‫So in the previous lesson, we performed a basic Ossy command injection example.
‫Now, from the very first point to a reverse shell, we've done everything manually.
‫And now, if you're new to this field or even if you're an experienced veteran, sooner or later you're
‫going to want to automate what you do.
‫So you can use tools or code your own.
‫So on this question, I want to use the tool comics for the command injection.
‫Comics actually ships with Karlie.
‫And this is the latest version.
‫However, I couldn't run it due to a bug and I didn't even get to fix the bugs, so instead of using
‫this version, I'm going to use a previous version.
‫So it's a long way around, just showing you that I will go to its GitHub page.
‫And you see under the releases, you're going to see different releases.
‫So I'm just going to download this one.
‫All download the source code and save it.
‫And go to the download folder.
‫Extract the files.
‫OK, so now I'm going to go back to the terminal.
‫And go to that directory.
‫All right, so here are the files.
‫And you can run it directly from here, show options by specifying the H parameter.
‫It has many options.
‫You can test everyone if you like, but I'm going to go on, so go to Firefox's.
‫And send the traffic to berp.
‫We're going to look up.
‫Now, copy this request to a file.
‫And name it, whatever you want to and save.
‫Then let there Cresco.
‫Now we have nothing with Bourbon Firefox.
‫So let's use comix.
‫So type comics dot p y dash r to specify the file that we saved P is for the parameter and the request
‫to test.
‫And all to test and check for everything Comics' tests.
‫And hit enter.
‫So it gets something.
‫OK, I'm not alone, Comics' also displays a password file first.
‫Now, it also enumerates this system in detail.
‫And below, it asks to open a shell style interface, so of course, I hit enter to accept.
‫And this is the comics style, Shel.
‫So now you can run those commands from here.
‫Your name, Dashi.
‫EDD.
‫And comics can also create a reverse shell for us.
‫So type in reverse, TCP.
‫Now, you may recall Métis Point.
‫OK, so set the localhost to the IP address of your Caleigh.
‫And then set the local port on Kalani to listen for the river, his connection.
‫I'm going to say four, four, four, five.
‫And now you must choose which type of shell you want.
‫And let's see, we've already done the net cat style shell, so choose to.
‫Now, you must choose which type of reverse TCP shell, so I'm going to say eight and it will generate
‫the payload for us.
‫And then create a medical resource file.
‫All right, so I'm going to just put the window.
‫Then copy the resource file.
‫And paste it in here and add a Q.
‫For the parameter to start Métis boite in quiet mode.
‫Then hit enter.
‫Now, the U.S. file creates a multi handler with his options.
‫And then exploit.
‫So that way that generated reverse TCP payload on B box connects to the handler and Kelly.
‫And the interpreter session is open.
‫So type this info.
‫And this command shows a short view of the system and the session information.
‫And get Eweida for the user of the session.
‫Now you can run your post modules or do some privilege escalations on the system, that's entirely up
‫to you, whatever you want.
‫Oh, and one last thing.
‫So as I observe this shell, it's not as consistent as a Boyte reverse DCP shells, so.
‫I don't know why this would be, but in your system, it may indeed still be different.