folder if you take BWT again.
He didn't tell you or confirmed that he owned this folder.
So whatever Sherko you generate, you can he will now be safe in this shall call folder.
All right.
So this is what your console for Metasploit looks like.
If you need help, you can type his GOP.
H, e, l, b, r, yes, kusuma.
And then you shochu the description of the metasploit.
Framework and also the kauffman's over here, you can see you can take command questionmark for our
menu, which we are looking at nicely, have a menu or you can type in full help his GOP.
To get help, and they were here, you can.
Have commodity commands.
Search for more U.
Did you hear in your comments?
So our show, we wish the comments are useful.
You can also download are the comments from my research session for this far here, which I share with
you.
So the first thing you want to do is to change, to use particular Bill Mordu, you can use if you only
use Batel as you type, and even the more you press it decky for auto completion.
And then if you press them again.
In my assume you and your show or Farinelli, two possibilities.
So if you're not sure which beer you want, he said yes, and you shoot all the fine and then he, too.
But you know that you want this pale, pale windows slash 64 slash haze so we can use Taibe incorrectly.
So here we know no to dismiss this opinion.
You thymine windows have you can press it decky for auto completion.
And then if you don't know which parent windows, what do you want?
You can press the techie again twice and ask you whether you want to listen to an invite possibility.
If you don't know which more you, then you answer yes.
But if you only know that you one particular Modu press end for no here.
And you can just type the name of the menu that you own.
So in this case, the name of the more you than you want Heyst a 64.
This is the more you below Windows 64 slash is so you can just take hex an impressive teki to complete
and then survey type into.
Or you press issue on this, more use there has gone acidify site.
So you want to see better.
You can drag this to the right.
Do I spend with a repeater command by pressing you up, Haruki, and tagging and you have a rookie.
You would go back to the history of their commands and then you present to you re execute in command.
So now you can see a list of this more U.S.
Bay window actually before.
And you have a set here.
Yeah.
No libris messagebox.
Yeah, me too.
Preta buying IPv6 DCPI being checked.
Buying a shell buying shell by injecting a lot too.
So what we are going to generate is the FCC so we can Twitter.
We got the name.
Dress up Iraqis and go back to their command history in time.
Yes, he is an impressive techi for team condition.
Now he can enter and this time he was selected.
And once he has selected this exact Miyu, he comes from this bill.
Windows four, for he was shown in red here.
So the next thing you want to do is to find out the options.
Every Monju you need to specify the parameters for the mind you, those parameters, huckle options.
So to see the options, by the way, just to let you know, if you want a list of commands, you can
get it from here is far, which I share with you in the recession.
You can download.
So this is a list of commands.
Do you need to do?
Just follow the step.
One, two, three, four, five and six.
So presently we have completed step one, step two, know view and to show your options.
So to show you options, for example, you will type this common show options.
So let's do that now.
Sure.
Options enter in your face.
And there are two options.
You need to set the CFD option in the function option, and both are required.
So the CMD is the command string then you want to execute.
So this particular module is that here allows you to create a shellcode, which you can use to run any
program that you want.
So for demonstration purposes, you want to join it and shellcode that can open.
Not that you could also use other programs, for example, calculator.
You if you want a list of the the programs that are running on your Windows computer, you can go to
your Windows computer, see?
You go to Windows folder.
Go to windows.
And then here go to a system data system, Taito, and then here you can list scroll down and look for
some of the programs which which you show can run quite a lot, actually.
So you can just scroll down and look for something you want to try.
See here seeing EIC or you can also try look.
Bet.
You bet.
Yeah.
Magnifies, huh?
And here is not bad.
The spelling is.
And penalty it easy.
OK, so we are going to use shark to launch your pet.
So we're here for the common good.
So the common string is not bad.
How do you set common?
You tell your common set then seemed not that easy.
That's how you set the command.
Then you run your show, go to lunch.
Once you've done this, we have completed this spot here.
You sign here, sets the Yemeni scout.
You can use count or you can use notepad for up to you.
So let's say you in the U.S.
You just take S.D..
Bet.
And to.
So just to.
And now he sees a common set.
He's not back next year Nix's he went to senior function.
I said, function is the history, Tangi, that means how you won your show exit.
So currently it is set to be processed into your Chalco is trained to be run as a process.
But in our example, in our cost, we are using a create transformation.
So if you are using create function, use it as a chess well, so you should to function to be tracked.
So these are all the possible things you can set normally you centric whole process.
So in this case, we are going to set track.
So we just have to set exit,
exit function, space, train design and enter.
And now you see Bowe has been set command has been set back and its information has been sent to track.
Now you want to check.
You can just type set without any parameters.
You enter and then you show you all the things that has been set.
Out of all the here first two compulsory mandatory requirements, you can see Soviet already comply
with this requirement.
And yes, it is, too.
So now we are ready to change it now.
So if you need to have help home, what are the parameters to use for generating?
You can take Jan Gache Hitch, which means Helfer.
Sorry.
Just take Jan.
Jan Page.
Presenter.
And he was showing all your options for generating a chocolate.
The important one is don't care for me that you want to January.
So if you simply act like January
and press enter every January in this kind of shellcode, we have to vaccinate.
Format specifier for using your Internet or some other programs.
If you are going to generally, Schuckert, for using in your binary, then you may not want this.
You might need a growing state.
So over here under RFQ, the option we need to set raw rw RW is on the right.
So we generate again.
Yes.
So for that, we can type generate the F the format extensa format.
And we run raw nix's the output dasho.
Optimise optional.
So if you're doing type any of the optional parameters, then you will not save it to a far.
You just show you in a screen like this.
But if you want to say to a file, you must specify the output file.
So Dasho is for Hapu, far followed by the name of the father.
If you don't specify, you print, you stand out.
So now is your screen.
OK, so Ananya father went out to his car and not back shellcode I.
Oh, you can just put an arm.
Not that the icon.
OK.
She's too young to fake an icon in the resource O'Shannassy so we can back and icon.
You can change the name later.
You can call it anything you want.
But we I'm going to call it my Baglan.
So his presenter.
And now if you go to your folder, you file system for that, you will be able to see and Carly Chilcote's
is your SHAQUAN name.
OK.
So that's how you, Jan Ashaka, when you're finished with fifth generation of the chocolate to this
Metasploit MSF console, you attack the command and presenter.
Now you can shut down your computer before you do that.
Make sure you copy Chalco to your shareholder.
So, yes, Rackley, and copy a shortcut from the shock of order.
Go to your shared folder here and dummy.
In a new folder called Malware, you can create a new folder or malware and then right click in business.
After that, you can go to your Windows computer and open that folder and you should be able to see.
So if I go to my Windows computer now and go to my head for the for Linux, my computer, my Windows
computer.
This Shefford is who we're here in action.
So we open this in the mail array.
I should be able to see the show code, which I showed in my machine to machine.
So in the next video, I will show you how to use this shortcut to create a bill inside the resource
section of your malware.
So that's all for this video.
Thank you for watching.