Now, the back door that we created uses a reverse payload, so like I said before, it does not open
a port in the target computer.
It actually connects from the target's computer to our computer.
And by doing that, it will bypass firewalls and it'll look less suspicious.
So for this to work, we need to open a port and our computer so that the back door can connect from
the target computer to us on that port.
So if you remember when I created the backdoor, I said the port to AT&T.
So I need to open that port in my Calli machine so that when the target person executes the back door,
the back there can connect back to me on Port AT&T.
So I'm just going to write the name of the payload that we used, because that's very important when
you're listening for income and connections.
So we use a payload that's written and go.
And that was an interpreter, Rev ETPs, which is a reverse https payload.
Now, this is not a command.
I'm just going to write it in here.
So just that you keep this in mind and we use for AT&T.
For the reverse connection.
So these are the most important things to keep in mind when listening for income and connections.
So I'm going to split the screen.
And I'm going to listen for income and connections in here, and to do that, I'm going to use the meat
exploit framework now to run meat, exploit.
All you have to do is just run MSF council.
Now, we tabloids framework is a huge framework for penetration testing, so the interpreter back door
or the interpreter payload that will create it for us is actually programmed by the people who made
me tabloid.
That's why we're using Floyd to listen for income and connections.
So Village Vision actually uses MLO to generate the back door that we chose in the previous video.
So to listen for incoming connections, we're going to use a module imit, exploit nanometers deployed,
as I said, is a huge framework and it has a lot of modules.
So the module that we're interested in is a module that allow us to listen for incoming connections
from an interpreter payload to use that module.
We're going to do use.
To use a module and then we're going to specify the module name and the module name is Exploit Multi
Handler.
OK, so the command we're using is used to specify the module that we want to use, and we're using
a module called Exploit Multi Handler that allow us to listen for incoming connections.
I'm going to hit enter.
And I was already in that module, so you can see that nothing changed for me, but for you, you should
navigate to that module and I'm going to do show options.
To see the options that I can set for this module.
And you can see that you can specify different options for it.
The most important thing that you want to specify is the payload, so you can see in here for me, it
said to Windows interpreter, a TCP, and if you remember what we used, we used an interpreter reverse
https, not Tsipi.
So you want to change this?
The first part is fine because our target is going to be Windows.
But you want to change the reverse TCP to reverse https and you can change that exactly the same way
that we did with vill evasion.
So you type in said.
You put the option name that you want to change and we want to change the option for the payload, so
we're going to say payload.
And we're going to set that to Windows interpreter reverse, he stops this time.
OK, so we're doing set to set an option, we're setting the payload to windows, interpreter of various
tips.
Now, this payload should correspond to the payload that you chose in the back door.
So in the back there, we used the interpreter versus the TPS.
That's why in here we're using a reverse https as well.
If you chose reverse HTP, then set this to reverse HTTP.
If you use a reverse TCP, then set this to reverse TCP and so on.
So I'm going to hit enter for this and that's going to do it for me.
And if I do share options now.
You'll see the payload changed to windows, Mr. Peter reverse his steps now, the same concept applies
for all the other options.
So you want to set the host our IP address and you can see that this is already set to the right one.
So if it was wrong for you, all you have to do is just do said.
Host.
And put your IP address so you can get the IP address using it config like I showed you in the previous
lecture.
So for me, it's 10, 20, 14 to 13.
And again, this is the same IP that I used when I created my backdoor.
And same goes for the port.
You want to set the same port?
So we're going to do said.
Allport.
To AT&T, because that's the part that we used when we generated the backdoor.
So, again, the main idea with this is you want to set the payload, the host and the port to exactly
the same options that you chose when you created the backdoor.
Once done with that, we're going to do show options one more time.
And you'll see that I have my payload set properly when those meteor reverses stops, I have my host
and I have my airport and all of that is done properly.
So all we have to do now is just do exploit.
And now Mr. Lloyd is waiting for connections, as you can see, on Port AT&T and on my IP address,
which is 10 2014 to 13.
So now if anybody opens the back door that we created in the previous lecture, because it's a reverse
back door to the back door will try to connect to the IP that we set when we created the backdoor,
which was 10 2014 to 13.
And it'll try to connect on Port AT&T.
It's going to come to this computer and this computer is already waiting for that connection from this
multi handler module.
So the connection will be established and then I'll be able to control the target computer and basically
hack it and have full control over it.
Now, in the next lecture, I'll show you a very basic way to deliver the backdoor to the target computer
and how to test the back door and make sure that it works properly.