Now we're ready to receive connections from our back door, so we created the back door, we set a payload
and we're listening for incoming connections here from any connection that comes in from the same back
door on the same page report on the same IP.
So now if a person runs that back door, will receive the connection back in here on this computer.
What we're going to do now is we're going to test the back door to make sure that it works.
And to do that, we're going to use a very basic delivery method.
Later on in the course, we're going to talk about smart delivery methods that will trick the person
into opening the file that we're sending to them.
For now, we're just doing a very basic example just to test our very basic backdoor.
So to do that, we're just going to put the back door on our Web server.
And then downloaded from the target computer.
So there is nothing smart about this, and you probably can't use this way to deliver the backdoor to
a real person.
So we're only doing this for testing to make sure our backdoor works.
So Carly comes in with a Web server and what that means, basically, you can use Carly as a website.
So what we're going to do is we're going to put that back door and that website and then just download
it from the target Windows machine.
Now, the website directory where you should start the website files is vare w w w html.
So I will show you where it is.
Now, if we if you just click in here on the path and then put a forward slash, it will allow you to
type to manually type the path that you want to go to.
So you want to go too far.
W w w heightmap.
And this is the location where the website files are stored now for you, you'll probably only have
indexed HTML, you won't have all of that stuff.
But that's just stuff that I created while I was testing a few things.
So the index is the main page that people usually see when they browse to this website.
So what I'm going to do here is I'm going to, first of all, create a directory and I'm going to call
it evil files.
So every time we create a backdoor or a key logger, we're going to put it in here and then download
it in the Windows machine to test it.
And again, later on in the delivery method section, we're going to talk about smart delivery methods.
For now, we're only going to be creating the evil files and test them to make sure that they work as
expected.
So I'm going to call this directory Evil Files.
And inside it, I'm going to put the back door that we created before.
So the back door that we created was made using television and television actually gave us the full
path of it when we created it, if you remember, or you can go back now to the lecture and have a look
on it.
So I'm just going to press control, try to open a new tab, and then again, I'm going to click on
the on the path in here and I'm going to put forward Slash to manually enter the path and then we're
going to go to VAR.
Leyb.
Relevation.
Output.
Comp..
Hit enter.
And you'll see the back door that I created right here, and we named it ETPs 1880, so I'm going to
copy this.
And paste it in here.
And that's it now we can download this file from the website that Calli uses that Caylee has now to
start the website over, to start the website, we have to start its service from the command prompt.
And to do that, we're going to do a service.
Apache to.
So the command is service to start the service Apache to is the name of the Web server, and then we
want to start this Web server.
I'm going to hit enter.
And because we didn't get any errors, that means the command got executed properly.
Now everything is done.
So the idea of the machine was 10, 20, 14 to 13.
It's the same IP that we're listening here and it's the same IP that you'd get if you run if config.
So I'm going to go to my windows machine and I'm going to navigate to my IP address of the Cali machine,
which is 10 2014 to 13.
And this will open the basic index, not the email that I showed you, and it basically just says it
works, telling us that the Web server is working and the website is working.
This is all inside.
VAR w w w html.
So if I wanted to go to the directory where we put the backdoor, then we're just going to go to evil
files because we called it evil files.
I'm going to hit enter and you can see the back door that we created in the previous lecture and we
called the Tarab HTTPS 880.
So if I click on that, it's going to download it for me.
And like I said before this, this is not the smartest way to deliver the back door.
But right now, all we want to do is just to test the back door and make sure that it works.
So if I click on the downloads and run the back door, it's going to tell me that this is an executable.
So be careful when you run it.
But this is not detecting a virus.
It's literally just saying, be careful when you're on.
X is I'm going to it anyway.
And once we come back here, you'll see that we received a connection from the target machine.
So we didn't connect to the target computer.
The Target computer connected back to us.
So you can see the IP of the target computer, which is 10 2014 to 06.
And that IP connected back to us on Port 880.
Right here.
So basically now we have full control over that computer right here, you can see that we have an interpreter
session and what Mr. Péter allow us to do is literally do anything that the user can do on their computer.
So we'll see how we can use the interpreter later on.
In the past, connection attacks.
For now, we can see that the back door is working.
And if we do session for.
You can see that we are inside the message when 10 machine, it's a window stand right here, it's 64.
It uses English, US and its uses and Mr Peter Eighty-six for Windows.
So, as I said, now we can do anything we want on the target machine and we'll talk about how to use
the interpreter later on in the past connection section.
But again, basically right now we have to target computer and we have full control over it.