In the last lesson, we created a payload using MSF venom and metabolite, so we created a payload that
will run them interpretor reverse Tsipi attack that will allow us to ring home, ring our Dotto three
point five Kaili Linux box from a Windows seven computer.
Now all we need to do is put this game some someplace at the Windows seven computer can be tricked into
surfing to it.
So back over here and my second command window, my second terminal window, I'm going to cede to the
route, then I'll lose and I'm going to surf into my VA folder because under VR w w w Kadivar else under
this w WW folder is usually where my Apache Web server will run and that's where it works on this current
version of Calli Linux CD and a W-W else.
And depending on which version of colonics you're running on Version 1.0, your Apache Web server will
run just from VARE WWLP on 2.0.
It's via wordage HTML.
So we'll see me one more time HDMI.
And now if we allow less or list the contents of the bar HTML, you'll see there's an index that each
HTML that is just your standard Apache a welcome page.
Well we want to do is create a folder called Downloads or Sha're.
We can call this anything we want.
I'm going to make a directory share.
And I have a folder called Share, and I'm going to go ahead and copy that game down XY, so I'm going
to SEPI space slash root slash desktop capital G and that's the only thing on my desktop.
So I just hit tab.
And they got root desktop game to slash or to my share folder.
So if I copy that game down from the desktop where it was created using Metabolite into my share folder
and bar HTML, it's going to be in a folder called Share Out on my World Wide Web server.
I can see that and then I see the end to share less.
Good.
I'll need banks one more dot.
So I'm back up in var html.
And I need to S.H. Mod, C.H. Hammoudeh, this will change some properties of the shareholder Dasch
Ah, that'll be recursive and I'm going to see it in a seven five five.
That just means read, write, execute, read, execute and read, execute.
You can learn more about that on the web.
Just look, search for chmod.
But we're going to make this executable and downloadable from the web and we just have to tell the folder
name share S.H. Mod Bashar 755 share because I'm in my var html folder.
I can El's code and share and else dash a.l.
And you can see I have read and execute privileges on that game, Dodik Folbre, I can download that
now through my Web server running Apache's.
So I just need to set up my Apache Web server so I'll clear the screen and say service Apache.
To start.
And once that started, I should be able to surf out to a Web page, either locally or on.
One of my other machines connected to this network.
And go to localhost in this case, or I can say 10 dot oh dot three dot five Sha're.
And I should see that game folder, so I have set up a folder under my VA W-W HTML folder called Share
and then I start and I copy that game DUDI file in there.
Then I started my service, Apache to Apache to is the Web server, one of the Web servers that are
pretty popular and it's included in Calli Linux.
And now anyone on this same internal hosted only network can surf to Tenggara three to five share.
We're going to see how to run this exploit on our Windows seven computer in the next lesson.