Please.
How to do a remote attack on any device could be a computer it could be a smartphone.
But how can we do the same attack that we explained earlier remotely.
As I explained in the previous lecture you have first to forward support and I went through that on
the previous lecture and show you how to go in your rotor to the port for rorting.
It could be different interface but definitely you will find something called the port for auditing
and you can do you know the same way I did right now.
I did forwarded all the traffic coming from outside to my router through port.
The target port for four or eight or four four three two to the computer 1 9 2 1 6 8 1 1 1 0 7 which
is my can in the next machine.
If I go to the clinics and I search I am sorry and I check the IP you'll see that the local IP it's
1 7 and depend on the attacks that you want to implement.
You can add here any IP or any port so you can say OK I want any traffic coming from outside.
Targeting for instance port 5 5 5 5
till port 5 5 5 5 and you give it any name and you add it and it will be added as here as well.
So what I'm saying here is that I'm configuring Mara my router that any traffic coming to this router
and target specific port it would be directed to a specific computer.
And according to that if I do an attack in my Kelly Linux machine that accept connection and port H
or 44th 4C as I'm going to show you right now and the victim from outside my network click on the link
and the traffic is going to my Kelly Linux machine.
It reaches out to the router only the redirected to my Kelly Linux machine and I wouldn't accept my
connection on my continuing login even if I have more machine behind Senator.
I have other machines that have other IP and tablet and smartphone but now the traffic would be redirected
from my rotor to my specifically Linux ship and same concept apply.
I mean if I have one computer inside my local network that has an FTB server and I need people to connect
whenever they connect remotely to my network they will connect to the specific computer in my land.
I can forward the traffic to port 21 to this computer.
So the concept apply on menacing now to test the settings that I did.
I can go from any machine including Kelly Linux or any machine and I can type or scan and I can use
and map which you already explained minus small s captors and we can put the IP of the router.
How can I get the IP of the router if you go to what is my IP dot com.
It will show you the public IP that you have and this will be the IP that will be sent to the victim
so we can copy that and we can put it here beast and let's see.
We should find all the port that we followed has been open port 80 port for four sleepers for 4 4 and
if we had more ports it would be open on the router as well because it will accept traffic to the airport
and forward this port to the specific machine.
Now let's test the attack what I'm gonna do.
I would go for instant now for the attack.
I don't need to go through the attacks one more time you can do the same exact attacks that we explained
during the course except instead of sending the private IP as we used to do.
You're going to send to the victims of public IP and we will not send it this way because it's very
easy to discover that this is an attack we're gonna do some manipulation.
But my point is we're going to use the public IP which is an 86 97 certified phone 46.
This will be the IP to be sent to the victims so it will allow according to the port forwarding it will
connect to our general UNIX machine.
So let me go to exploitation 2 and I'm going to set just as a proof of concept.
Okay.
And from certain going to choose a let's take for instance social engineering attacks then let's take
a Web site attack.
We went through that before.
We're going to just follow the steps.
The only changes we're going to meet it's to change support as IP.
From a private IP to a public IP.
So let me take France and Java applet attack and we're going to choose a web template and I will not
repeat the steps because this attack has all been already explained.
Now notice Steve that he's asking me Are you using the port for rorting.
Yes.
In my router I did configure support for loading some grid type here.
Yes
let me just move the screen so it will not confuse us or even close it.
And he needs the IP address to be uh IP address set to observer.
This could be an external IP.
So now what I'm gonna do I will not add the private IP I'm gonna add the public IP so I'm gonna copy
this IP and this would be the IP to be sent to the victim.
Uh no.
If the payload is on a different machine and here you know I'm not explaining that.
Because this war has been already explained just to not just the result I'm just going through the steps
as a proof of concept.
And he's creating a Web site that includes a payload.
So I'm going to choose for instance number two because no tool allows the victim to connect to us and
we're going to choose number one and which port support that I'm going to choose I have to make sure
that on my rotor it has been forwarded to my can in the next mission so I'm going to keep the full force.
And actually this was why I requested to follow the traffic to port possibly in my router and we're
going to choose six I'm finished.
And he's he's doing the payload right now according to the uh if everything went well.
If I open once he finish and he told me that the payload is ready.
If I go to any computer on a different network and puts the public IP I should be connected to my Kelly
Linux machine and we're gonna see that in a few seconds.
So while Yeah exactly.
I believe he's he's preparing the pillow.
But my point is he lets to exert here and let us go to any machine along with the other network.
But I'm going to try.
Here for instance.
As you can see this is my public IP right.
I use the few seconds ago I put it inside the browser and not a single shop.
Let me now right to type H T T P S and the IP and let's see what will happen.
Now you can see that he's establishing a connection.
Okay uh so he's taking full time but let's see Kelly Linux.
Is he accepting anything or uh any connection is going to be established.
Uh not yet.
Just a few seconds until you get the page.
Now the point here.
What I'm trying to say is that I'm using now a public IP and it's connected to my local computer.
It will take a few seconds but if you do that from a different place using any device you can do that
from a smartphone from a computer as a victim victim can connect through smartphone through a computer.
It's not the case.
All the attacks that we already explain can be repeated one more time by choosing the public IP and
uh
configuring support for auditing kids.
This may take a few seconds.
Let me who's just too wait until it's finish.
It's taking too much time.
So what I'm going to do I'm going to try from my smartphone to log into the same Web site and I'm going
to see here what's going to happen.
So from my smartphone I'm going through the browser and I'm going to type the same IP and I want you
to watch what will happen on the screen if he's going to do a connection or not.
Just need to make sure that it's pretty dubious because seatbelts connect to port 44th Street.
Well if what we are doing the attack we configured each TTP it should work in Port H.
See now my smartphone has been compromised locally and even this is IP from the smartphone.
The public IP and I'm compromising the smartphone from my public from the outside.
So it's not about this specific attack.
My objective of this lecture issue is to show you how can we do the same attack that we explained earlier
but remotely.
And the point here was support for warning.
I mean you want to.
I just need to make sure that you understood exactly what is port forwarding the justice sitting inside
the network.
Now if you if you do that you can repeat all the attacks one more time remotely.
But please do not do that in an unprofessional way so you can do.
You can have two different networks right from a network to another but do not misuse it.
I already went through that through this.
The disclaimer at the beginning but I'm repeating myself.
Finally one point remaining which is I can not send to the victim so IP this way because this is like
an evidence he can do some search and know from where this IP is coming and it's it's not the right
way.
You already explain how to Shorten's IP if you remember there is some Web site you give them the IP
it will give you a name but during the next lecture I'm going to show you how that it's done in a professional
way using some of the dynamic DNS Web site you register in some Web site and they will give you a name
instead of IP and you send to people name instead instead of IP.