Original subtitles

During the section I will focus about how to do the same attacks that we explain during this course.

Ultimately how can I compromise system remotely system could be a computer could be a mobile phone.

Any system how to do that.

We focus using the attacks to do that locally.

I mean how can we attack target locally.

But we need to see how to do that.

Now to be able to do that we're going to follow the same steps of the previous attack except we need

to do to change or to have two different chances number one.

And instead of using your private IP you can use your public IP.

I mean in most of the previous attack we used the private IP which was 1 9 2 and 6 8 200 whatever.

But in this case if you are sending to the victim a public IP you need to send them you send them your

IP.

You need to send them your public IP not your private.

And to be able to know what public IP you are using simply just type what is my IP dot com and I believe

I already explained that before.

What is my IP document to show you what IP you are using.

But definitely we will not use this IP the same way it is because this is evidence against you.

So number one is that for the attack or if you are implementing any malicious code or doing any social

engineering you need to send them here is your public IP not your private IP.

The ones that you are using internally but this is not actually the main issues that I need to explain

is this.

The main issues and I need to explain in this issue that you need to configure port forwarding and I

need to explain to you what is port for all of this is the core or the main issue to be able to establish

a remote attack what is port forwarding.

Now let's take this small diagram that we are explaining assumes that the victim are behind.

Are are on the Internet and this is your network zone on the right.

It's your net or other machine.

You have many Compte many devices on Cybernetica of some machine which has 1 1962 1 2 2 1 0 6 1 0 7

you have a mobile phone you have a server you have a tablet so you have different computer on your network

and all the computer and all the devices that have different private IP.

But they have the same public IPs IPs that I showed you.

It's the same public IP so all the machine has the same public IP but they have a different private.

And actually the public IP is not the one who is assigned to the computer.

The public IP is a router IP.

So all of them because they are using the same router to connect to the Internet.

So they are using the IP of the router which is a public IP.

So you need to understand the difference between private and public.

Now here is a scenario assumes that I did send to the victim that is on this global or on the internet.

If you are an.

That is the IP of your computer.

Right.

And once you click on this you are then I will get full access to his machine.

Now what happened is because I'm sending that to someone that is on the Internet and so and I didn't

send them in my private as I just mentioned I send to the victim my public IP which is the router IP.

So I'm assuming that I sends email for the victims the victim are clicking on the public IP.

Now he's trying to connect to the public IP so the traffic would reach the router.

Right.

I mean the victims connecting to the router and then he will be confused to which computer I need to

connect to this computer or that computer or my mine or my tablet.

So what I'm saying is when the traffic is a malicious traffic or as the victim is doing a reverse connection

back OK and he's connecting from his computer to the hacker computer since he's connected to the public

IP.

So the traffic would reach to the router and then he would be confused he can find that there is many

computer behind this router so to which machine he should connect.

And this is where I need to configure according to the port.

So you notice that you noticed in some previous attack that we were specifying that the victim will

do a reverse connection to my computer which has this IP and I have to specify support as well.

If you go back to the attacks that we implemented in social engineering on malicious software or our

set or any attack you notice that whenever we are configuring attack we need to specify IP which in

our IP private IP and support what will be change as you're going to see on the next demonstration I'm

going to change a private IP to the public IP and I'm going to keep support.

But what I'm going to do and what I do on my router I'm going to go to my router and go tell him any

traffic coming from outside if it target port for 444.

Please forward this traffic to my computer.

If your target port four five six it please forward to.

So I'm configuring router to receive the traffic and forwards the traffic according to the port number.

It depends on the traffic is coming to each port.

So I'm going to show you how to do that.

And then it would be more clear it clear once we take an example to do this port forwarding which will

allow to accept the traffic router accept traffic and forwards traffic to a specific machine.

I need to go to my router so you can go to your router by typing the router IP if you are not aware

of the router IP you just check.

It's usually written on the bottom of the router but most of the cases it's 1 and 2 and 6 to 1 or 2

0 to 1 this is most of the router has this default IP to allow you to configure the.

And I will go here.

And talk to my router and we're going to go to the adventure setting.

The interface will be change that will be different depending on what router you are using but you're

going to look for the same options that you are doing.

So in my case I would look for port forwarding.

This is the main things that you need to learn to be able to do a remote attack.

And don't worry if things seem to be a little bit complex it is quite easy once we take a demonstration.

It will be quite easy.

And here I can say I have to specify so I paeans support.

So since I will accept the traffic on my Linux machine let me see the IP of my Linux machine.

My Linux.

So let's see.

Let me clear the screen

and let me type f config.

And as you can see IPs 1 9 2 and 62 6:39 So going back here I will type regarding the IP which is my

Kennedy-Nixon which could be the generic or backtrack any any computer 1 and 2 and 6 2 2 2 1 0 7.

OK.

If you receive the TCAP traffic I can keep TCAP or read your post but in my case most of that could

be TCAP something in any traffic TCAP traffic coming from outside and requesting to connect to port

4 4 4 4 depending on the attack will be done on which port I mean if that could be you'll be sending

in traffic that will allow the victim to connect on port 4 4 3 or 5 5 or whatever port you put the port

here and you click on apply change and it's true true down here.

Now what exactly is a slide means.

This means that any traffic coming from outside from the Internet to the router if the traffic is showing

that is coming or targeting port for 444.

Please forward this traffic to the this IP which is Michael in the next IP and on Michael in the next

I will establish a listener and he will accept that if you didn't do this specific step any traffic

coming from outside to the router will be stuck because he don't know to which computer behind the router

he should connect.

So let's see a real example to simplify the process.

But what I want you to do right now is to go inside your router configuration do not change anything

just shiksas port forwarding and on the next election we're going to take a real example to show you

how it all.