‫Instructor: Hi. Within this lecture,
‫we're going to see how we can use
‫a tool called MsfVenom
‫in order to create a backdoor for our Android devices.
‫So, the tool that we're going to use
‫is called MsfVenom, or MsfVenom,
‫however you may want to pronounce it.
‫Let me show you how to spell it.
‫In order to do that,
‫of course, you have to open your (indistinct)
‫and you have to open your terminal
‫and make sure you're ready to write some comments
‫on your terminal.
‫I believe you know how to install (indistinct),
‫how to run it, how to run your terminal by right now.
‫If you have skipped the previous section,
‫make sure you go back and watch that before coming here.
‫So, over here, we're going to use MsfVenom.
‫And in order to do that, first of all,
‫I'm going to type MsfVenom like this,
‫and hit enter in order to see the documentation
‫of the MsfVenom.
‫Of course, we're going to write a lot of parameters,
‫but at this point, you don't know any.
‫So, first of all, I'm going to show you what are those.
‫So, we use this MsfVenom in order to create back doors,
‫in order to create some malicious files.
‫And it all starts with payloads.
‫So, what are payloads?
‫We use payloads, we use this tool
‫in order to select what kind of operating system
‫that we are going to hack in,
‫and what kind of session do we expect back
‫and what kind of port and way that we should follow
‫to hack (indistinct).
‫So, maybe you don't know these terms.
‫Don't worry, I'm going to explain everything.
‫As you can see, we can see the payload over here.
‫It's actually --payload or -p.
‫We need to specify this payload,
‫otherwise, we won't get any backdoor created.
‫And remember, MsfVenom is not only for creating back doors
‫for Android, we can create some back doors
‫like malicious files for Windows
‫and other platforms as well.
‫So, we need to specify the platform.
‫We need to specify the technology that we're going to use
‫to hack into the target computer or target device.
‫So, I'm going to write it down first
‫and I'm going to explain it, part by part, to you.
‫And we're not going to finish
‫creating our back door in this lecture,
‫we're just getting familiarized with MsfVenom
‫so that we can comprehend all of this stuff.
‫So, all you have to do just right now
‫is to write msfvenom -p
‫like this.
‫So, Msf, not C,
‫MsfVenom -p,
‫and then we specify the payload
‫that we are going to be using for this.
‫So, you first chart with the operating system,
‫like if you're going to do this for Windows,
‫then you write Windows over here.
‫If you're going to do this for Android,
‫then you write Android over here. Okay?
‫So, in our case, of course, we're going to go with Android
‫and then you put a slash
‫and then you write the session
‫that you want to expect to get back.
‫I'm going to explain this
‫a little bit later on in this lecture, but right now,
‫just write meterpreter.
‫So, it's either pronounced as meterpreter or meterpreter,
‫it depends on the country that you live in, I believe.
‫So, I'm going to call this meterpreter
‫and it's spelled as METER, like this.
‫PRETER. Meterpreter.
‫And then, put a slash and then write reverse tcp.
‫Reverse_tcp.
‫Don't worry, I'm going to explain.
‫So, Android is the operating system
‫that we 're going to be attacking, right?
‫And you know it, and meterpreter is the session.
‫So, this manages a session, manages the connection
‫between the target computer or target device
‫and the (indistinct) or attacker device.
‫So, in this case, we're going to attack an Android phone
‫and when Android phone connects back to us,
‫then meterpreter will create a session.
‫Actually, this payload will create a meterpreter session
‫in which we manage this session,
‫in which we manage this connection
‫so that we can send some comments to the Android
‫to be executed, like browsing the files
‫or opening the camera of the phone or something like that.
‫We do this with a session called meterpreter.
‫It's very advanced, it has a lot of comments built in
‫so that you can interact with the hacked device.
‫And then, later on, we have this reverse tcp.
‫This is the way that we are trying to hack into.
‫We could have written over here
‫something like reverse tcp, reverse http.
‫So, reverse means that connection will come
‫from Android phone to us.
‫It won't be coming from (indistinct) to the Android phone
‫because it will be much more detectable
‫if we try to send the connection from here to this phone.
‫But if we send the connection from Android phone
‫to our (indistinct), it will be much less detectable. Okay?
‫And actually, it's the case for the Windows
‫and other operating systems as well.
‫We don't use bind, we use reverse connections
‫when we try to create back doors.
‫So, tcp is the port,
‫is the gate that we are trying to go in.
‫We could have used http or https as well.
‫In my trial and errors,
‫I found out that reverse tcp is the way to go
‫so that I'm going with reverse tcp.
‫If it doesn't work for you,
‫you can just try to create something with reverse http
‫or https as well.
‫So, once we do that,
‫we're going to specify a little bit more parameters
‫within the couple of following lectures
‫and it will create a backdoor, a payload for us.
‫Once we send this file to the target computer
‫or target device, the Android, actually, in this case,
‫once the user taps on this file,
‫it will create a session between (indistinct)
‫and Android phone so that we can easily access
‫all the files and folders and command system
‫inside of those phones or those targets.
‫So, that's what we are trying to do within this section.
‫So, if you have understood it, then it's very good
‫because we're going to stop here
‫and continue within the next lecture
‫where we discuss the rest of the parameters
‫that we need to put in over here.