Remote Desktop Backdoor Implementation with Reverse TCP Payload Using Open Source Tools for Instructional Use

In this paper, we present an implementation of remotely hacking into the Windows system with reverse TCP payload using an open source tool. Reverse TCP opens a backdoor on the victim system which is remotely operated by the attacker without the victim's notice. The firewall only scans the incoming traffic and doesn't examine the outgoing traffic which is the flaw that leads to the back door. The victim must initiate the connection in the reverse TCP payload. Armitage is an open source tool that provides Graphical User Interface (GUI) to the Metasploit. The Metasploit framework is another open source framework which aims to provide information about the vulnerabilities and aids in performing penetration testing. Metasploit contains an extensive database of exploits, payloads, and vulnerabilities that vary for different kind of systems. In the implemented attack, the attacker can access the files, take a screenshot, monitor screen, sniff packets, and take shots using the webcam. We demonstrate this attacks which can be used in the offering of a foundational cybersecurity course.

I. Introduction

The world we live in is getting increasingly connected with networks. Therefore, the risk of cyber-attacks is growing at an alarming rate. Cyber attacks we encounter on a daily basis are very variable and range from loss of an email password to revelation of SSNs of millions of innocent citizens. The monetary losses associated with these attacks also vary from a few dollars to billions of dollars. Cyber-criminals have been using various tools, some old and some new, to launch these attacks and steal valuable information just with the click of a button. Popular cyber-attacks nowadays can be classified into three major categories: Malware (software based), MITM and DoS attacks. Further, learning such attacks and the tools that can be used to launch these attacks can give an edge to the next generation of the workforce within the US.