Before we get into the framework and its structure inside of our clinics, let us first talk about reverse
shells and find shells.
As we already mentioned, Shell is our access to the target machine with the help of Shell, we execute
command and control the target system.
So Shell is essentially our payload that we drop on machine after exploiting it.
However, there are two different types of shells.
We got reverse shells and pine shells.
Now, reverse shells are something that you will use a lot.
It works on principle of target machine trying to connect back to over the next machine.
For this to work on our killing machine, we must first listen for the incoming connection over some
port.
Then we explain the target and drop a shell, which will tell the target machine to connect to our port
and clinics that we're listening on.
After it completes the connection, we can then control that machine.
On the other hand, bandshell is when the target machine opens their port for us to connect to.
In this case, it is the target machine that is listening for the incoming connection on that port.
And we are the ones that must connect to that port.
After we do it, we can control that target machine.
However, there is one problem.
We find Shell, and it is also one of the main reasons why we want to use it that much.
And that is because firewall can forbid target machines to open port.
Many variables could have a rule that says don't open any random port for security reasons, therefore
our bandshell would not work even after exploiting the target.
However, reversed Shell's will always work.
Why?
Well, because the target in that case is just connecting to us.
It is the same process as when the target visits our website.
It connects to a port on that Web server and it gets the Web page of that website back.
Just in this case, it will connect to port and our clinic's machine and we will establish a shell like
that.
That's why Reverse Shell is always a better option if possible.
All right, cool.
Now we are ready to start introducing ourselves to the metal framework, the number one tool that we
will use for exploitation.
It is as important as a map and we will use it a lot.
So it is important we get its basics down first.
It is not hard.
However, it will take some practice to get used to it.
Let's get straight into it.