Let's see the empire in action empire has its own show like command line interface.
As of this video, capturing Empire has 282 modules.
First, let's start by typing the HELP command to display the help.
Now I'm going to show you how to use Empire Project step by step, first step, create a listener listeners
and inspire the channels which receive connections from our target machines.
It's similar to the listeners in metastable at framework.
Before we do anything an empire, we need to start the listeners type listeners to enter the listener
management state.
As you see, the Shell prompter changes as Empire Kolan listeners.
Once we move to the listener's management state, we can see its options by typing the Help Korban.
Let's take a look at some of the commands of the listener state.
Info is to display information about the active listener.
Now you think it's the same as the show options command of Métis Point.
Kill is to kill a particular listener list is to list all the active listeners, use listener is to
use one of the listener modules of empire.
You, stager, is to use one of the available stagers, we'll see that on the next step.
Let us now look at how to start a listener module and empire.
Type the use listener command for a space character and press tab twice to see the listener available
and empire.
There are seven different listeners listed.
Let's use the listener as an example.
Type news listener HTP and Press enter.
Now, the same as with the Linux bash, you can use the tab button to complete any particular keyword
here press tab in the middle of the word instead of writing the entire word.
Again, the shell prompt has changed as Empire listeners slash HTP.
Health command now displays the commands of this state, as you see some of the commands of the same
with the previous menu, but there are some different commands here.
The infocom and chose the options of the particular type of listening.
We want to start.
The set command is used to assign the values of the options.
Similarly, the unset command is used to clear these values.
Every listener requires certain options to be set, for example, when you run Infocom and you see that
the listener needs the most important values to be configured and important warning here in Empire,
commands are case sensitive.
That means if the name of an option is name with an uppercase N, you have to use its exact same style.
Name with a lower case has a different meaning for empire.
Default values are set for the options IP addresses of your current system is set as the host and 80
is set as part.
The default name of the listener is set as HTP.
Change the values if you want, using set command.
I want to change the listener name as my listener.
When all options are set, we can start the lists and are using the execute command.
When we go back to the main menu, using the main command or back command twice, we see that we have
now one active listener.
The second step is using stagers now and here, it's better to explain the stadia and stage concepts
of the exploitation world stagers set up a network connection between the attacker and the victim and
are designed to be small and reliable.
Stages are payload components that are downloaded by stage or modules.
The various payload stages provide advanced features with no size limit, such as an interpreter, C
injection or shell stagers at Empire are used to set the stage for the post exploitation activities.
They're similar to payloads which are used to create a connection back to empire type use, stager of
space, character and press tab twice to see all of the available stages.
Let's start the launch stage.
Or as an example, a stage will generate a command ready to launch in command line terminal CMD.
Type used stager multi slash launcher command to load the stager shell prompted changes as the name
of the stager we chose.
If you type help now you see the commands of the stagers state.
Use, generate or execute to generate a stage set and unset to set in on set values to particular options,
interact to interact with a particular agent which is normally used when there are multiple listeners'
type info to see the information about the stager and the options to be set.
Now, let's set the options to be able to generate the stadia we need to set a listener in order for
the stagers to be able to communicate with Empire.
In the last step, we already created a listener.
Let us set this listener for our launcher stager type set listener, my HTP listener for this purpose.
If you gave another name to your listener, use that instead of my listener.
And once again, don't forget that empire is case sensitive, leave the other options as default for
now, run, execute or generate command to generate the stager.
The stager has created a command ready to be launched in the command line terminal.
The third step using agents.
When we set the stage to our target system in the machine engages with it, we get a reverse connection
back.
This is known as an agent in our example, let's run the generated command into the victim's command
line terminal window.
Now, there are a few different methods to start a terminal screen and a Windows OS.
You can press Windows plus R to start the run dialog box type command in the dialog box and hit enter.
Or you can type command CMD in Windows Start menu windows will find you the tool.
Or you can try to find the command prompt to inside the all applications menu, which I honestly don't
remember, copy the generated command pasted in the command prompt of the victims system.
Command prompt disappears when the command is executed.
Go back to Kawi, as you can see, we have a new agent type main to go back to the main screen of empire.
We see that we have an agent.
Type agents to go to agents.
Use Interac command with the agent agented, you're now in a session of the victim's system.
Type help to see the commands you can use.
For example, type info to see the entire information of the victim system.
Autopsy to take a screenshot, etc..