-: In this section, we're gonna start talking 2 2
about Client Side Attacks. 3 3
So, most of the time it's better to try to gain access 4 4
to your target using the server-side attacks. 5 5
So, try to find exploits in the operating system. 6 6
And in the applications installed. 7 7
If you tried that, and it didn't work, 8 8
or if your target is hidden behind an IP, 9 9
so if the target person is not in the same server as us, 10 10
on the same network as us, 11 11
and if the target person is using a network, 12 12
so if you ping their IP, you won't be able to reach it, 13 13
because they're hidden behind a router, or behind a network, 14 14
then your next resort is going to be 15 15
the client-side attacks. 16 16
So these attacks require the user to do something. 17 17
So the user's going to have to open a link, 18 18
they're gonna have to install an update, 19 19
they're gonna have to install a picture, or open a picture, 20 20
or they have to interact, they have to do something. 21 21
And once they do it, we will be able to run code, 22 22
and achieve our goal. 23 23
Therefore, because it requires user interaction, 24 24
information gathering is very important in this case, 25 25
and we don't only need to get information 26 26
about the installed applications, 27 27
we also need to know the person. 28 28
We need to know their friends, 29 29
we need to know the networks they use, 30 30
the websites they use, 31 31
if there's any websites that they frequently use and trust. 32 32
Therefore, the information gathering section in here 33 33
is going to be focused on the person, 34 34
rather than focused on the applications 35 35
and on the operating system. 36 36
So, I also wanna show you my lab for this. 37 37
So obviously we're gonna be using 38 38
the Kali machine for the attacking, 39 39
and the victim, or the target, 40 40
is going to be using the Windows machine. 41 41
So again, I'm just gonna go over the networks, 42 42
just to to show you that they're both on the same network, 43 43
they're both using the NAT, the 10.20.14-NAT, 44 44
and if we go here, we have a NAT network as well, 45 45
and it should be the 10.20.14 as well. 46 46
So both devices are on the same network, 47 47
but it really doesn't matter. 48 48
Even if they're on different networks, 49 49
these attacks will work anyway, where we're gonna be using 50 50
reverse connections in most of them, so 51 51
you don't really need, 52 52
the target doesn't really need to have a separate 53 53
real IP address.