So we're inside of our Kali terminal again and this time we're going to be
using sudomsf console
and we're going to fire that up with our Kali password real quick and it's
going to take us
basically to a sub-command prompt for our metasploit console and this is us
setting up our listener
to when that needle is executed through one method or another for us to be able
to have that
listener open and this also emphasizes the fact that we need multiple listeners
if we send out
multiple types of reverse shell codes made generated with MSF venom like this.
So this is one that
we created for the DLLs on port 4444 we might need to be able to create another
listener on 4445
etc etc in case we send multiples out. Also by keeping log of those it lets us
know very well
what's actually communicating to us. So if I say listener on port 4444 is going
to be for all the
DLLs that I sent out that's one thing or I can even break it down even further
to go this port
numbers for this file type, this port numbers for this file type or this port
numbers for this type
of system etc etc. So logging is very important in this particular case and
also make it sure that
you have the listeners open and available. Now let's say the line's busy on one
of them that's okay
it'll just call back the next time it's called back up and try again. So now
that we have our MSF
console opened up we want to make sure that we're using the same exploit that
we called upon in
the beginning for the reverse TCP. So we're going to say use exploit / multi/
handler.
Pretty straightforward now it's going to say now it's going to be at the sub
window here
multi handler we need to set some parameters for it. For instance we need to
set payload
oops I need to be able to type correctly today. Set payload is going to be
windows. Now right here
I do want to point out that we need to use for ours x64 because in the one that
we created it was
x64 those you do need to keep the same. If you're attacking a 32-bit system and
you remove the
x64 out of that one commandlet for the MSF venom you need to do the same thing
would you be able to
receive it on the actual listener and say windows meter per meter per meter per
meter and then
reverse TCP and I'm just having over for everything and again commands are
going to be for the
listed below. Once we input the actual payload itself we need to set the
listener and the
IP and the port number and these were the same as what we did inside the actual
command for MSF venom itself same IP address 192.168.0.53. Now we're going to
set in lower case
set L port to 444.4 and in order for us to be able to execute this it's
is it difficult? No it's just us typing in exploit and just going from there.
Now this is going to
sit and listen for us to be able to receive an incoming connection you can see
here that it says
start a reverse TCP handler on IP and port and it's just waiting for us to be
able to list a
due response. So in the next portion of the skill let's get back to trying to
get windows to actually
connect and use that DLL in a malicious way.