Speaker: Okay, so let's see how we can gain full control 2 2
and get a Meterpreter session from the target computer. 3 3
So, again we're gonna go on the commands 4 4
and we're gonna go on the social engineering. 5 5
Now, there's actually a number of ways 6 6
that you can use in here to get a reverse trail. 7 7
It all depends on how you wanna make 8 8
your social engineering attack. 9 9
What we're going to use, we're gonna use a notification bar, 10 10
a fake notification bar, and we're choosing Firefox 11 11
because our target is runs on Firefox 12 12
or are using Firefox. 13 13
So, what this will do, it will basically tell the user, 14 14
it'll display a notification bar telling the user that 15 15
there is a new update or there's a plugin 16 16
that you need to install. 17 17
Once they install the plugin, 18 18
then they'll actually install a backdoor 19 19
and you'll gain full access to their computer. 20 20
So, the way we're gonna do this is we're gonna use the same 21 21
backdoor that we always created and we've been using. 22 22
Now, I actually have it stored in my web server. 23 23
So, I have it stored in var, 24 24
www.html and I have it called update.exe 25 25
but it's the same backdoor, 26 26
the same reverse http Meterpreter that we used before. 27 27
So, I'm gonna give the full address to it here. 28 28
So, it's stored in 29 29
10.20.14.207, 30 30
that's my actual IP, 31 31
and the name of the file is update.exe 32 32
and then the notification, the notification 33 33
is just saying there is an additional plugin 34 34
that needs to be installed to display 35 35
some elements on this page. 36 36
Now, you can change this and just say, 37 37
critical update for Firefox, 38 38
click here to install. 39 39
So, I'm gonna hit execute 40 40
and if we go on to target, 41 41
you can see that they're getting a message 42 42
telling them that there is a new update for Firefox 43 43
and click here to download and install. 44 44
So, the target person will be like, 45 45
oh yeah I need to install this. 46 46
So, they download it 47 47
and now basically they have a backdoor 48 48
downloaded on their machine. 49 49
Once they try to run this backdoor to install the update, 50 50
they think it's an update, but they'll actually run 51 51
a backdoor which will give us full access to their computer. 52 52
Before I run the backdoor, I need to listen on the port, 53 53
exactly like we did it before, 54 54
so I'm just gonna do show options here to show you, 55 55
I'm not gonna go through all the steps. 56 56
It's using Metasploit multi handler, 57 57
saying why we did it in the video of listening for ports. 58 58
So, we're using Meterpreter reverse http, 59 59
I have my IP and the port, 60 60
so I'm just gonna do exploit, 61 61
and I'm listening for the connections now. 62 62
Now, let's run the update that we just downloaded. 63 63
And if we go on the target, 64 64
you can see that we got full control over it 65 65
using a Meterpreter session. 66 66
Now, again 67 67
this is just an example of one way 68 68
of getting in full control over the target computer. 69 69
There's a number of ways that you can do 70 70
using beef and there is a number 71 71
of social engineering attacks that you can do 72 72
to gain full access on the target computer. 73 73
So, again I highly recommend you go over the plugins 74 74
and experiment with them and see 75 75
what attacks you can come up with.