Lesson 101 : Mesterpreter Overview Video Lecture | Ethical Hacking using Kali Linux (in English) - Software Development

hey guys and welcome to the next
tutorial of ethical hacking and
penetration testing via kali linux so in
this tutorial i will be starting up with
the meterpreter prompt so I'll just go
and start my virtual machine so in
previously most of my tutorials I have
actually gone through most of the
commands in meterpreter problem but I
have not told you what exactly it is and
how exactly it works so in this tutorial
we will be covering all or the or most
of the things about meter printer prompt
and yep after you have done this then
you will know exactly how it works and
how we can go ahead and use that to go
ahead and grab different sessions from
your targets computer let's start it up
okay so before I proceed let me give you
a brief introduction meterpreter has
been successfully integrated into
Metasploit framework that is msf console
so it can be accessed through a number
of different payloads and meterpreter
has not only been implemented on Windows
but its principle and design are fully
portable to a variety of operating
systems such as including Linux so you
can also go ahead and download the
Metasploit if you don't have let's say
for example for some reason you're not
using Kali Linux for any random reason
you have Ubuntu or let's say if you have
Windows but let's say or even Mac then
we have met a better prompt for that and
but you for that you need to install the
Metasploit which I would be expending in
detail later on but I said now you can
just go over here and download that for
I believe rapid7 is the all the people
who are actually ok nevermind so you can
check it over here as Metasploit Pro is
also there for community as well as the
default one that's a free one and I
believe we also have it for the Windows
version so let me check for which one it
is exactly ok I was redirected to the
same page no-mind ok so as you can see
we have it for
the Linux for 64-bit 32-bit and for
Windows that's only 64-bit and I believe
we don't have it format yeah we don't
have it for Mac nevermind but we can
still go ahead and start it in our
virtual machine by using in any of the
UNIX or the Linux system
so coming back to our own screen the
first thing that I would be teaching you
would be the windows 32 bind meter Peter
so this payload binds to a port on the
target machine and waits for the
connection and after the connection is
established the meter Peters server is
uploaded and the existing connection is
used for the meterpreter communication
channel after that we have Windows 32
reverse meterpreter and this payload
connects back to the attacker on a given
port the connection is then used to
upload the meterpreter server after
which point it is used for the
meterpreter communication channel so
I'll just go over here and show you how
exactly it looks like you can start it
through a lot of ways I am just giving
an example let's say for example let me
check social engineering and payload and
listener I'll just type any random IP
address IV I'm not actually we're done
creating anything so I'm just showing
you exactly how it works like so as I
told you about Windows 32 bind me to
Peter that is this shell over here and
then it's also available for 64-bit as
well then we have the reverse shell that
is the that these three and then we have
Windows 32 FC fine receive body meter
Peter so I don't know exactly where it
is exactly maybe it will be there in
some other payload but we're not study
to find receive body meterpreter he is a
payload that searches for a file
descriptor that the exploit was
triggered from and uses it to upload the
meter Peter server after which point the
connection is used for the meterpreter
communication channel so this payload is
particularly intrigued Ewing because it
does not require that a new connection
be opened and thus bypasses all
five-hour connections depending upon the
exploit any one of these payloads can be
used the most preferred
payload is entirely dependent on both
the exploit and the conditions under
which the exploit is being performed
such as firewall restrictions or without
firewall or otherwise so it it is in
mind
so after payload has been selected the
fun can begin the first step is to start
the Metasploit client interface through
and the Metasploit provides a number of
interfaces including MSF web MSF console
emissive CLI we will be using MSF
console for this illustration purpose so
I'll just go ahead and start the
terminal and now I can just type MSF
console it will take quite a bit for it
to start since it only has 1gb of RAM so
well just quietly wait till it starts ok
I'll do one thing by the time it starts
I'll go ahead and start my windows 7 e
for any other reason I needed this two
in needed to implement the payload on my
Windows 7
this MSF console can take quite a bit of
time to start if you are starting it for
the first time because it needs to go
into develop all the caches making it
perfect let's see if we okay we don't
have our payload that we created in our
last tutorial
no matter loop you just created again so
now we just have to wait till these
command prompt starts okay perfect
so this is the awesome Metasploit banner
I I believe it looks like a cow or
something nevermind so yes so once at
this prompt the first thing that we need
to do is pick up an exploit so just for
the sake of the demonstration I'll be
using a tester exploit that is going to
be used which is simply an exploit that
is used against a demon that executes
whatever code is thrown at it so I'll
just go done type use tester and believe
the teeth should be capital I don't
remember exactly last time I did service
let me check yeah I believe the t should
be capital okay I believe that I am NOT
imported this tester better mind so if
you have a module named as tester that
you have actually went ahead and
imported this so just assume that test
some kind of payload and this is how you
will go ahead and use it I will be using
an actual payload later on or a module
to go ahead and load and I'll show you
so just for the time being and just
assume that tester is some kind of
module so facilitating the tester
exploit the next thing to do is to
select the payload that is to be used so
for demonstration the win32 reverse
meter beta payload will be used so aside
from that payload it is also necessary
to set variables that are required by
the expert and payload such as the
remote host the remote port which
represent the target host as well as the
local host and local port which are used
by the payload when connecting back to
the attacker
so the next thing that we would like to
do is to go ahead and set payload it
will probably not work the reason being
that I am NOT it loaded the module
perfect
right so as soon as I inter said Peter
it's giving me the option that said
they're given option two value if value
is omitted print the current value and
so what it's saying exactly is that
after set payload I need to go ahead and
set an option and a value so after we
have the set up some kind of payload
I'll just go ahead and type set payload
let's say then 32 and I'll just type
underscore reverse underscore meetha
pittha let's see if I'm able to go ahead
and set this payload Peter is not well
let me check if it is in small okay
nevermind
so this is how you go ahead and setup a
payload the reason being that windows 32
expert is not yet here so that's how it
will look like after that we have to go
ahead and set the our host and just let
me be clear that the reason we are not
getting any specified value for the
payload is because this we haven't used
any test model as of now if we had used
any kind of specific module only then we
will be able to load the payload because
the payload is loaded after the tester
so if you wanna try to Gordon load the
payload value or the our host before
using any specific module then it won't
work so I will be going at and using
that but for later option as so now I'm
just giving you an idea exactly how it
works so after that we have to set an
our host and that would be the remote
host that would be my own computer's IP
address so it would be one 27.0 whatever
your IP address would be I'm just using
a random IP address and after that once
you go ahead and see this you need to
set the output that would be by typing
our caps P ort and then you have 2 1 2 3
4 5 or 5 for whatever your output would
be and so what you have set the output
then we need to go ahead and set the
local host so that won't be that means
the computer which we are trying to
attack so it would be L host and
127.0.0.1 ever and then okay it should
be L host perfect and after that okay it
should be a host perfect
after that the final thing would be set
L port and we can set the elbow to
anything 1 2 7 9
and this how the airport is set so
finally with the payroll and exploit
define it's time to fire up these
engines and with that the meter petal
connection is at established and it's
ready to be used so the first order of
business is to issue the help command to
get a feel for what features are
available so all of these commands are
explained in detail in my tutorials and
the most useful for the point of
illustration is the use command the this
command allows for dynamically loading
meterpreter extensions from anywhere
these extensions are automatically
uploaded to the target machine and then
loaded from the memory for example let's
say one of the extension allows for
executing and killing processes as well
as duty the list of running processes so
this extension is the process extension
which can be loaded by issuing the
command such as let's say for example
use Gentile use - M only after the
process is executed you can win type use
- M process it won't work because I am
NOT it executed - at the payload but
this is how it looks like so and after
the extension has been loaded the new
command will be added to the help output
so for process extension I can just go
ahead and type something like help and
it will give you everything over here
you won't see any stuff like that the
reason being that I have not yet
uploaded the module because I have not
even yet started the payload that's why
but once you have uploaded the module
and started the executed the payload
usually you will see these process model
over here included but I believe that we
already have a process named model over
here named as PS okay okay I cannot see
it but as soon as I go and start any
kind of remote access then it will
probably start so that's how it looks
like I'll just quickly go ahead and
execute payload or I'll just go ahead
and start this type let say use payload
windows and I don't know exactly how it
works let me try if it works I believe
it should be the capital oh that should
work name and I just couldn't start up
my social engineering toolkit that would
be much more easy for me to go ahead and
start up the payload and all creative
payload and listener my IP address this
is my IP address I'll just copy it and
paste it over here
it would be - I believe and every time I
go out and use the back door executable
let's go and check what she caught again
I just so poor would be 443 and by the
time it's executed let me go ahead and
disable my firewall because else it will
go ahead and not allow me to copy it
just for the time being I'll disable
this now minimize this and your payload
is copied so I'll just wouldn't start
the directory I type yes right yeah
perfect so I just go down into the
verities exactly a city home directory I
believe a city will be over in the root
folder or us are okay here we have the
payload file just copy it and paste it
over here
now what is this exactly because copy
and paste it over here for free and I'll
just copy it and paste it over here so
yeah that's how it looks like