-: So far we have seen really good methods in 2 2
client side attacks. 3 3
These, these methods were really good, 4 4
because they didn't, we didn't really ask 5 5
the client to do anything. 6 6
We were, we would gain access to the target computer 7 7
if the client update their system 8 8
or if they download something, 9 9
then we will backdoor it on the fly. 10 10
So these methods are really good 11 11
because we don't really need to interact with, 12 12
like with, the person does need to do something. 13 13
So the user has to actually do an action 14 14
but we don't need to ask them to do something. 15 15
The only problem with these methods is 16 16
that we need to be the man in the middle. 17 17
So we either need to do ARP poisoning 18 18
or we need start our own fake access point 19 19
or do something to become the man in the middle. 20 20
In the next videos we are going to talk about 21 21
a method or methods that you can use 22 22
if you aren't the man in the middle. 23 23
If the person maybe exists in a remote place 24 24
that you, like it's not possible for you to become 25 25
the man in the middle. 26 26
So we are going to be talking about social engineering. 27 27
And social engineering is really big and there are 28 28
so many attacks that you can do 29 29
because it all depends, sometimes you don't even need 30 30
any technical information to that kind of attacks. 31 31
So it all depends on your target and how you are 32 32
going to build a strategy to attack that target 33 33
and maybe get some passwords 34 34
or gain access to certain computer system. 35 35
So what we are going to do is, usually with information 36 36
gathering, the most important step is gathering information. 37 37
You need to gather as much information as you can 38 38
about your target, about what websites they use, 39 39
who is their friends, 40 40
anything, any piece of information can 41 41
become really really useful to you when 42 42
it comes to social engineering. 43 43
So we are going to look at how to gather information 44 44
about a specific person first. 45 45
So here all we have, all we a going to have 46 46
is just a name or a Facebook account 47 47
and we will see what information we can gather 48 48
based on that name. 49 49
After that we are going to move 50 50
and we are going to start building a strategy 51 51
and we will see how we can use all the information 52 52
that we gathered to build a strategy 53 53
in order to build an attack and gain access 54 54
to the target computer system 55 55
and at the end we are actually going to use 56 56
some technical stuff to create our backdoor. 57 57
We are going to make a back door that is acceptable 58 58
by the target user, that they will probably use. 59 59
And we will also see how we can pretend 60 60
to be one of their friends and get the target person 61 61
to run the back door 62 62
so we are actually going to be asking them 63 63
to run a specific file and serve the methods 64 64
we have seen so far, where the user goes and voluntarily 65 65
goes and updates their system 66 66
or downloads a certain executable.