Hello everyone and welcome to part one of my lean ethical hacking.
So in this part we're going to create a backdoor that backdoor is essentially an evil program that when
the person runs on their computer it will give you access hence the name backdoor.
And this access will allow you to control a computer you can upload things you can executes.
You basically have full control of the computer.
Now there's a lot more to that.
It seems very simple but there's a lot more that goes on to actually achieve the.
But in this video we're just going to generate the actual exit of the application that will allow this
connection between you and a victim computer to actually create the backdoor in carry Linux.
We need a few things so to download this all the codes or commands that are in the description so you
can copy it line by line if you want to save should typing all this out.
It's line by line so don't copy and paste all of it in one go.
You just need to open the terminal and get the first line and this first line is installing gates so
its act gets so hyphen between app to get 10 space high from Y install gate and this will install gates
so you can clone repositories you can upload to Gates etc. Once you click enter I'm not going to click
enter because I've already installed.
And like I said in the previous video.
And in case you're confused what I'm say now is because this is a real payload.
So if you've already watched this video then or you've already watched the original within the 24 hours
it was uploaded.
I've decided to make this video again and real uploaded the previous the original video is no longer
available so if you're only just on past 11:00 then this video will be good for you if you've already
watched past 11 then you can still watch this.
There's a little bit more information I wants to actually get into this video than I did in the original
anyway.
Once you click enter this installation should only take a few seconds.
It did for me.
And once it's complete you can actually clone the repository and this repository is this one here.
This gets to repository includes veil and veil is what we're going to be using to actually create the
backdoor veil is just a python script that allows you to create back doors use some payloads etc. you
type that in like a have a copy and paste it once you click enter it should start cloning and cloning
is essentially just copying you from the ghetto website to your local drive.
So if I go to places like home then I go to in fact it's straight in the home.
So it's here and it should be available folder for you in your home place.
If I double click on this it's got all the files from the repository
next.
What we need to do is we need to actually go to this directory in the terminal because we need to run
the set up folder so if we just get rid of a lot.
Now we type C D.
Real quick answer as you can see the terminal will automatically go inside of this directory.
So if we type alas as you can see this corresponds to the file manager everything that's named here
is essentially inside here sorry inside this folder.
So now we know we're in the correct directory then we need to go inside the set of folders.
To do so you type D and unsettle click enter.
Now we're in the subset of folder which is this one here.
So essentially we're inside this now.
So I actually want to set up this setup is an installation of Vale.
There are three installation wizards these installation wizards are all interpreters.
So you'll install one you'll install Python and Ruby it's all required for you to actually run Vale
because there's loads of different payloads within this Vale which you'll see later on in this video
so we're in such setup now what you want to do is you want to type pseudo dot forward slash settle down
S H.
Like I said all of this will be in the description.
So insert this leave pad here.
This will be in the description so you can just copy a line by line.
Once you do due to the forward slash set of H.
Then you can do space.
I can see once you click and so it'll start the installation process.
And this is the long installation process.
So give a five or 10 minutes.
You will need to watch the installation though because the installation Wizards will pop up and require
you to click next tick boxes.
Don't worry about it just don't take any additional boxes that appear in the installation message.
Just keep clicking next on all of them.
Then it should take you in near the end of the installation if errors do appear within the terminal.
Ignore them because it still works so don't worry about any errors that actually show well within the
terminal.
If you're stuck with this installation process or something unexpected does happen then just leave it
in the comments and I'll be happy to help but you should be fine.
Once you go through the installation process it will appear like an actual installation wizard to the
whole screen will go blue a thing and then there'll be like a little gray box that says Click Next click
next and then it'll just do the installation with the loading bar.
So once that's done you've installed it correctly you've got Val now and all we need to do is actually
execute the the veil script and to do so we need to win this veiled API.
So I'm going to go back into the veil folder I'm going to do clear type clear sorry.
So it clears the terminal now we've got fresh terminal to run this P Y file we need to do a full stop
forward slash veil dot P Y Vale dot P Y click enter and then it opens veil.
So now as you can see here it says veiled version three point one point four.
We've got Main Menu to them it says he had two tools loaded and we've got available commands we've got
exit info list that update news we need to list the available tools so you type list.
These are two different tools so evasion and ordinance we want to use or air.
Sorry not we.
We want to use evasion so type.
Use one click enter don't just type one just you've got to type.
Use one because this is Command.
Now we're using veil so GNC it's as veil evasion menu we've got 41 payloads loaded and then we've got
additional commands.
So which I'll talk through later on we need to take the list again because we want information on a
specific payload we want to use it type list and these are the forty one payloads we're interested in
nine or 10 it doesn't really matter which one you use here the purposes of this course are going to
be using nine.
I'm going to use reverse in fact no I'll use TTP yes it's just there's almost difference between them
it's just that I hate TTP s I don't know what it is it's just preference so I'm going to use 10 the
corresponding numbers what the command we need to use so that TTP s one is ten so we go down here again
just scroll down and type use 10 then we use in C ask them and say a B vest HDP s because that's the
one we selected we use and 10 then you can see additional required options we've got compiled set out
XY and the value is why we wanted to compile to an executable because when you seen that a Windows machine
then it will run because it's like an application it's just a dot XY and throughout this course we'll
be talking to you about binding it to like J pegs making a in fact validation does make it undetectable
by ANSI viruses and it's important information I've got let you know at the end of this video.
So stick around for that because it's very very important that you listen.
But the most important parts of this not to make the video extremely long is I'll host an airport and
sleep there.
The three main common ones.
There's also processes where you can see here these are optional see they're not actually required.
The main two of these two for it to actually work.
So we need to set the El host and what the El host is is your IP address of the Cally machine in this
case.
So it's the IP address of the.
And to find that all you need to do is you need to open a new terminal.
I'm going to split this horizontally.
Now you may be wondering what terminal I'm using here because it might look a little bit different with
this red line I'm using terminator.
So if you go to Google you can search how to install Terminator K Linux and install it.
It's not required it just has additional features it's exactly the same as the terminal.
So clear this and then type I f config this I f config will bring up all the connections like the Wi-Fi
connections or Y connections I'm using 88 0 so to find the IP it's not.
Which is this or this the IP address of my cutting machines.
I'm just going to copy this and then type set I'll host and paste the IP address click and said that's
that's the Al host of the backdoor because we're using reverse.
It needs to know where to go back to if that makes sense or when you send this application somewhere
it's gonna have to listen for a connection to your computer.
It's going to listen for a connection from someone else's computer so it needs to know where to send
the connection back if that makes sense from the victim's computer to yours.
Your computer is gonna be listening for a connection and then their computer.
The victim one is gonna send it.
It's gonna have to know where to send the connection back to which is your computer which is also listening
for a connection.
If that makes sense.
So that's why you set the IP address of the L host to your IP address.
We've got the L pulled.
You can change this if you want to by default.
Vale evasion has a 1881 you can have 1880.
The reverse TTP uses that 1880 as well.
You can use 80 you can use 44 for full so full force.
I think there's all the ports as well.
Good to use.
I recommend 80 88 or 80 81.
She can leave this is default.
The El host has been set.
As you can see it's blank.
Don't worry about that.
It doesn't automatically refresh but it's definitely been set because there's no errors we can add some
processes if he wants to make it look like an application that's actually running.
So it uses processes.
Sleep you can make it sleep for an amount of time before the payload is executed on their computer.
You send the computer you send your backdoor to someone.
And they double click on this dodgy application.
Then it will sleep for 5 seconds before it actually executes the bad code.
If that makes sense it's like a bomb for example.
So yeah you could set that to 10 seconds it doesn't matter it's optional.
I'm not going to set to do anything so soon as a double click on 8 will access the connection or it
will open the connection and then you'll be you'll have access to their computer.
You can leave everything else you don't have to mess with anything else so that's a which set the Al
host.
We haven't set any of the optional ones because it's not really required hence why it's optional so.
Lastly we need to do is actually generate so you type generates because we want a generator which is
this one here to generate the payload type to enter or press enter.
Then we need a name for the payload someone to take back to me Original Upload of this I called it back
to order XY and then what it created it created backdoor XY Di XY and it looked a bit retarded so just
type back to do not add the dot EFC extension to this.
So I'm just going to click enter and it's not a good idea to call a backdoor because people will not
open it but that will be talked about later on in the course but there are ways of defending against
this which is quite simple really.
So we've executed today and we created a payload that's in the next cuticle form as you can see here.
This is the most important line to actually see this in its real form inside the file manager go down
to the second terminal.
I'm just going to type clear to get rid of all a.
We can do a command that will open the directory so you type x d g hyphen open I'll just zoom in so
you can see this.
So it's X the G haven open and then we can copy the executable line which is this one because we want
to locate the executable up to the comp. because we don't actually open the backdoor without XY because
it's just pointless.
If you send this to someone right now and they double click on it nothing will happen because you need
to listen for the connection and that will be in two parts 12.
This is only generating it so we do actually open an click enter open the file manager straight to this
directory and as you can see here is the backdoor literally called backdoor don't you see.
So this backdoor is our weapon.
Essentially and that's a C just generated your backdoor.
Way.
And finally using the right ports we know how to generate one now and this is with Vale 3 so it's not
with the old version all the things will be in the description as always.
If this video did help please leave a light comments.
If you're stuck with anything I'll be happy to help.
Subscribe for future content and I will see you in the next video.