The same attacks that we explained during this course but remotely.
How can a compromise system remotely the system could be a computer could be a mobile phone.
Any system how to do that remote.
We focused during the attacks to do that locally.
I mean how can we attack target locally.
But we need to see how to do that remote.
Now to be able to do that we're going to follow the same steps of the previous attack except we need
to to change or to have two different chances number one.
And instead of using your private IP you can use your public IP.
I mean in most of the previous attack we used the private IP which was 1 9 2 1 6 8 1 2 whatever.
But in this case if you are sending to the victim a public IP you need to send them.
You send them your IP you need to send them your public IP not your private.
And to be able to know what public IP you are using simply just type what is my IP common I believe
I already explained that before.
What is my IP the comment to show you what IP you are using but definitely we will not use this IP the
same way it is because this is an evidence against you.
So number one that for that attack or if you are implementing any malicious code or doing any social
engineering you need to send them.
He's your public IP not your private IP.
The ones that you are using internally.
But this is not actually the main issues that I need to explain in this lecture.
The main issues and I need to explain in this issue that you need to configure port for forwarding and
I need to explain to you what is Port fraud.
This is the core or the main issue to be able to establish a remote attack.
What is port forwarding now.
Let's take this small diagram that we are explaining assumes that the victim are behind our are on the
Internet and this is your networks one on the right.
It's your network.
You have a machine.
You have many machine many devices on side your network you have some machine which has 1 9 2 1 6 8
2 1 2 1 0 6 1 0 7.
You have a mobile phone you have a server you have a tablet so you have different computer on your network
and all the computer and all the devices they have different private IP but they have the same public
IP as IP that I showed you.
It's the same public IP so all the machine has the same public IP but they have a different private
IP and actually the public IP is not someone who is assigned to the computer the public IP is router
IP.
So all of them because they are using the same router to connect to the Internet.
So they are using the IP of the outer reaches of public IP.
So you need to understand the difference between private and public.
Now here is a scenario assumes that I did send to the victim that is on this global or on the Internet.
You are in that is the IP of your computer.
Right.
And once you click on this you are and I will get full access to this machine.
Now what happened is because I'm sending that to someone that is on the Internet.
So when I didn't send them in my private as I just mentioned I sent to the victim my public IP which
is the router IP.
So I'm assuming that I sent the e-mail for the victims the victim are clicking on the public IP.
Now he's trying to connect to the public IP so the traffic would reach throughout her right.
I mean the victim is connecting to the router and then he will be confused to which computer I need
to connect to this computer or that computer or my by my or my tablet.
So what I'm saying is when the traffic the malicious traffic or as the victim is doing a reverse connection
back okay and he's connecting from his computer to the hacker computer since he's connected to the public
IP so the traffic will reach to the router and then he will be confused.
He can find that there is many computer behind this router so to which machine should connect and this
is where I need to configure according to the port so you know to see you noticed in some previous attack
that we were specifying that the victim will do a reverse connection to my computer which has this IP
and I have to specify support as well if you go back to the attacks that we implemented in social engineering
on malicious software or our set or any attack.
You notice that whenever we are configuring attack we need to specify as IP which was our IP private
IP and support what will be change as you're going to see on the next demonstration.
I'm going to change the private IP to the public IP and I'm going to keep the port but what I'm going
to do I'm going to do on my router I'm going to go to my router I'm going to him any traffic coming
from outside if it target port for 444 please forward resist traffic to my computer if you target port
four five six eight Please Forward two.
So I'm configuring Trotter to receive the traffic and forward the traffic according to the port number.
It depends on the traffic is coming to each port.
OK.
So I'm going to show you how to do that.
And then it would be more crystal clear once we take an example to this port for boarding which will
allow to accept the traffic the router accept traffic and for the traffic to a specific machine.
I need to go to my router so you can go to your router by typing the router IP if you are not aware
of the router IP you just need check it usually written on the bottom of the router but most of the
cases it's 1 9 2 1 6 8 1 2 1 or 2 0 2 1.
This is most of the router as this default IP to allow you to configure up and I will go here and talk
to my routing and we're going to go to the advanced setting the interface would be change it will be
different depending on what trout you are using but you're going to look for the same options that you
are doing.
So in my case I will look for port forwarding.
This is the main thing that you need to learn to be able to do a remote attack.
And don't worry if things seem to be a little bit complicated it's quite easy once you take a demonstration.
It will be quite easy.
And here I can see I have to specify some IP and support.
So since I will accept the traffic on my linux machine let me see the IP of my linux machine
my Kelly Linux.
So let's see.
Let me clear the screen
and let me type i f config.
And as you can see the IP is 1 9 2 1 6 8 2 1 2 1 0 7 so going back here I will type regarding the IP
which is my Kelly Linux or to be just as generic or backtrack any any computer 1 9 2 1 6 8 2 1 2 1 0
7.
Okay if you receive the TTP traffic I can keep TTP or UDP or both but in my case most of the attack
would be TTP something in any traffic TTP traffic coming from outside and requesting to connect to port
for 4 4 4 depending on the attack will be done on which port.
I mean if the attack would be you will be sending a traffic that will allows the victim to connect on
port for four three or five five or whatever port.
You put the port here and you click on Apply change and it should chew down here.
Now what exactly is a slimy.
This means that any traffic coming from outside from the Internet to the router if the traffic is showing
that is coming or targeting port for 444 please forward this traffic to the this IP which is my Kelly
Linux IP and on my Kelly Linux I will establish a listener and he will accept it.
If you do didn't do this specific step any traffic coming from outside to the router it will be stuck
because he don't know to which computer behind set out or he should connect so us see a real example
to simplify the process.
But how what I want you to do right now is to go inside your router configuration do not change anything
just check this port for auditing and on the next lecture you're going to take a real example to show
you how we talk.