Welcome back.
In this video, I want to talk about yet another tool that we can use for Paillot creation, and that
tool is called the Fat Rat.
I know, right, why the name?
Anyway, this is a tool that we have available on GitHub, so let's go real quick and download it from
the GitHub repository.
If I typing in the search bar.
Vatterott GitHub, it should lead me to this first link where I want to click on.
And once it opens this page, we want to copy the link to this tool and get clone it inside of our desktop
directory.
Now you will notice right here that I already have the tool downloaded, so we'll not be cloning it
right now.
The good thing for this tool is that on to get a page.
If I scroll down here, we have the commands for the exact installation of this tool.
So first we get the tool itself, then we change directory to the tool folder and we run this command
right here.
Since I did all of this, you do this first and then we can go and start to talk.
OK, did you do it?
Let's go and start to now keep in mind, one starting this tool, you must enter the root terminal.
And we do that as usual with pseudo as you comment, once they go there, I will never get to the desktop
and to the fat read directly if I type, unless we should see this file called Fatfat.
And that is the tool itself.
So in order to run it, we can just type its name inside of the terminal press enter and this will start
the tool for us.
You will notice that the toll is rather similar to all of the previous tolls that we use for Paillot
creation, so there is nothing really new here.
We're just experimenting with different tools to see what type of payload is best for us.
It will go right here through some of the dependencies.
And if it doesn't have some of the files that it needs installed, it will automatically install it
for you.
For me, it already has all of this installed.
So it will just prompt me with this warning that says don't upload the back doors created with the threat
to the virus total dot com.
So we're not going to do that.
If the tool tells us to, we're not going to go and upload them to virus total.
Anyway, let's see how we can create them, so I will press enter to continue here it started the service.
PostgreSQL and I will press continue once again.
And here it is, this is the main menu, so we got quite a few options right here.
We can create backdoor with MSF, we can create fully undetectable Back-Door with food when we can create
with other programs as well.
So this is just a matter of choice.
You can also, if you notice right here, create the back door of the APIC file, which would be for
mobile phones.
OK, great.
Let us go with any one of these.
Let's go, for example, with number six, which is great, fully undetectable Back-Door with P.W. and
wins it says in the brackets.
Excellent.
But keep in mind that even though right here it says fully undetectable, it most likely won't be fully
undetectable because this tool right here isn't that new.
Nonetheless, let us go with number six as an option and you can go with a different option if you prefer.
I would just go with this one for the purposes of this tutorial.
And here we have also a few different options we can create back to see Power Shell and the bed PDF.
We can create Vector T Metropia, the reverse DCP.
We can create XY file with C sharpened the power shell.
It says it is fully detectable one hundred percent.
So let's go with that one.
This time I will select number two.
It will tell me right here my IPV for a local address, my IPV six address and my public IP address
right here.
So what I'm going to do is I'm going to set the localhost IP to be 192 of the 168.
That one that 12.
And I will select the Lakeport to be five five five five press enter, please enter the base name for
output files.
We can call this rat back door just so we know from which program it is here.
It asks us to select which type of payload we want to create.
And we are going to go with the good old Windows interpretor RiverCity.
So I will select number three right here, press enter and this should create the backdoor for me.
After a few seconds, we should have this output that says bagged, saved to this path right here and
up here, we can see the code of our payload.
It is inside of C sharp and we can see it calls the system function, which execute a powerful command.
OK, great.
So let's remember this location right here.
Matter of fact, let's go it.
And now we can press enter.
Now, you will notice that this tool doesn't set the listener automatically for us, so what we are
going to do is you can either set up a listener based on the information that you specified for the
payload inside the second terminal using a massive console.
Or we can go back to the menu using the number nine.
And once it comes back to this menu, we can go and jump to a massive console straight from the threat
with the number 10.
OK, great.
While the MSF council is opening, what I'm going to do is I'm going to open another terminal.
Where I'm going to enter the root terminal first and then navigate to the path that we copied, OK,
great by palace here and we should have read back door.
Let's keep it to our desktop.
So, Mr. Hacker.
And then desktop and from the desktop, if I go and lower all of these Windows.
We should be able to go straight to our Windows 10 machine.
OK, great, so it is on our target machine.
Let's set the settings inside of the massive console use exploit multi handler said payload to be remember
Windows interpreter reverse DCP.
And we need to set the elbows and the airport accordingly to what we set inside of our payload.
So for me it is 180 to the 168 from the and the airport is five five five five press run.
And if we go and run our back door.
It will execute go back to our massive console and here is the metropolitan shelf.
Once again, we can execute the comments that we want.
If I type, for example, to command, this will list all of the processes running on that target machine.
Sifa scroll all the way up.
We should be able to find the red back door that the that we executed on the target machine, it should
be somewhere here.
And here it is, here is the red backorder dot Dixie, this is our file running on the target system.
Now we know how to create payloads.
Now there are other tools as well that we can use.
But I will leave that for you to discover since they all work pretty much the same.
Great.
In the next video, we're going to check out how we can make some changes on our payloads that will
allow us to either bypass some of the antivirus or we are going to see what we can do to the payload
to make our target have greater chance of executing it.
See you in the next video.