[size=medium]Hello ladies and gents!
Today I'd like to give a brief tutorial on conducting a power-shell Injection with Kali Linux
A power-shell injection is very similar to a RAT, however rather than a .exe that poisons the targets machine this is done with a .bat (basically a string of commands that can literally be copied and pasted into the CMD and perform the same task)
After injection, you have the ability to view webcam, browse files, Key-logger, ect.. pretty much anything you can otherwise do with a RAT.
prerequisites:
Alright so here's jist gents.
First we're gonna open up our terminal and enter the setoolkit
Navigate your way through the tool kit by first selecting
(1) Social-Engineering Attacks
(9) Powershell Attack Vectors
(1) Powershell Alphanumeric Shellcode Injector
You will first be prompted to enter your ip address, because we're doing this on the local wifi we will use our local int address. To find this, open a separate terminal and type " ifconfig "
you will then be prompted to enter the port number you wish to listen, this port must be port forwarded in order to conduct this attack method on a victim outside of your wifi area.
Now that that's entered, you have just created a poisonous .txt file, this will need to be changed to a .bat
To do this, let's first put this .txt file on the desktop. Copy the file location displayed on the terminal (typically it will be /root/.set/reports/powershell/)
Open a separate terminal (keep the current one open) And copy the location with the begenning statement "cd" For example: "cd /root/.set/reports/powershell/"
enter "ls"
this will list the "x86_powershell_injection.txt"
Copy the x86_powershell_injection.txt listed and enter "mv x86_powershell_injection.txt /root/Desktop
this will place the file on the Desktop, from there you must rename the file and replace .txt with .bat
open the other terminal which you previously had open and enter "Yes" to begin the listener.
At this point, you must get the victim to open the .bat file on their PC. Once they do, your listener will pop up with information that there is a connection. To access the new connection enter "sessions -i 1"
For a list of commands to conduct on the victim's PC type "help".
Congratulations fellow internet sailor 🤝🤝🤝
Today I'd like to give a brief tutorial on conducting a power-shell Injection with Kali Linux
A power-shell injection is very similar to a RAT, however rather than a .exe that poisons the targets machine this is done with a .bat (basically a string of commands that can literally be copied and pasted into the CMD and perform the same task)
After injection, you have the ability to view webcam, browse files, Key-logger, ect.. pretty much anything you can otherwise do with a RAT.
prerequisites:
- Basic knowledge of port forwarding
- Kali Linux 2.0
Alright so here's jist gents.
First we're gonna open up our terminal and enter the setoolkit
Navigate your way through the tool kit by first selecting
(1) Social-Engineering Attacks
(9) Powershell Attack Vectors
(1) Powershell Alphanumeric Shellcode Injector
You will first be prompted to enter your ip address, because we're doing this on the local wifi we will use our local int address. To find this, open a separate terminal and type " ifconfig "
you will then be prompted to enter the port number you wish to listen, this port must be port forwarded in order to conduct this attack method on a victim outside of your wifi area.
Now that that's entered, you have just created a poisonous .txt file, this will need to be changed to a .bat
To do this, let's first put this .txt file on the desktop. Copy the file location displayed on the terminal (typically it will be /root/.set/reports/powershell/)
Open a separate terminal (keep the current one open) And copy the location with the begenning statement "cd" For example: "cd /root/.set/reports/powershell/"
enter "ls"
this will list the "x86_powershell_injection.txt"
Copy the x86_powershell_injection.txt listed and enter "mv x86_powershell_injection.txt /root/Desktop
this will place the file on the Desktop, from there you must rename the file and replace .txt with .bat
open the other terminal which you previously had open and enter "Yes" to begin the listener.
At this point, you must get the victim to open the .bat file on their PC. Once they do, your listener will pop up with information that there is a connection. To access the new connection enter "sessions -i 1"
For a list of commands to conduct on the victim's PC type "help".
Congratulations fellow internet sailor 🤝🤝🤝
