Moving the file or the payload file that was created on Armitage to the target machine is not easy actually.
And it happens through lots of channels of social engineering that we will learn later on in this course.
But for the sake of giving you just a teaser I will now create a payload and attach it to a JPEG far
we go dark to the Windows machine.
And this is the virus payload that was created earlier.
The XY file of downloaded a nice image from the Internet.
The smiley face and I have converted it to to an ICU or I can image on J back to ICU which is a free
Web site.
So now we have three files you have to install as well.
You have to install one right for this purpose.
So just select digital files detailed file and the J at five right click and select at the archive.
We want to create an SFX archive SFX is a self extracting file so once you double click on it something
will happen in the background and what we will do now is that we will let the user double click on it
and just see a JPEG file being displayed and I actually do what's happening in the background is that
the virus or the payload is being run as well so select SFX archive go through the advanced options
select as effects options go to the text and icon and just select this icon then go to the modes and
undecided for select title so the user will not see what's happening in the background then go to the
set up and select the program that will be run after the user double click on the file.
So we will run this JPEG file and we will also run this virus along that the XP.
Now we're ready so we have this test Trojan here.
You can rename it to wherever the name it's a screen saver.
And here you go.
You have this nice set of files your screensaver that XY you can send it to any user just for the sake
of the Stonewall create a your file here and move it.
If you go back again to Cowley you'll see that there is no session happening here no connection for
compromise target.
So from the windows machine you just double click on the screen saver and you go.
A very nice J like image will display if you go again to the tally machine you'll see that session has
been created for the still get machine and this has been compromised.
Again you have a Metro picture session here that you can use to interact remotely with this compromise
target and here you go.
This is a screenshot for the compromise socket.
So happy hunting.