In case you were curious, below this video I have a couple of tables for you along with the code box
that I'll be using here. There are different methods of us using file types inside of MSF
Venom for different operating systems. In particular, POSIX based systems like what we have
here and for our target Ubuntu. I forgot that we don't have it open right now. I'm going to be
making this one into a Python script file and I'm going to show you why in just a second.
This code, again, is below. I just wanted to show you real quick. I'm going to go ahead and run this
and so I can generate the actual Python file itself as dummy.py. On the desktop, I'm going
to right click and open with mouse pad. This is probably the first actual view we've seen of
a MSF Venom file inside of text form. In here, you can see that there are a lot of
X's and numbers in here and everything like that and this is encoded. It's a way to try and bypass
an antivirus detection, whether it be IDS or IPS on the actual host itself. More importantly,
I just wanted you to see that there are different forms of file outputs for MSF Venom.
Now, that being said, why would we do this and why would we also follow along with Chmod for 7.5.5
on this particular dummy.py? Well, I'm glad you asked because there are a couple of case
examples that we could use for this. For example, we already know where the process folder is.
We could potentially drop this in one of those proc folders by means of exploitation with the
user. So, this could be ran as an addendum file. Not my addendum, but the addendum like .py being
hooked on to a process or a service. See, hint, hint, I'm kind of carried over into the next
skill, but I'm not going to go too far into that because I just wanted to see if you were familiar
enough with creating your own dummy file to be able to play it onto the Ubuntu system. Now, I
will leave this dummy.py on the Kali system and a copy of it on the actual Ubuntu box as well.
Just wanted you to see that there were different options for you out there,
so you can start getting ready and prepared to be able to exploit those POSIX-based systems.
I hope this has been informative for you. I'd like to thank you for viewing.