In this lecture, we are going to revisit Windows ten again and then we are going to perform some post
exploitation X.
Once we have access to a machine, we can perform different actions on a target.
We may try to extract data, elevate our privileges to root or try to hide our presence.
The motivator has some very good post acquisition modules.
For example, you can stream webcam.
You can start logging the keystrokes.
You can take a screenshot or you can stream the desktop stream.
You can also enumerate details about the Windows system or get a shell.
No.
Let's see that connection.
First of all, Metasploit with the MSF console command.
They'll look for eternal blue.
The particular exploit.
Set our host as a target machine.
SEC.
L host as a calling machine.
Laws to exploit.
There you can see that we have gained access to the machine as a matter of session.
Now, let's see some post exploitation modules.
You can give the command to list all running processes.
You can give Health Command to see all post exploitation videos that you can perform.
For example, you can list webcams.
You can start this can you can take screenshot.
You can send most events and whatnot.
First of all, let's migrate to some other process.
This list all process and look for the idea of explore or XY.
Reduce the migrate Komodo move to a slower process.
Not better.
Petr will be running inside a process.
They can move to any process as we need to, to take a screenshot, give the command screenshot.
You can see the screenshot has been saved in our home directory.
You can open the rectory.
And see that screenshot is available.
You get the user information, you can give the command gratuity.
To the text of you can use the command screen share.
There you will see that your victim screen will open in a new browser.
No, I haven't seen an opening.
A new application.
And you can see in a machine that the desktop is being streamed live.
Close it.
You can also use the common hash dum dum, the hashes.
What If you get an error?
It means you do not have the privileges.
You can use the command guard system to get elevated privileges for this attack.
I am getting paid to elevate privileges.
You can use some other matters that I am not going to demonstrate in this lecture.
You can also use some skills with run Command, which runs a Ruby script or Metasploit module script.
Metatrader can also start keylogger in the background.
The keys can start command.
Back on my machine.
I'm typing something.
And when your colleague balks, you can give the command.
This can underscore to see all the key logs.
It's on the script to get all the details about the victim system.
And you can see that it has generated a report and saved it in a file.
Let's open the file in the new terminal.
We need to open individual liberties.
Ruffolo.
There you can see that report is open and we have all the information about the target.
You can also get the shell on the system with the shell command and you will be on command prompt.
List flies.
Contribute something, then copy something and you can perform all the actions with this check.
I hope you like this lecture and see you in the next lecture.