‫Let's see the empire in action.
‫Empire has its own show like command line interface.
‫As of this video, capturing Empire has two hundred and eighty two modules.
‫First, let's start by typing the help command to display the help.
‫Now I'm going to show you how to use Empire Project step by step, first step, create a listener.
‫Listeners in Empire are the channels which receive connections from our target machines.
‫It's similar to the listeners in Metasploit Framework.
‫Before we do anything an empire, we need to start the listeners type listeners to enter the listener
‫management state.
‫And as you see the shell prompter changes as Empire Colon listeners.
‫Once we move to the listeners management state, we can see its options by typing the help command.
‫Let's take a look at some of the commands of the listener state.
‫Info is a display information about the active listener.
‫Now you think it's the same as the show options command of Metasploit.
‫Kill is to kill a particular listener list is to list all the active listeners use listener is to use
‫one of the listener modules of Empire.
‫You, Stadia is to use one of the available stages.
‫We'll see that on the next step.
‫Let us now look at how to start a listener module and empire.
‫Type the use listener command, but a space character and press tap twice to see the listeners available
‫on Empire.
‫There are seven different listeners listed.
‫Let's use the HTTP listener as an example.
‫Type use listener, HDTV and presenter.
‫Now, the same as with the Linux bash, you can use the tab button to complete any particular keyword
‫here.
‫Press tab in the middle of the word instead of writing the entire word.
‫Again, the shell prompt has changed as Empire Colin listeners slash 8GB.
‫Health command now displays the commands of this state, as you see some of the commands are the same
‫with the previous menu, but there are some different commands here.
‫The info command shows the options of the particular type of listener we want to start.
‫The set command is used to assign the values of the options.
‫Similarly, the unset command is used to clear these values.
‫Every listener requires certain options to be set.
‫For example, when you run info command, you see that the HTTP listener needs the host and port values
‫to be configured and important warning here in empire commands are case sensitive.
‫That means if the name of an option is name with an uppercase end, you have to use its exact same style.
‫Name with a lowercase has a different meaning for Empire.
‫Default values are set for the options IP addresses of your current system is set as the host and 80
‫is set as port.
‫The default name of the listener is set as HTP.
‫Change the values if you want using set command.
‫I want to change the listener name as my HTP listener.
‫When all options are set, we can start the lists and are using the execute command.
‫When we go back to the main menu using the main command or back command twice, we see that we have
‫now one active listener.
‫The second step is using stages now and here, it's better to explain the stages and stage concepts
‫of the exploitation world stages set up a network connection between the attacker and the victim and
‫are designed to be small and reliable.
‫Stages are payload components that are downloaded by stager modules.
‫The various payload stages provide advanced features with no size limits such as maternity, VMC injection
‫or shell stages at Empire are used to set the stage for the post exploitation activities.
‫They're similar to payloads which are used to create a connection back to empire type use.
‫Stager would have space, character and press tab twice to see all of the available stages.
‫Let's start the launch of Stager as an example.
‫The stage will generate a command ready to launch in command line terminal seemed.
‫Type used stage Stager Multi Slash Launcher Command to load the Stager Shell prompter changes as the
‫name of the stage that we chose.
‫If you type help now you see the commands of the stage or state.
‫Use, generate or execute to generate a stage you set and unset to set in unset values to particular
‫options, interact to interact with a particular agent, which is normally used when there are multiple
‫listeners type info to see the information about the stager and the options to be set.
‫Let's set the options to be able to generate the stage, we need to set a listener in water for the
‫stages to be able to communicate with Empire in the last step.
‫We already created a listener.
‫Let us set this listener for our launch or Stadia type set listener, my HTTP listener for this purpose.
‫If you gave another name to your listener, use that instead of my HTTP listener.
‫And once again, don't forget that Empire is case sensitive.
‫Leave the other options as default for now run, execute or generate command to generate the Stadia.
‫The Stadia has created a command ready to be launched in the command line terminal.
‫The third step using agents.
‫When we set the stage to our target system and the machine engages with it, we get a reverse connection
‫back.
‫This is known as an agent.
‫In our example, let's run the generated command into the victim's command line terminal window.
‫Now there are a few different methods to start a terminal screen in a Windows OS.
‫You can press Windows Plus R to start the Run Dialog Box Type Command in the dialog box and hit Enter.
‫Or you can type command seemed in Windows Start menu, windows will find you the tool.
‫Or you can try to find the command prompt to inside the all applications menu, which I honestly don't
‫remember.
‫Copy the generated command pasted in the command prompt of the victim's system.
‫Command prompt disappears when the command is executed.
‫Go back to Cali, as you can see, we have a new agent type Maine to go back to the main screen of Empire.
‫We see that we have an agent.
‫Type agents to go to agents.
‫Use interact command with the Agent I.D. You're now in a session of the victims system.
‫Type help to see the commands you can use.
‫For example, type info to see the entire information of the victims system.
‫Or type C to take a screenshot, et cetera.