Hello everyone. In this module. We're going to be taking
a look at Advanced payload encoding with
various tools. One of the tools that we're
going to get started with. In this particular video is called
shelter. Now, you can access shelter or
the the actual website at shelter project.com. That
is shelter with two L's and again,
you can go ahead directly to the web page and it
will give you a bit more information regarding the the
this particular.
Regarding this particular sub piece of software. So
what I'll do is I'll just go back to the download page here that is
under shelter project.com download and you
can also open up the documentation and that will give you more information regarding
shelter and and the the type of tool it
is and what it does. So again in regards to
what shelter is shelter, is a dynamic show, code
injection tool a.k.a. Dynamic PE in
the infected. It can be used in order to
inject Shell Code into native windows.
Ins currently 32-bit applications. Only the
show could can be something yours or something generated through
a framework such as Metasploit. So what we are
going to be doing is we are going to be using shelter to inject our
payloads into already existing windows
executables, for example, setup files. So
again, this entire process will involve us, essentially,
injecting or binding our
Metasploit or MSL Venom payloads into
a legitimate application.
That one would be expected to execute or
that one can use for social engineering. So,
for example, we can we can bind our payload to
a common program that is usually downloaded and installed
by users. An example of that is a browser or
a simple utility like WinRAR. And
the key thing to take into consideration here
is the fact that you should not you should be,
you should be using only 32-bit Standalone
applications or installers by default.
And, of course, it should be a native Windows obligation
and given that the mail, the main goal
is to bypass antiviruses. You should always
avoid packed up, locations and are packed, applications are
applications that have been compressed or packed using
a commercial Packer. So you want to avoid them.
So in this particular video, we will be using
WinRAR as it is a standalone installer and it's the most it's
one of the simplest ways to demonstrate this. So
the first thing we're going to be focusing on in this video is installing shelter.
No, installing shelter is very simple. It's officially supported in
the Calli Repose and you can install
it by a firstly, updating, your repositories and then clicking
on apt-get, install shelter. So we're going to
do that right now. So sudo apt-get install and
I'll say why shelter, right? And
we hit enter this put in my password, and
that's going to begin the process. So
again, I just need to specify shelter with a double L there.
We also you can see it's now found the package and
And it's going to begin the installation process here. So,
we'll just wait for this to complete. And after
it's completed, installing, we can
then get started with shelter and we can take a
look at the some basic commands. So if I click on shelter and
you can see that will use wine. So, this
this particular piece of
software requires wine, because again,
you're going to be generating Windows executable. So again,
just let why the wine configuration begin.
And again, we'll just wait for this to complete. The
we are looks like the configuration has begun and
shelter is going to pop up and
it's going to ask us to choose the operation mode either Auto
or manual. So we'll say Auto just to begin with.
We now specify the PE Target. The PE Target
is going to be your Standalone executable. This is where
we would specify an executable like, like
win draw, and then we can will, then after a specified, our
pale, our executable. We then
go ahead and
specify the various payloads that we want to use so
on and so forth. So that's going to be it for this video. I just want
to take you through a bit more about what shelter is and
how to get it installed on Kali Linux in the next video. We'll take a
look at how to use shelter to bind our payloads to
legitimate obligations and then show you that you can actually execute them
on a Target and bypass the antivirus and
get a reverse session or a meterpreter session. So
that's going to be for this video and I'll be seeing you in the next video.