Now we're ready to receive connections from our back door.
So we created the back door we set a payload and we're listening for incoming connections here from
any connection that comes in from the same back door on the same pair apart on the same IP.
So now if a person runs that back door will receive the connection back in here on this computer what
we're going to do now is we're going to test the backdoor to make sure that it works and to do that.
We're going to use a very basic delivery method later on in the course we're going talk about smart
delivery methods that will trick the person into opening the file that we're sending to them.
For now we're just doing a very basic example just to test our very basic backdoor so to do that we're
just going to put the back door on our web server.
And then download it from the target's computer.
So there is nothing smart about this and you probably can't use this way to deliver the backdoor to
a real person.
So we're only doing this for testing to make sure our backdoor works.
So Carly comes in with a web server.
And what that means basically you can use Kelly as a web site.
So what we're going to do is we're going to put that backdoor and that Web site and then just download
it from the target Windows machine.
Now the Web site directory where you should start the website's files is Vire.
W w w DML.
So let's show you where it is now.
If we if you just click in here on the path and then put a forward slash it'll allow you to type to
manually type the path that you want to go to.
So you want to go to var w w w hash DML
and this is the location where the website files are stored.
No for you you'll probably only have indexed that hasty M-L you want to have all of that stuff but that's
just stuff that I created while I was testing a few things.
So the index is the main page that people usually see when they browse to this website.
So what I'm going to do here is I'm going to first of all create a directory and I'm going to call it
evil files.
So every time we create a backdoor or a key logger we're going to put it in here and then download it
in the Windows machine to test it.
And again later on in the delivery method section we're going to talk about smart delivery methods.
For now we're only going to be creating the evil files and test them to make sure that they work as
expected.
So I'm going to call this directory evil files
and inside it I'm going to put the Pachter that we created before.
So the backdoor that we created was made using vild evasion and evasion actually gave us the full path
of it when we created it.
If you remember or you can go back now to the lecture and have a look on it.
So I'm just going to press control t to open a new tab.
And then again I'm going to click on the men on the path in here and I'm going to put forward slash
to manually enter the path and then we're going to go to var
Ville evasion
comp..
Hit enter and you'll see the back door that I created right here and renamed it throve hasty CPS A-380.
So I'm going to copy this and paste it in here
and that's it.
Now we can download this file from the Web site that Cal uses that Kelly has now to start the web server
to start the Web site.
We have to start service from the command prompt and to do that we're going to do service Apache to.
So the command is service to start the service.
Apache 2 is the name of the web server.
And then we want to start this web server.
I'm going to hit enter and because we didn't get any errors that means the command got executed properly.
Now everything is done so the IP of the machine was 10 20 14 to 30 and it's the same IP that we're listening
here and it's the same IP that you'd get if you were on ifconfig.
So I'm going to go to my Windows machine and I'm going to navigate to my IP address of the Kalli machine
which is 10 2014 to 13 and this will open the basic index that takes them that I showed you.
And it basically just says it works tell us that the web server is working and the Web site is working.
This is all inside Vire.
W w w d l.
So if I wanted to go to the directory where we put the doctor then we're just going to go to evil files
because we coded evil files.
I'm going to hit enter and you can see the back door that we created in the previous lecture and we
call the trepanation disappears A-380.
So if I click on that it's going to download it for me.
And like I said before this this is not the smartest way to deliver the backdoor.
But right now all we want to do is just to test the backdoor and make sure that it works.
So if I click on the download and run the backdoor it's going to tell me that this is an executable
so be careful when you run it.
But this is not detection of a virus.
It's actually just saying be careful when you're on the X is going right anyway.
And once we come back here you'll see that we received a connection from the target machine.
So we didn't connect to the target computer.
The target computer connected back to us.
So you can see the IP of the target computer which is 10 24000 to 0 6 and that IP connected back to
us on port 80 80 right here.
So basically now we have full control over that computer right here you can see that we have a Peter
session.
And what Mr. Peter allows to do is literally do anything that the user can do on their computer.
So we'll see how we can use the interpreter later on in the post connection attacks.
For now we can see that the back door is working and if we do this info
you can see that we are inside the M-S edge Windows 10 machine windows and right here it's x 64.
It uses English US and its uses interpreter 86 for Windows.
So as I said Now we can do anything we want on the target machine and we'll talk about how to use the
Matel Peter later on in the post connection section.
But again basically right now we have to target computer and we have full control over it.