Social engineering attacks with Metasploit payloads
Let's wrap up this chapter by bringing together two topics: backdoor injection into a legitimate executable and using Metasploit as the payload generator and handler. We're going to use Shellter and nested meterpreter payloads to create a malicious AutoRun USB drive. Although AutoRun isn't often enabled by default, you may find it enabled in certain corporate environments. Even if AutoRun doesn't execute automatically, we're going to work with an executable that may encourage the user to execute it by creating the impression that there's deleted data on the drive that can be recovered.
Creating a Trojan with Shellter
Let's take a look at the following steps for creating a Trojan with Shellter:
- The first, and most tedious, step is finding a suitable executable. This is tricky because Shellter has certain limitations: the executables have to be 32-bit; they can't be packed executables; and they need to play nice with our payloads. We won't...
