Hello everyone and welcome back to pop 15 on my land.
Ethical Hacking course in this part I'm not sure how to generate an undetectable backdoor this battle
will not be detected by any antivirus that's currently on the market.
It's quite dangerous.
So this is the reason I'm about to say that this video is for educational and ethical purposes only
I'm not responsible for any damages you cause.
Everything is your responsibility.
This is for people who are interested in the cyber security field and want to know how this is created
and made and also the methods on how to prevent stuff like this.
So I've got Terminator up here and splits the panel of the terminal in two the first line of code we
need is the gateway blinks so if i paste this it's going to execute straight away.
Well it's in the description so essentially I'll clear this clear and go up to.
So essentially I need to do is type this.
Oh not that.
No I didn't clear there.
Anyway it's the same thing.
So if you just scroll down here all you need to do is type Gates clone and then this you are out so
you can type it or go to the description and just highlighting copy and paste it into the terminal click
enter and it should in fact clone this repo.
So hey ecclesiastical is the frameworks name.
All credit goes to the original creators of this framework.
All the links for them will be in the description.
So once you've clone this essentially gets clone basically means we use using the guest command and
the clone command is essentially fetch every file that's inside this repository.
So inside Hercules and copy it to my local machine.
So if we go to off a file manager files in the home directory you can see a new folder or file called
Hercules.
So it's right here for me.
He's just to look for it and then we can go inside this next what you want to do is you want to open
the read me M.D. will open with other application open it with leaf part.
So if leaf pad is in here just click view all applications I'm finally part in the dropdown list put
months here so I'm just going to click on the opening.
So now we can read the read me file you scroll down.
It says here usage and just above usage is some commands.
So we need these two commands.
So the next one we need to do is go get and get to our com Faith.
Faith is the faith.
No sorry I don't know how to pronounce f fatty fatty Hey you really don't know.
Those are his faith but it's not anyway.
And this will be in the description as well.
So I can just minimize that for now and copy this.
If a copy and paste it in said the separate terminal window now you can paste here in the same one it
doesn't matter if you're using terminal just the standard terminal application then you can just keep
the same terminal window open it doesn't matter I'm just using Terminator and that has more features
than the standard terminal but it works exactly the same.
So once you type that in you click enter it will fetch go get hooked up come and download it once you've
downloaded this and if an error appears now mostly or in fact it probably will for the first time installing
this especially this line here it will say error.
I think there's a problem with.
Go go language and Genet created by Google.
If you get that error you need to do it you need to type apt get install go long if you type the and
install it.
So if we click enter it's going to install the go long package it's already installed for me so that's
why it's saying 0 graded and 0 newly installed once everything's newly installed for you then you can
go if you click the will power twice for me.
So it goes back to an outline you click and so it should install.
And when you click enter it will install really quickly and it takes a few seconds and then it will
add a new line.
So that's when you know it's completed when a new line appears like this.
I'm just going to zoom in so you can see this a little bit better.
So essentially what we're doing is if you got an error when you type go get your hope dot come and get
color this one in here then all you need to do is type this new line and once it's installed you can
retype this line here and then it will install crackly so I'm just going to type clear now because we've
got color.
The last one we need to do is we need to type go run set up to go and to do this we need to be inside
the Hercules directory.
So if we go to Hercules so if you type C D in fact I'll type less so we can see the file.
So if we look for Hercules which is this one here so we just type D Hercules click and set and then
type go.
I think it's go run up.
There we go.
Go run settle.
Go click and set it run the setup install everything.
Like so make this a little bit bigger.
It's gonna clone and then it will say sets completes it successfully opened a new terminal window and
then inside this terminal went to taxes start the framework we need to do is type Hercules click enter
and then the Hercules framework will start to run so we can close out of that same long closed them
terminal windows and make this one big enough and zoom in a little bit.
In fact we can zoom in with this framework so just making the window as large as possible.
I apologize but the tax being really small.
Let me try and open a new terminal and see if I can zoom in on this Terminator.
There we go.
It's because it's in the terminal.
This one's terminator.
So I'm going to close out of this new terminal window and use Terminator everything Cam why if just
closed the terminal how J open Hinckley's again.
All you need to do because it's installed in the roof appear inside this file explorer.
If you look it's in the home.
So this is all roofed and you cannot change this directory so you cannot drag this font folder out onto
the desktop it's gotta stay in the roots home directory so just don't change this directory for this
file.
And once it's installed you can literally type painkillers from anywhere in the system so if you just
zoom in and type Hercules I think it's H.
I'm used to spellings o h e r.
See you.
Yes.
Click enter and they would go in rooms.
Now I can see as zoom in and out.
The reason I couldn't see is because they opened an actual terminal window next.
Looks a bit stupid knowing what's going on.
There we go.
Yeah.
The reason it didn't zoom in was because it opened a terminal window and I haven't set the scroll mouse
wheel to zoom in anyway we've got the terminal Hercules framework open now so let's get started or we
need to do is type generator payload.
Click 1 so select one because this the index for generate payload.
We want to use page DTP yes you can use T.C. paywall or TTP it doesn't really matter.
We use interpretive reverse age to CBS click 3 then press enter or type terrain and press to enter the
A.V. evasion score as 8 to 10 was selecting this payload.
So now we need to set the outpost for this payload.
The whole host is the IP address of Kelly Linux machine.
If you haven't watched how to generate a basic payload in the previous few videos then I recommend you
go do so because I'm not going to explain everything here.
So it's 1 9 2 dot 1 6 8 stone 1 10 don't want to 8 so it's a fun the IP address of your system.
All you need to do is you need to type.
I f conflict in a terminal window click.
Oh no sorry I f conflict.
And if you go up to your ECJ row or whatever wireless card or wireless network you use and so you might
have w line 0 if using a wireless card.
It's iiNet and it's this right here.
So that's why I've typed in the host.
Click enter the output can be 1880.
So for L ports I recommend 80 80 80 or 80 81.
You can also use 4 for full 4 as well and so decide which one you want to use.
Make sure you know the device is actually using this port.
Click enter.
Do you want to add persistence.
I can close out of this window here so close out of that one do on a persistence with type no persistence
is basically when they execute this payload on the computer whether they turn it off and back on it
will still be infected so obviously that's useful if you want to completely take over their system every
time they turn it back on your.
You can listen for connection again.
I'm gonna say no for this like answer.
My great function no account.
Here we can enter the name.
So the name for this can be and not a virus.
Click enter.
It doesn't have to be called not a virus it can be called anything you want.
We're not going to compress it either so it's generated the payload not a virus.
Don't you XY.
And if you go to your sorry not to open the file explorer again go back to the home Sara tells you it's
inside the hate to these fallen so on the home.
You should see a payload.
So as you can see here I'm not a virus don't you XY if you look here on the terminal it says payload
saved our home.
Not a virus dummy XY so not a virus don't you say and to test if this is undetectable we'll go on the
Internet and we'll search for ice online scanner so I recommend using no distributed so no distributed
click enter.
This will not distribute on reverse engineer your file which is important then all we need to do is
we need to drag and drop the file into here and click scum.
So this scum for the file.
This is going to scan this file compared to every.
Oh the most common antivirus is now on the market.
Now I forgot what it is.
I would love.
Oh thanks.
Thirty five.
There we go.
These are the most common anti viruses the most popular.
We'll see if there's not a virus.
XY actually bypasses them let's have a look it's just generating it now load shortly
it just take a little while because it's scanning pretty much every antivirus they would go detected
by zero out of 39.
Sorry it's not 35 it's 39 so it's got a hash it's got an empty five and these are undetectable.
So if you scroll down and you can see it says clean clean clean clean clean and it's called not a virus
even though it's a backdoor so you can listen for connection could send this to a Windows machine.
You can upload this send as a download.
Combined it to an image you could spoof the extension.
So I've got videos for all of them in this course in fact.
That was the previous video.
So if you haven't watched them I recommend you can do so.
Well that was a for the video just generated a backdoor that is undetectable by every pretty much every
anti virus there is.
Look here.
Kaspersky can't detect it.
McAfee pull God bit defender even Malware bytes can't detect it a veggie free that does a show on so
it doesn't really matter.
Anon can't even detect it.
So there we go.
Which just generated a backdoor that's undetectable.
Very dangerous virus.
Well it's not a virus don't access so it's not a virus but there we go.
That's a generated one that's how to very simple.
If you don't understand the airports and now host then you're just watching this video because you found
it.
I recommend going through me.
The calls from part ten or eleven and you will understand it a lot better and go much listening for
connection.
In fact I'll put it in the description.
So after you've generated the back door and it's undetectable go in to the description and find the
link for the listening for connections and you will not understand the l put a whole host a little bit
better.
So that was it for the video if it did help please leave like comments if you stuck with anything.
I'll be happy to help and I will see you in the next video.