Instructor: Now we're ready to receive connections
from our backdoor.
So we created the backdoor, we set a payload
and we're listening for incoming connections here
from any connection that comes in from the same backdoor
on the same port on the same IP.
So now if a person runs that backdoor,
we'll receive the connection back in here
on this computer.
What we're going to do now is
we're going to test the backdoor to make sure that it works.
And to do that,
we're going to use a very basic delivery method.
Later on in the course,
we're going to talk about smart delivery methods
that will trick the person into opening the file
that we're sending to them.
For now, we're just doing a very basic example
just to test our very basic backdoor.
So to do that,
we're just going to put the backdoor on our web server
and then download it from the target computer.
So there's nothing smart about this
and you probably can't use this way to deliver the backdoor
to a real person.
So we're only doing this for testing
to make sure our backdoor works.
So Kali comes in with a web server and what that means,
basically you can use Kali as a website.
So what we're going to do is,
we're going to put that back door and that website
and then just download it from the target windows machine.
Now the website directory,
where you should store the website files is VAR WWW HTML.
So I'll show you what it is now.
If you just click in here on the path
and then put a forward slash it will allow you
to manually type the path that you want to go to.
So we want to go to var www html.
And this is the location where the website files are stored.
Now for you, you'll probably only have index.html,
you won't have all of that stuff.
But that's just stuff
that I created while I was testing a few things.
So the index is the main page that people usually see
when they browse to this website.
So what I'm going to do here is I'm going to, first of all,
create a directory and I'm going to call it Evil Files.
So every time we create a Backdoor or a Keylogger,
we're going to put it in here
and then download it in the windows machine to test it.
And again, later on in the delivery methods section,
we're going to talk about smart delivery methods.
For now, we're only going to be creating the Evil Files
and test them to make sure that they work as expected.
So I'm going to call this directory Evil Files.
And inside it,
I'm gonna put the backdoor that we created before.
So the backdoor that we created was made using Veil Evasion.
And Veil Evasion actually gave us the full path of it
when we created it, if you remember.
Or you can go back now to the lecture and have a look on it.
So I'm just going to press Control T to open a new tab.
And then again,
I'm going to click on the path in here
and I'm going to put forward slash
to manually enter the path.
And then we're going to go to
var lib veil-evasion output compiled.
Hit enter.
And you'll see the backdoor that I created the right here.
And we named it rev https 80 80.
So I'm going to copy this and paste it in here.
And that's it.
Now we can download this file from the website
that Kali uses, that Kali has.
Now to start the website reverse, to start the website,
we have to start its service from the command prompt.
And to do that, we're gonna do service apache2 start.
So the command is service to start at the service.
Apache2 is the name of the web server.
And then we want to start this web server.
I'm going to hit Enter.
And because we didn't get any errors,
that means the command got executed properly.
Now everything is done.
So the IP of the Kali machine was 10 20 14 213.
It's the same IP that we're listening here
and it's the same IP that you'd get if you're on fconfig.
So I'm going to go to my windows machine
and I'm going to navigate to my IP address
of the Kali machine, which is 10 20 14 213.
And this will open the basic index dot HTML
that I showed you.
And it's basically just says it works.
Telling us that the web server is working
and the website is working.
This is all inside VAR WWW HTML.
So if I wanted to go to the directory
where we put the backdoor, then we're just going to go
to Evil Files because we called it Evil Files.
I'm going to hit Enter.
And you can see the backdoor that we created
in the previous lecture.
And we called it Rev HTTPS 80 80.
So if I click on that, it's going to download it for me.
And like I said before,
this is not the smartest way to deliver the backdoor.
But right now, all we want to do
is just to test the backdoor and make sure that it works.
So if I click on the downloads and run the back door,
it's going to tell me that this is an executable
so be careful when you run it.
But this is not detecting a virus.
It's literally just saying, be careful when you run EXEs.
I'm going to allow it anyway.
And once we come back here, you'll see that we received
a connection from the target machine.
So we didn't connect to target computer,
the target computer connected back to us.
So you can see the IP of the target computer,
which is 10 20 14 206.
And that IP connected back to us on port 80 80. Right here.
So basically now we have full control over that computer.
Right here, you can see that we have a meterpreter session.
And what meterpreter allow us to do
is literally do anything that the user can do
on their computer.
So we'll see how we can use the meterpreter later on
in the post connection attacks.
For now, we can see that the backdoor is working
and if we do sysinfo, you can see that we are inside
the Ms Edge Windows 10 machine.
It's a Windows 10 right here. It's x64.
It uses English US and it uses a meterpreter x86
for Windows.
So as I said, now we can do anything we want
on the target machine.
And we'll talk about how to use the meterpreter later on
in the post connection section.
But again, basically right now,
we hacked the target computer and we have full control
over it.