So it's after getting this normal, basically, shall we need to escalate operations before escalating
operations, we need to gather as much information as we can.
So that is called operation.
So first, let's start with finding the computer network that is him.
So we need to take the Hoshino and hit enter, get this computer on which the shell is running on.
So I know.
So you need to find, uh, the user that is running on this computer that is the shell of this user.
That is who I am.
So it says the host name slash user, that is the computer user name.
And you can also see who might slash through the.
So it will diminish the privileges of this user.
And I have this privilege and the description, and so we have only one person that is notification
police, so you can see Lokman memory shut down.
We got shut down.
I mean, these crimes, you cannot change that.
These are disabled.
And there is only one annable.
So you can see like these privileges for this Nekesa.
So another way to find out this username is to say Acho, uh, put the percentage and the user name
and put the percentage.
So if you take this one, I call is a percentage and hit enter your username on this, uh, shell.
So up to now we have found the username and the host name and there is a common cause system info system.
And for that we do so much information then, uh, this is an of the Hoshino.
So let's go and run the system info.
And you can see there is a bunch of information going on.
It also tells us the whole system or system that is pro and number and the version number manufacturable
does.
Of course this is standard workstation and digital only key.
And you can see productivity and what started of this operating system, bootcamps, etc. and model,
uh, architecture of this computer and processor.
And you can see a lot of information, time zone and system language, it's using a physical memory
and watching, etc. So the important thing is to see this domain so workgroup.
So I do not have any domain to this.
It's just one for group.
Uh, and log on to release this one.
That is a computer desktop, this one.
So whenever there is any furniture you need to access using this address that went back to back on desktop
now and again to ashes and fire shells and there are hotfix.
So these hard fixes are small, smart updates that are used to fix any vulnerabilities.
So we see them in the letter using when we got across this WMC.
So you can see these are the hard fixes installed recently and there you can see the network.
So there are seven and I see in.
So these are like what adapters?
I have to use it from here.
And there are some real adapters, as you can see, real family control that the Internet with the controller
and that is a wireless and they're from there unless you get our TerraPass, which are used for we.
That is my favorite submissions.
So these are the basic information.
I can see hyper requirements.
We monitor what?
Extremisms.
Yes.
And virtualization.
And so running the virtual machines.
So to run, what solution should be an.
And that's all for this basic inauguration of this user and the information.
Now let's set out to find users on this computer are the registered users and Internet users.
And you can see administrator and now we can further enumerate this, using to this wiki and this is
this use of traditional tools, and if you don't, you will get some more information about this user
and country vision icon like to experience and personalize it.
So I have said it yesterday.
I just changed the password user matching password.
Yes.
User can change the password.
Not so log on our site.
So any time we can log in and here you can see the important local group memberships.
So this sneaky user is of the group and we set up so you can run any command as the administrator if
you have this GUI like this.
Ah, this is a group of that mistletoes user.
So Grober group memberships.
There are no global group memberships on a local group memberships.
Those administrative group.
And you can also type that users administrator.
So you get almost the same information, but it's hard to come comment that building account for admission
to the computer.
So this is the default account that comes with the industry.
So we can see, I think, shares of.
So next year or next year, so next year.
So this is a guy I just forgot this one.
So to display the R the first year of my computer, you can see the Cedro and after a previous speech
as a differentiator.
And you can see like there and we have seen this, too, in the assembly and operation.
So we have got this APC regular.
We can check out this.
So we we can also get the network information.
So we got the adapters information, the previous command, that is the system info.
But now we are where does the IP config slash our slash argues stuff, all that information.
So let's run with this one and see what's the output.
And you can see we almost got the information, our basic information.
This is quite enough.
I think so.
Uh, but let me take this.
Ah, you know, this IP country.
Great, because we are also use the IP command.
I have configured Linux.
So this is a Wi-Fi IP address and it was before and distribution for and you can also see the Mac address.
We're going to take this out.
Fix I National.
So now we got much more in-depth information about that, so you can see why fight and the smackeroos.
We also got the goal to disrupt the hit civilian areas and configuration.
And I will reassess and I'll watching six, five, four subnet mask.
And these are experts.
So these are the surprises and the hit TV series together at my 021, which is the router.
So you can get the rotors.
Other Pizarro's information from this IP configuration generally in the whole operating system, the
router contains the for the service.
So you could consider this one as a router and you can get the Bluetooth physical address.
Well, so you can see these are the parts that are created for the real world that you just need to
consider those ones.
So all you want to consider is this local Ethernet connection.
I do not have any Ethernet connections, but in some cases, your computer may connect to one network
where Wi-Fi and another network.
Well, where this Ethernet.
So in that case, you can not the IP address of this one and you can enumerate much more or put any
building or any pivot points so that you see about this adapters.
So the next morning, we're going to seize Harpur mindset, that is to help spread the tables.
You can see these are the interfaces afterwards.
So this one this one is the main address because because main and that is the WiFi.
And we have got this subnet IP address, one zero one.
That is the router and it is done.
So we have got this, uh, mackerels out, this one.
And Michael does all this broadcast to see if they can see some other crashes as well.
So in one minute, but there are only two devices that are a router and might this machine.
So you can also print the roads, the default route using the open.
So it will give you the, uh, routing information as well.
So if there is a definite nation, it should go to this interface.
So there are there are there are no matter devices on the say, you cannot.
See, much difference, but when you've been testing this table, this will pop up with more information
and you can clearly understand.
So now what we want to do is we all want to see the firewall rules that are set on which I want a firewall.
I notice its firewall.
By illustrator's.
So I think I just forgot this once.
That's it, that's it firewalled.
Fighters.
Well, it is, and it's not working.
So, all right, I want to fight for.
So let's sit down.
So this is a transfer where the command is not moving on this version of the business, you should use
the net assets at once or for export to you to export.
First, let me take the short.
All right, now I can say show our profiles, let me just show the current profile.
No.
So these are the current federal policy, broken bones.
So I may be changing Dimebon rules.
So so, yeah, in the previous two years we have reversed the GDP of a connection.
We have broken some in one spot and.
So we have broken it.
So it portrayed a range of about 4000 to 5000.
I just I just forgot the range.
So we have broccolis on boats, so that truly isn't.
So this is one rule and this rule isn't broken.
But
sure, it means are profiles.
So these are the providers.
I can see here it can also explode.
So another one thing I need to show is that governments that is used to display the processes and you
can sit here and display are the internal processes.
So these are the are the services that are going on on my computer can see this is zero zero zero.
That is my computer and the port.
No, IronPort, no, there is a reason and I don't want that.
And the police want do it.
So it did not connect to any forwarding address for analysis, other computers and the protocol it's
using your.
Now, this is very interesting services.
No waterland rules.
You fight of the American Clarinex and those Kanfer.
Are these spots wonderful for 14, etc..
So you scan all these spots and note down the results and those results.
Compare those results with these spots with the state only Disney.
And if you found there are any extra passes that are resetting on this computer, that means those services
are Internet services.
So three three zero six, that is already preschool.
So this service may be running as an Internet service.
That is not explicit.
So that's how you find out the business results.
So I'm not going to show you now you do that as it exists.
So if I have, then it's just a simple script.
And scan all the polls from one 265000, six, five, four, three, five, and not on the results and
compare them with these puts on revisioning, but so are the police with this report.
So if there are any extra listening posts on in this table, then these votes are already exposed to
internally.
They are not exposed outside to any other network.
So you can there are some interesting services that may run on the royal commission, like testing of
observer or rather I use Web observer, etc. So those may be implemented already for the internally
for the testing purposes.
So they are not exposed to Alternativa.
So in that case, it's a very important attack for those testing websites are testing services that
are running locally.
So I think that so far this year we have got system information and information and users information
and further information and also Internet services.
So I think this is a basic configuration.
We can just go ahead and run these comments in the basic of a low priority.
These comments will work perfectly because it's a normal share and this does not require any libraries
or any passwords.
So this information can be used for much more enumeration and prescription.