In this lesson, we will see how we can gain remote access to our target system by using a payload which
is created using mode framework.
So for this, it is going to be an on a machine and window.
There is a target system.
Right.
So I have gone up some steps for you to follow.
Right now, the very first command is MSF venom.
So MSF venom is going to help us in order to generate payload.
Right.
So MSF will, first of all, let the MSF venom hyphenate hyphenates is for help.
Right.
So it's going to show all of the available options to be used with MSF venom.
Come on.
Right, let's see.
There are so many options, but the one which we are going to use is Alphabeat, which stands for payload.
So let's do that.
I myself am hyphen before Feyenoord, then we are generating fuel for Windows and then we the printer
and then reversed DCPI right now we have to set and host that is localhost.
So localhost is Alcalay.
And local board will be one, two, three, four, right?
And then we have to set format.
So I have an iPhone format, so it's going to be easy for Windows and then the name of the payload.
Let's say, Jack, what?
OK, hit enter.
And MSF is going to generate a Windows payload for us with the name Jack or Dot Yixin right now, very
generic payload and host it on our local machine.
Right.
By using Apache Web server.
Now, if you go to the Internet and search for the set of a particular set of eyes, then you will know
that around 60 percent of the Web sites from all around the world are running on Apache Web server.
OK, now, if you don't know how to configure Apache, then I have explained this in practical in very
you did in the second section of this course, which is called Linux for Beginners.
OK, now let's copy our payload, which is Jack got to wear that with a little blue and it's dormant.
So this part is the default pod for Apache Web server.
Right.
So if you are going to host your website, then you have to use this folder that is HDMI and you have
to host your website under this folder.
So let's copy that.
Now we have to start to services.
The first is Service Postgres Equal.
That is your Eskil.
OK, start.
Right now, we have to start Apache Web server as well.
So service Apache to start.
Right then now let's start MSF console that is made us a framework console, so.
The next goal would be to use exploit, right, to use and.
So it's a very important step.
So we'll start with use exploit multivalent.
Then we will going to set Bellona for Windows.
OK, then we'll set the localhost and local board and then we will use exploit feature.
OK, so this is how we are going to get remote access to automatic PC.
Right now, let's move back to Cali.
OK, it says, is starting to be desperate for framework console, so we have to wait for it.
Then, OK, so use exploit multi panel and then set the for windows made furniture.
OK, it's going to autocomplete because I recently passed that key.
So we have to wait for this.
It Britain, the ECB, the.
Now said at least reduced standards to the day and then set a report, which is one, two, three,
four, but now it's time to exploit, right.
OK, so your options, right.
Sure, options to see all of the available options to be used here, right?
So it has mentioned that you have said localhost and you already said local, but then now exploit half
an edge for help.
And we are going to use two different options.
One is Hyphen G, which says that and in the context of a job and then hyphen Z, we says do not interact
with the station after a successful exploitation.
Right.
So exploit hyphen Jay Z and let's move to our Target PC, OK?
Now it's up to you how you show your creativity to force your target, to go to the you are we help
nobody exploit.
OK, I believe we ought to be helping the payload.
So suppose that Target visited your website and somehow you managed to redirect him to the payload section
which would be checked.
What dot xy.
So then dot, dot, dot dot then is your website address.
OK, suppose this is your website address and then Jack Baudot is the bit.
Would you want your target to visit in order to download the exploit.
See, as soon as your target leads to this page, the download has been started and ask for random payload.
Now your target would not know that this is a payload.
OK, so you can change its name.
Let's say you have one something or like that.
OK, let me draw extra.
Right now, let's move to Cali and exploit it says started reverse the loop.
Okay, so let's see.
Sessions open, I would say is no accusation.
OK, so let's try and exploit Typhon.
See, have frenzy again.
Explode fairly because, OK, one, two, three, four is already in use.
OK, so it automatically started this session again, that is gone or closes the event, but Riverport
just to stop the previous services and then it has started again, right?
So it says sending state.
OK, so we made a decision.
One more point.
That's good.
Let's take a..
And let's see where the decision started or not.
Yes.
Decision has been started.
Right.
So let's use this session.
OK, so sessions hyphenate and then decision number, which is one, so Sessions, hasn't I?
And then one done now regarding target system --, right.
If you want to verify, let's do BWB see voting system 32, folder of C Drive of our target system.
Right.
Let's do less.
So it will list of all of the directories and finds out there see?
OK, now let's perform some more commands like if config, so let's do that.
So if config it says then Dawid zero to seven.
Good, let's verify whether the information is correct or not.
So let's open Goman from.
And let's do I be config, let's verify, see, here it is.
OK, so 10 or not two, not seven.
That's good.
Now, we can also shut down our target PC, right?
So let's do that.
So powered off it and then.
OK, come on.
So we hope to shut them down.
See, the Windows 10 is going to power off.
It's shutting down.
Right.
So this is how we can get remote access to our target system and do whatever we want to do.