WEBVTT 00:01.530 --> 00:08.680 When we inquire about our platform and action on our processes, we usually don't want all the processes 00:08.700 --> 00:09.930 displayed on the screen. 00:10.380 --> 00:12.970 It's simply a problem of too much information. 00:12.990 --> 00:16.770 Most often we want to find information on a single process. 00:17.280 --> 00:20.160 So to do so, we can use a filtering command. 00:20.610 --> 00:21.990 Grip it. 00:23.160 --> 00:23.520 Correct. 00:28.000 --> 00:28.420 So. 00:30.380 --> 00:37.580 Uh, which, um, we introduced the script command in previous lectures, so we will use this command 00:37.580 --> 00:45.080 more so to demonstrate we'll use them to escalate exploitation framework to the most widely used exploitation 00:45.080 --> 00:47.600 framework and nearly every hackers good friend. 00:48.050 --> 00:54.530 So this comes installed in your car system to start Metasploit with, uh, Metasploit. 00:54.770 --> 01:02.200 You will enter the new Terminal Open New tab here and, uh, write immersive console. 01:06.830 --> 01:15.710 It might take some, uh, uh, some sequence here, uh, or minus depending on your, uh, systems. 01:16.290 --> 01:16.910 Uh, here. 01:17.890 --> 01:18.340 So. 01:21.200 --> 01:24.680 So our Metasploit is, uh, started here. 01:24.980 --> 01:31.460 So now, now, for example, once the exploitation framework has been started, let's see whether we 01:31.460 --> 01:37.790 can find it in the list of processes to do some news, a piece piece here. 01:38.070 --> 01:47.240 Piece outs, um, command and the pipe here after that to go looking for the string immersive console 01:47.240 --> 01:49.760 and the grab and massive console. 01:51.530 --> 01:55.580 As you can see here, we have two processes in MSF console. 01:55.670 --> 02:01.010 The first site is one hundred one thousand six hundred seventy five seven to one. 02:01.280 --> 02:05.750 And the second is one hundred sixty one thousand six hundred ninety nine. 02:06.320 --> 02:12.470 So from the from the filter that's put in the listing, you should see all the processes that match 02:12.480 --> 02:14.030 the term MSF console. 02:14.870 --> 02:23.720 So that or PostgreSQL database, which is the database of UM, which is the database of any Metasploit 02:23.720 --> 02:29.570 users, is showing them the Metasploit program itself from a user being MSF console. 02:30.020 --> 02:35.750 Finally, you should see the group command used to look for MSF console. 02:35.990 --> 02:39.830 Note is that the output did not include the column header list from appears. 02:40.100 --> 02:44.750 So the key word MSF console is not in the header, it's not displayed. 02:44.750 --> 02:47.360 Even so, the results are displayed in the same format. 02:47.960 --> 02:50.750 From this, you can learn some important information. 02:51.590 --> 02:54.980 If, for example, you need to know how many resources which sport is using. 02:54.990 --> 03:03.680 You can consult a third column, the CPU column here, um, in the CPU column to see who it's using 03:03.950 --> 03:07.670 and 19 per cent of your CPU. 03:07.670 --> 03:15.530 It may be different in your computer or call system here and consoles the third column so that using 03:15.530 --> 03:24.680 the um, four percent four percent of our memory system memory, this is quite a bit it's, uh, demanding 03:24.820 --> 03:25.210 best. 03:26.090 --> 03:29.600 So finding the greediest processes with top. 03:30.800 --> 03:37.010 So when you enter the P common like that, the processes are displayed in the order. 03:37.010 --> 03:43.930 They were started here and sends the kernel a science process ID in order that they have started. 03:43.940 --> 03:47.750 What you see is this order by providing no. 03:49.520 --> 03:54.590 So in many cases, we want to know which processes are using the most resources. 03:55.250 --> 03:59.990 This is where the top command comes in handy because it is it. 04:00.350 --> 04:08.390 It displays the processes ordered by resources users starting with the largest here, as you can see 04:08.390 --> 04:08.660 here. 04:16.450 --> 04:25.870 So unlike the moment, which gives us a one time snapshot of the pro cases, so the top of the list 04:25.870 --> 04:35.060 dynamically by default, every 10 seconds or five seconds here so you can watch and monitor those resources, 04:35.090 --> 04:38.410 resource hungry processes, as shown here. 04:44.380 --> 04:47.890 The now we will and you will learn managing presence, this senior. 04:49.710 --> 04:53.340 So in next electoral, you will learn it, so I'm waiting here in the next election.