Original subtitles

Now let's see how to set practically how to do a remote attack on any device could be a computer it

could be a smartphone but how can we do the same attack that we explained earlier remotely.

As I explained in the previous lecture you have first to forwarned support and I went through that on

the previous lecture and show you how to go in your router to the port for rorting.

It could be different interface but definitely you will find something called the port forwarding and

you can do it on the scene where it is right now.

I did forward all the traffic coming from outside to my router through port that target port 44 or 80

or 443 to the computer 1 9 2 and 6 8 1 0 1 1 0 7 which is my next machine if I go to the clinics and

i search I'm sorry and I check the IP you'll see that the local IP it's 1 7 and depend on the tags that

you want to implement you can add here any IPU or any port so you can say OK I want any traffic coming

from outside targeting for instance 4 5 5 5 5

till port 5 5 5 5 and you give it any name and you add it and it will be added here as well.

So what I'm seeing here is that I'm configuring for my router that any traffic coming to this router

and target specific port.

It will be directed to a specific computer and according to that if I do an attack in my county the

next machine that accepts connection port 80 or four 4C as I'm going to show you right now and the victim

from outside my network.

Click on the link and the traffic is going to my the next machine it reaches the routers router or leader

redirected to my Canon Linux machine and I will accept my connection on my feelings.

Even if I have more machine behind than it will.

I have other machines that have as an IP and the tablet and smartphone but not the traffic would be

redirected from my router to my specific condition.

And same concept apply.

I mean if I have one computer inside my local network that has an IP server and I need people to connect

whenever they connect remotely to my network they will connect to this specific computer in mine and

I can forward the traffic to port 21 to this computer.

So the concept of play on menacing now to test the settings that I did.

I can go from any machine including Linux or any machine and I can type or scan and I can use a map

which already explain mine a small scepters and we can put the IP of the router.

How can I get the IP of the router.

If you go to what is my IP that can it will show you the public IPs that you have.

And this would be the IPs that will be sent to the victim so we can copy that and we can put it here

based.

And let's see.

We should find all support that we full route has been opened put it put for for sleep and for for for.

And if we had more pooled it would be open on the router as well because it will accept traffic to this

port and forwards this port to the specific machine.

Now let's test this attack.

What I'm going to do I will go for instance.

Now for the attack.

I don't need to go through that text one more time you can do the same exact text that we explain during

the course except instead of sending a private IP as we used to do.

You're going to send to the victims of public I.D. and we will not send it this way because it's very

easy to discover at the center that we're going to do some manipulation.

But my point is we going to use a public IP which is an 86 97 certified 1:46 this would be IP to be

sent to the victim so it will allow according to the port forwarding it will connect to our Kenyan Linux

machine.

So let me go to exploitation too and I'm going to say that just as a proof of concept.

OK.

And from certain chooser.

Let's take for instance social engineering at Tech.

And let's take a website site that we went through that before going to just follow the steps.

The only change we're going to meet is to change the support as IP from private IP to a public IP.

So ultimately for us in Java applet attack and we're going to use the word template and I will not repeat

the steps because this attack has been already explained.

Now notice Steve that is asking me Are you using a port forwarding.

Yes.

In my router I did configure the port for someone that could type here.

Yes

let me just move the screen so it would not confuse us or even close it.

And he needs the IP address to be Hypatia's and set up server.

This could be an external IP.

So now what I'm going to do I would not as a private IP I'm going as a public idea so I'm going to copy

this IP and this would be the IP to be sent to the victim.

No if a payload is on a different machine and here you know I'm not explaining that because this has

been already explained trusting on just two of them just going through the steps as a proof of concept

and he's creating a website that includes a payload so I'm going to choose for instance number two because

number two it allows the victim to connect to us and we going to choose number one and which port support

that I'm going to choose.

I have to make sure that on my router it has been forward to my call in the next machine.

So I'm going to keep the full for three and actually this was why I requested to forward the traffic

to see my daughter and we get to choose 6 I'm finished.

And he's doing the payload right now according to that if everything went well.

If I open once he finish and he told me that the payload is ready if I go to any computer on a different

network and put the public IP I should be connected to my colleague Linux machine and we are going to

see that in a few seconds.

So while you know exactly I believe you know he's preparing a pillow.

But my point is.

Let's exert here and let's go to any machine.

I don't have any other network but I'm going to try it for him.

As you can see this is my public IP right.

I use them a few seconds ago.

I put it inside the browser and nothing will show up let me know right to type.

H t t d s and Z IP.

And let's see what will happen.

Now you can see that he's establishing a connection.

OK.

So he is taking full time.

Let's see him clinics.

Is he accepting anything or any connection is going to be established.

Not yet.

Just a few seconds until you get to page.

Now there's a point here what I'm trying to say is that I'm using now the public IP and it's connected

to my local computer.

It will take a few seconds but if you do that from a different place using any device you can do that

from a smartphone from a computer as a victim.

A victim can connect through a smartphone through a computer is not the case.

All the attacks that we already explained can be repeated one more time.

But using the public IP and

configuring support for the is this may take a few seconds.

Let me was just two Wait onto the swinish.

It's taking too much time.

So what I'm going to do I'm going to try from my smartphone to log to the same website and I'm going

to see here what can happen.

So from my smartphone I'm going to the browser and I'm going to type the same IP and I want you to watch

what will happen on screen if you're going to do a connection or

just need to make sure that it's teaching yes because it should connect to port for falsely why if what

we are doing is that we configured HTP it should work comport.

See now my smartphone has been compromised.

Locally and even this is the IP from the smartphone it's a public IP and I'm compromising the smartphone

from my public from outside.

So it's not about this specific attack.

My objective of this lecture is to show you how can we do the same attack that we explained earlier

but remotely.

And the point here was the port forwarding.

I mean you want to just need to make sure that you understood exactly what is port forwarding just the

sitting senator.

Now if you if you do that you can repeat all the attacks one more time remotely.

But please do not do that in an unprofessional way.

So you can do it you can have two different networks right from a day to another but to not misuse.

I already went through that through the disclaimer at the beginning but I'm repeating myself.

Finally one point Romanek which is I can not see into the victim so I pee this way because this is like

an evidence he can do some search and know from where the IP is coming and it's it's not the right way.

You already explained how to shorten Zipes.

If you remember there is some website you give SSMS IP it will give you a name but during the next election

I'm going to show you how that it's done in a professional way.

Using some of the dynamic DNS Web sites you register in some web site and they will give you a name

instead of IP and you send two people name and said the state of IP.