In this lesson, we're going to learn how easy it is for an attacker to create a piece of malware that
can infect and take control of your computer, your smartphone, your laptop, you name it.
In fact, most people are really surprised when they see that it only takes one line of code in the
meta split framework to create a virus that can do all the damage.
We've been talking about taking over your webcam, looking through your files, stealing your keystrokes
and more.
This is one long line starts with MSF venom.
That's the meta split framework venom, which is our payload creation tool.
It's going to allow us to embed a payload called a Materne sprinter.
Materne Critter is the tool that's going to give us a remote shell or complete control over a remote
computer across the Internet from our Caleigh machine into our Windows 10 machine.
And we're gonna see how to create this long one long line command.
And that will create a virus so we can give a cool name.
So let's click into our Caleigh box.
And we've already started up the Meadow's split framework console by coming to 08 exploitation tools
and choosing Meadow's bleep Medfly framework.
You can also from the command line, just type in s f console.
That's Meadow's plate framework console.
So I'm going to use control L to clear the screen.
And I'll increase the font size just a little bit there, and we're gonna start typing this one long
line, that is M.
S F venom.
And we're going to give a payload dash P and there can be no space between the dash and the P windows.
Slash Materne printer slash reverse underscore TCAP.
The reverse TCAP for our Materne printer.
Medda split interpreter Shell for Windows is going to give us a reverse TCAP connection.
That means it's gonna call us.
We don't have to look for machines to attack.
We just send people this file and if they click on it, they will then give us a reverse TCAP connection.
They'll call back to us the phone home with this virus.
So this will create a payload of the windows Mateparae Herschelle, reverse TCAP connection back to
our machine.
We just need to tell it our local host address.
Now, if you don't remember your Kelly IP address, you can just start a new shadowland type IP, A
or IP, ADR or IP address.
And you can see my machine has picked up a new IP address, I believe Tendo DOT ninety seven.
That's why we always check before we run the virus.
So we'll say L host equals and your IP address from your Caleigh machine.
So Tim dot oh dot nine.
Dot seven is mine.
And I'm going to keep typing this really long command.
We're gonna give it a dash F for a format of an executable file, a Windows executable file dash F B
XY space.
And we're gonna run off of this line because it's too long to fit on one.
You can either use the backslash to automatically take you down to the next line or you can just keep
typing if it doesn't mess you up too much.
If you do a backslash and enter, you can continue the command or you can just keep typing.
I'm going to do a dash output of Tilda's slash desktop.
That will be my desktop on the Kelly box slash.
I want to give this a really cool name because I want my intended victim, the person that I have permission
to test.
In this case, it's me to want to click and install that piece of software.
So depending on the person that you're you've been hired to do security testing for, that may be funny.
Cat videos.
Dudi Yuxi.
That may be a invoice.
Dot pdaf.
Dudi XY.
Anything that would trick your user into clicking and opening that file, because once that person clicks
that file, if they're not protected with a good firewall, with good antivirus, it is going to give
you full control of that remote machine.
So we've got our dash format XY.
We need to use our dash o for output or the output formatted file dash, so we need to give it a good
name.
So we're gonna use Tilde Slash desktop and you do have to spell desktop correctly.
In fact, the spelling is really the hardest part of this entire process since it's only takes one line
to create a virus.
The only catch is you've got to type that entire line correctly in one long line that wraps around two,
a new screen so or to two new line on your screen.
So I'm going to give this a name like fortnight, all skins or fortnight God mode or fortnight something.
I just know that a lot of my students seem to be playing fortnight from now, from time to time.
Fortnight underscore all scan's.
So this is just a mod pack for a fortnight to an unsuspecting user.
Again, like I mentioned, that might be H.R. files Dudi XY or of overdue invoice stop pdaf daudi xy
or funny cat videos, whatever it would take to get your user to click through.
So we've got a Meadow's Bleep Venom payload of Windows Materne Critter Reverse underscore TCAP with
a local host address l host.
This is the address that we want that reverse TCAP, Materne or Shell to call back to us to give us
control.
And the format of this file will be an executable.
The output file will go right on our desktop as fortnight underscore all skins dot e xy.
When you get that entire thing typed incorrectly, press enter and it should take just a couple of moments
to generate this executable file.
It actually only takes a few hundred bytes to be able to build.
That meant a split, a bill that Medda interpreter Meadow's split reverse interpret interpreter that
reverse shell into our payload.
So it created a payload of just three hundred forty one bytes.
That's what it takes to actually infect the other computer.
But it put it in a file seventy two thousand eight hundred and two by seventy three thousand eight hundred
two bytes.
So that a 73 K file called.
Night, all skins that will then give us that will run everything that we need to actually inject this
Trojan into our reverse, into our remote host.
So it says it created a file on my desktop.
The Tilda's slash desktop was just short for home slash Caleigh.
Or if you're on an older version of Linux, that'll be your slash route to slash desktop.
But if we minimize this window, we should see we have a file called Fortnight All Skins Daddy XY and
Executable File Windows Application Files sitting on our Caleigh desktop.
When we come back in the next lesson, we're going to see how to share that remotely through a Web server
so that we'll be able to infect our Windows machine and we'll do it all free right here from Caleigh
in our safe virtual hacking lab.