HACKARDE: 1 Apr 2012

Hack Victim Windows OS based system by Backtrack 5

Unknown 31 comments

Hello Friends, Today Hackarde completed his 201 post so i think why not celebrate this double century. So today i am going to celebrate this moment with a great post which i think you really like that. In very small time Hackarde complete his milestone and make new milestone for future.All this thing make possible with your love and hope.

So now let's start, Today tutorial basics come from payload, so first thing which come in your mind is

"what is payload?"

A payload is code that we want the system to execute and that is to be selected and delivered by the Framework. For example, a reverse shell is a payload that creates a connection from the target machine back to the attacker as a Windows command prompt.A payload could also be something as simple as a few commands to be executed on the target operating system.

Step 1: Go to Backtrack 5 and open the terminal , i had done it with BackTrack5 R2 , so after starting terminal now write below write command ....

cd /pentest/exploits/set

and then press enter key.Now again type..

./set

again press enter key. For live example see below pic...

Step 2: When you done step 1 then a menu will come where he say to select, then you select "Create a Payload and listener" which number in menu 4 so write 4 and press enter key, see below pic,

Step3: Again a menu will come where some name will display,here select number 2 which are "Windows Reverse TCP Meterpreter and send back to attacker", write 2 and press Enter Key, see below pic,

Step4: Now Select number 2 which means "shikata_ga_nai(very good)" and press Enter Key, see pic,

Step5: When step 4 completed then it will ask for Default Port of the listener so enter any number . I am going to enter 808 , see below pic,

When it ask "Do you want start the listener now ?" then enter "Y" for say yes ,see below pic,

Step6: Now, a file "msf.exe" create on the Folder. For found that file follow path..

File System>Pentest Folder>Exploits Folder>Set Folder

When you go there you see msf.exe file like below pic,

Step7: Now change this file into any other name like facebook.exe,video.exe,gmail.exe anyone which you want but remember write .exe extension of file, see below pic where i am change into facebook.exe,

Now use Binder and Crypter for this file and attach it with any other file. You can also use my old tutorial...

http://www.hackarde.com/2012/01/use-crypter-in-place-of-binder-for-make.html

http://www.hackarde.com/2012/01/bind-file-with-your-mp3-music-file.html

Because i want to only show you method so i am not bind it. Now upload this file on any free space provider website and send link to Victim, see below pic...

In my case, my victim is my friend Hemant PC , Hemant found my send link and see a software for download then he start downloading when download finish (it takes just 5 second) then my facebook.exe file automatic execute and simultaneously my terminal window show me some lines in which want to say sessions start.

Step8: When Step 7 completed then for check sessions status run below write command...

sessions -l

when you run it then you see it showing connection...

192.168.0.13:808>>>>>>>>192.168.0.14:49793

Which means my system IP 192.168.0.13 which default Port 808 now connected with my victim Hemant System which IP is 192.168.0.14 and port 49793 . Now you enter in your victim System, see below pic,