CYBER.ORG – Lab – Backdoor Removal

Objective: Given a scenario, the student will analyze potential
indicators to determine the type of attack.

Resources:

  • See PowerPoint presentations: Lab – Backdoor Removal.pptx

Assignment:

  1. Read and complete the lab activity in the Lab – Backdoor Removal.pptx document.
  2. This lab will walk you through the process of locating and removing an active backdoor session.
  3. To do this, you will need to activate a backdoor session. Follow the steps at the end of the Powerpoint document to quickly establish a backdoor session on the vulnerable Windows 7 machine, then proceed with the steps to locate and shut down the active backdoor session using the available tools within Windows.
  4. To confirm completion the lab activity, upload a screenshot of both the active Meterpreter Attack session that shows the backdoor session in action, and the TimeoutError messages demonstrating that the attack has been terminated to today’s Google Classroom post.
  5. Please do your best to complete this Lab by the end of the class period on Friday.

Assigned: April 5th, 2023
Teacher Pacing Due Date: April 6th, 2023