So we've run our exploit on a Windows seven computer and now the Windows seven computer is phoning home,
you see that we have a session open from our 10:00, not Odah three to four.
That is my Windows seven virtual machine.
So I'm going to set up an interactive session.
So I'm actually going to set up a shell using that interpreter.
And I'm going to say Sessions bash.
I want an interactive.
Console on session one sessions, dashi and mime session number will usually be one for the first machine.
You compromise, but if you send this out to 10 PCs on your business's network with your boss's permission
and five of the employees, click through the link and install the software you're going to see session
one, two, three, four and five.
And you can navigate between those with Sessions, Dashi space and the number of the session.
And now I have a live interactive session with that guest computer.
I can do P W.D. what is my present working directory?
You can see I am in C users i.e. user desktop.
I can CWD Space, Dot, Dot and then IWD to get my present working directory and I user I can see into
downloads PWP and then else.
And you can see I have my game file that I downloaded on my SI user's.
I.e., user downloads folder, so I have I am on my Windows seven computer controlling it from Calli
Linux using Interpretor and Métis Floyd, so I am running this interactive show.
There are several things that I can do while I'm logged in to my Windows seven computer from this interpretor
shell.
Let's do a couple more things.
Get you Edem.
This will get the user ID that I'm logged in as I'm logged in, just as that ideate Windows seven IHI
user, not a very powerful user, in fact, pretty restricted user, which is a good thing.
Let's try to get the password hash file a running hash dump and you'll see the script requires the use
of a system user context, not just a regular Windows seven user.
So I'm going to need to escalate privileges to be able to do anything really interesting.
That means I'm going to have to elevate myself from this windows, i.e. eight Windows seven user to
a system level user or an administrator on the Windows seven box.
And we're going to see how to root or escalate privileges using another exploit in Métis light.
And the next lesson.