At this point, we're almost halfway through our command and control section on Windows 10 using materne
fritter.
But we're just scratching the surface of what you can do with materne fritter when you are penetration
testing and network or doing a security assessment against individual users or against a company.
You, of course, want to use this ethically because everything that we're doing here can get you in
trouble.
But we're gonna take the the fear factor up a significant step with this lesson, because we're going
to see how to grab screenshots, how to capture keystrokes and even how to take over the Web cam on
an infected Windows computer.
So I've attached a Web cam.
We show how to do that in the previous section.
So if you haven't attached a USP Web cam and you have an extra one around that you're going to attach
to your Kelly VM.
It's a good idea to go back into the previous section and see how to add that USP Keibel USP Web cam.
But we're gonna do screenshots.
We're going to do keystrokes and webcams.
So let's jump right in.
First of all, I'm still in a good Windows Materne session if you need to re-establish one.
You saw how to do a session, you saw how to rerun your Kelly, your exploit from windows so that it
calls back to Kelly.
We even uploaded a second copy of the virus into our documents folder and we created an exception in
the virus and thread exceptions.
So the Windows defender won't delete that one even if it wakes up and deletes our downloaded virus.
So we'll be able to rerun and reconnect really easily with just three or four lines of code.
So up next, we're going to do a help one more time and we're going to come up to.
The user interface commands and take a look at what we've got here, we got screen shot.
So that might be interesting.
Just see what's on the user's screen right now.
Let's do that one first.
So if I control El.
I'm going to try the command screenshot.
And I'm going to use an option here, Dash V.
True.
That's the dash view option.
So screenshot.
And I want a view that screenshot right here live in my windows and my Caleigh box from Windows.
If you just say screenshot, it's going to save a screenshot into your home folder and you can go to
your other tab and open that up.
But we're gonna view it right as it takes the screenshot.
And look at that.
I am in my Caleigh virtual machine, but I'm looking at the desktop of that remote Windows 10 computer.
Now it's just a quick image file.
This doesn't let us interact with it at all.
But if we close these.
There we go.
I might even be able to do a screen share.
Now, let me do a quick word of warning, because sometimes the screen share command will crash your
maternity connection because it's sending full video of your Windows desktop back to your Caleigh machine.
But let's try.
Screen share.
And it says playing.
So what I want to do is change the screen.
So let's go over here and surf to a different address.
Let's go to Wells Fargo or Goldman Sachs Bank.
Or any bank.
And you notice it's slowing down my Internet connection because this is streaming full video from my
Windows computer to my Caleigh computer.
But everything you look at on your desktop, a remote attacker will be able to see if you run an infected
file that's running a remote access Trojan like Materne printer.
So that is creepy.
But we're gonna take it up a couple more notches.
So what I'm going to do is control see to kill that screen share so that it stops showing so much information
control l to clear the screen.
We've seen how to do a screenshot and a screen share.
Let's see how to capture key strokes.
So we saw if we help or use the help command and scroll up just a bit.
We saw the screen share and screen shot.
We also have key scan start, key scan dump and key scan stop.
So let's see how that would work.
So I will type in key scan, underscore, start.
And so it started a keystroke sniffer on my Windows computer.
So let's say that I search for hacking for kids on Amazon.
There's a book called Hacking for Kids.
Oh, look at that.
There's another great book called Teach Your Kids to Code.
Those happen to be a couple of mine, so I'm a little bit proud of those.
Look at that.
We've got hacking for kids from the author, Bryce Payne.
Who knew you could even preorder?
We've got got lots of really cool things available.
But I just did a search for hacking for kids.
Amazon.
Let's do a key scan dump.
And look at what Materne Critter sent back to my Kalli computer hacking for kids.
Amazon.
Now, of course, I didn't type in my username or my password, but if I typed those things in, they
would be showing right here as well.
So I'm going to stop that key scan source, a key scan underscore stop, because that is a really noisy
command.
It takes up a lot of your network connection because every keystroke that an infected user types on
their Windows 10 computer now comes over to my Caleigh box.
That's passwords, credit card numbers, everything that you might type in.
You see why we're starting to get really paranoid about downloading and running strange files?
Well, let's take it one step further.
So in the previous section, I connected a USP Web cam, and I'm just gonna double check that that device
is available here and I'm going to connect it to my Caleigh box.
Oh, sorry.
I'm going to connect it to my Windows 10 box.
So I've got my Windows 10 computer running.
My VM is in front.
I come up to devices now on my Windows on a Windows desktop.
Devices will be right at the top of the window itself on my Mac.
It's up here at the top of the screen.
I'm going to come to devices and I'm going to find this webcam.
Notice Smile Mac book here has a face time camera but also added the second USP.
Camera.
Once that set up, I'm going to see if I can actually attach if I can attack this webcam from my Caleigh
computer remotely.
So I'm just going to sit this down right here and I'm going to use one of my commands.
I say help.
Just to see what that command was again.
So under the webcam controls, I can record from the microphone.
I'm not going to start a video chat with an infected user.
I can list Web cams.
I can take a snapshot from the webcam and I can stream from that webcam.
Ouch.
So let's say web cam list.
Underscore list.
And look at this.
My Windows 10 virtual machine has a USP Web cam attached to it.
The one that I just connected.
So now, if I say webcam underscore stream before I president are on this, let me just do one more
reality show.
Actually, two reality checks.
Number one.
Don't use this virus even as a prank.
Even with a friend, even with someone who's given you permission, if you don't have complete permission
to use the network that you're on, the network that that user is on.
And and make sure that you've done that.
You checked through the laws in your local and your location just to make sure that this is not illegal,
even to possess or to run.
But you need to know that an attacker can run these kinds of commands through a simple virus as easy
as this one.
And you need to remember why it's important to run good antivirus and keep your firewall up to date.
So when we click webcam stream.
It is going to work to set up.
Oh, my goodness.
If you notice as I move this USP Web cam, it's going to be able to see me on the screen so you can
see my tiny little video window there, because this is a very old webcam, but it's still a webcam,
just like you might have on a real computer.
You see, there's a little bit of a lag on the screen, but an infected user has opened up their files.
They've opened up their screen, their desktop, their keystrokes and even their Web cam to an attacker
across the Internet who has a little bit of knowledge of Kalli.
So I know that this has been scary, but it's been with a purpose.
We want you to know how important it is to protect your Windows 10 computer, your Caleigh computer,
your Mac, your cell phone and other devices that have a computer chip and have a lot of devices in
them like this one.
When we come back in the next section, we you see just a few last steps in the commanding control.
We're going to raise our privileges to the level that we're going to be able to steal windows, passwords
from an infected computer.
This is how attackers get into one computer and get dozens of passwords.
So we'll see how to do that in the next lesson.