And here it is, the scan has finished.
Right now we get the number of 38 out of sixty seven, so we successfully managed to bypass five additional
antivirus software is using the additional commands that we added to our MSF run on Paillard.
However, let's try to make it even less than this, just by using the massive one, there is another
option that we can do, which is dash X.
And if we go to the help menu right here, we can see the Desh X stands for template.
X allows us to use another program as its template, in other words, this means we can make our payload
look similar to that other program.
Now, this sometimes knows not to work, but let's give it a try and see whether we managed to bypass
more anti viruses with this.
For this, we can use any program that we want, I'm going to go with the program called Party, so
I'm going to go right here and type party.
You can use any other executable file that you want and download party.
I will click on that link.
It tells me you can download party here, I will click on here, and if I go all the way down, I am
searching for the executable files.
And here it is, 64 bit party that I will click on this and I will save it in my downloads folder.
Great, I'll work on, OK, and if I go right here, open the download folder here, I will have the
party executable and just in case you don't know, on Windows Party executable looks like this.
So it has this icon and it is called Partito, to remember how it looks.
Let me just delete it real quick and I will open terminal in my downloads folder.
And run the command MSF, when I'm happy, I will use the 60 48 interpreter underscore reverse DCP Alto's
will be one or two of the 168 that fund.
The 12 outport will be equal to five five five five.
And I will only add the dash X option and select the program of party that exit.
Now, if you're using some other executable here, you specify the name of the other executable.
Just make sure that you are located in the same directory where that executable file is in order to
run this command.
After that, I can specify that it is format of EXI and output will be capital party dot exi press enter.
So the creation of the payload has finished, and if I go and show you how the payload looks like on
the Windows machine.
Let me just find this, and if I go and copy the party with the capital P to my desktop.
Here we can see it looks exactly the same as the previous file that I showed you just in this case.
This is our interpreter.
Let me show you real quick.
If I go and open myself, consul, and they set up the multi handle lisner, so multi handler said Paillard
could be Windows Xixi form interpreter.
Rivers underscored DCP set out to be one of the 168 of 112 pancit airport to be Phi Phi Phi Phi Phi
type run here.
And then I run this party to go back to my clinics and we will have the third session, one opened,
get user.
It will tell me the time, this Winterstein machine.
OK, great.
But this is out of the scope for this video.
Let us check out what the detection rate thus this newly generated payload have.
So let's go right here.
Just file navigates to downloads because there is where our party is.
Select the payload and confirm upload.
And let's see if we generate a payload with a template, do we managed to bypass more anti viruses then
with the previous two payloads?
And it seems that we do in the previous one, we had 38 out of 67.
Right now we have twenty nine out of sixty nine.
So we managed to bypass additional eight antivirus vendors.
Great.
This looks better than the last two.
I'm going to control see this or just close this.
And of course, if you wanted to generate a fully undetectable payload with MSF one, you can always
change the file format, but that comes with other problems.
Let me show you real quick.
So if I go right here and we download and let's say we wanted to generate the Windows payload, but
not as an equal, but there's a python file.
We can run the command MSF when there should be Windows X 64 interpretor reverse DCP almost equals one.
Let's do that 168 at 112 outport equals five five five five dash F is something that we want to change.
So it is no longer going to be it is going to be a python file and we output it.
We deshwal as a python underscore payload that by press enter and this will create the Windows method.
Better payload just as a python file.
Here it is, it is done, and if we go to varas total, upload the Python payload right here, confirm
the upload and we can see no antivirus is able to detect it as a malicious program.
It is effused or in other words, it is fully undetectable payload.
However, how are you going to run it on the target machine when those machines do not have python installed
by default like Linux machines do?
So this payload would only be useful if the target machine has Python installed.
Otherwise it is completely useless as it cannot run without Python.
OK, great, we covered them as a one and some of its comments, I advise you to experiment even more
with the MSM fandom and for example, you can start creating other payloads if you want.
We only created Winters' payloads, but if you have a Linux machine or a Mako's machine that you want
to attack, you can generate payloads for those operating systems as well to check out all the available
payloads that you can create.
You can type the command right here, MSF one.
That's stash list and then payloads and here we can see a lot of different ones, we can go up here.
Here are only Windows payloads, but if we scroll all the way up.
Here are Solaris payloads, Ruby payloads, and these are just some programming languages, but here,
if we scroll all the way up, we get to the OSX payload so you can attack OSX operating systems.
If we go even more up here on Linux operating systems and Linux matter better reverse DC payloads.
We also get the Shell payloads.
We get up here to Linux payloads for the 64 bit systems as well.
So you can attack any operating system that you want.
Great, now that we took a look at MSF and we covered some of its options, let's also take a look at
some other tools that we can use for payload creation.
See you in the next video.