WEBVTT

00:00:01.120 --> 00:00:03.430
Would you like to learn how to use a tool that can handle

00:00:03.430 --> 00:00:05.850
multiple sessions with clients who exploit it?

00:00:06.510 --> 00:00:09.610
Do you need a tool that has built‑in functions to encrypt and mask

00:00:09.610 --> 00:00:12.350
your traffic between your machine and your targets?

00:00:12.840 --> 00:00:15.680
How would you like to take a screenshot of a target's desktop,

00:00:15.690 --> 00:00:19.110
download their files, and dump credentials using simple commands?

00:00:19.650 --> 00:00:22.310
Well, if that's what you're looking for, you came to the right place.

00:00:22.740 --> 00:00:23.230
Hello,

00:00:23.240 --> 00:00:25.820
I'm Matt Glass, and in this course I will show you how to use

00:00:25.820 --> 00:00:29.000
Pupy as a command and control server to manage multiple sessions

00:00:29.000 --> 00:00:30.950
with target machines you exploited.

00:00:31.540 --> 00:00:34.150
We will see how Pupy can be used by hackers to mask their

00:00:34.150 --> 00:00:37.350
traffic as legitimate SSL traffic and encrypt their

00:00:37.350 --> 00:00:39.850
communications between them and their targets.

00:00:40.340 --> 00:00:43.130
We'll also see how Pupy's built‑in functions can be used to

00:00:43.130 --> 00:00:46.060
obtain additional credentials and elevate permissions to a

00:00:46.060 --> 00:00:47.850
system level on a local machine.

00:00:48.340 --> 00:00:50.170
But before we get into how it's used,

00:00:50.390 --> 00:00:52.750
let's take a moment to understand what Pupy is.

00:00:53.340 --> 00:00:57.140
Pupy is an open‑source remote administration and a post exploitation

00:00:57.340 --> 00:01:00.570
tool written in Python. Pupy executes in memory,

00:01:00.580 --> 00:01:02.350
allowing it to leave a low footprint.

00:01:02.940 --> 00:01:06.350
It offers multiple communications channel options like SSL,

00:01:06.410 --> 00:01:10.720
RSA, and even the obfs3 protocol used by Tor to hide

00:01:10.720 --> 00:01:13.700
traffic. As a post exploitation tool,

00:01:13.720 --> 00:01:17.250
Pupy is used to manage already exploited clients from a central server.

00:01:17.780 --> 00:01:20.250
It is an open‑source project and can be downloaded

00:01:20.250 --> 00:01:21.940
directly from their GitHub page,

00:01:21.950 --> 00:01:24.750
which includes a wiki with installation instructions.

00:01:25.230 --> 00:01:28.290
Pupy has multiple advantages, including a low footprint,

00:01:28.500 --> 00:01:32.300
multiple channel encryption options, and built‑in privilege escalation tools

00:01:32.310 --> 00:01:36.840
that we'll explore in this course. Pupy is used as a command and control tool

00:01:36.850 --> 00:01:40.890
with additional options that fall after the exploit and continue through the

00:01:40.890 --> 00:01:42.450
remaining phases of the kill chain.