Let's continue with our interpretor comments, so we only covered navigating to filesystem and some
essential comments between switching sessions inside of an interpreter, but we didn't really touch
on those interesting comments, such as running Kielinger or snapping a screenshot or recording microphone.
But before we get to them, there is one portion of the comments that we must go through first.
And those are system comments.
Let us run the help menu to check them out.
So if we scroll all the way up right after the networking comments, we should see the system comments
and hear.
There are a few interesting ones, for example.
Let's start with this execute command right here.
So this command allows us to execute any type of the command it would use inside of a shell.
It will most likely run this on a separate thread.
So we will be able to execute different commands simultaneously.
Let me show you what I mean.
So, for example, let's say that I want to start our calculator on the target machine.
I can type execute Calc.
And here it will tell me that I need to specify the dash F option.
Process nine thousand ninety six is created, and right here I got my calculator opened.
Now, if I wanted to terminate this process or any other process inside of the system commands, we
also get this comment that says terminate a process.
But for this command, we need to know the process.
So here we got the process ID as soon as we started this process.
But let's say we wanted to terminate a different process.
How would we get its process?
Well, remember, we can type the command post to list out all of the files that are currently running
on the target system.
And this left column right here is the process ID if I scroll all the way up.
Here we can see or process it and I can scroll all the way down and at the end somewhere around here,
we should see our calculator being open.
Let's go and search it.
So search for the calculator application.
And if I scroll a little bit up, we should be able to find it somewhere around here.
And here it is calculator data so we can see the process is eight four, one, two.
Let's try to kill this process and see whether our calculator closes, so if I go and copy this process,
I'd eight for one to.
And down here, I type kill and then paste the process said.
Here we can see the calculator is now gone so we can start different programs and terminate different
programs if we want to, using an interpreter SHELP.
A few more interesting comments from the system, comments would be probably this reboot comment that
reboots the remote computer.
Now, I'm not going to test this because I'm running my show on the main Windows operating system.
So rebooting that machine would be no good since I'm also recording on it besides rebooting.
We can also shut down the target machine just by specifying the command shut down and you can test both
of these commands on a virtual machine.
And at the end we also get the system information so gets information about the remote systems such
as OS.
And that is always useful to know some of the additional information about the target machine.
Here we can see the computer, the OS, the architecture, the system, language and other options as
well.
But I said that we are going to cover some of the interesting comments right here in this video and
let's get straight into them.
So after the system comments, we get these user interface comments and here we can control mouse keyboard
record microphones, run screenshots and bunch of other cool options that we're going to cover right
now.
So let's start, for example, with this mouse option.
Send mouse events.
Let's see how that would work.
If I just type mouse inside of the interpreter, it gives us a small usage for this comment.
So mouse and then the action we can type click up, down, right.
Click right up, right down, double click and so on and so on.
We can also move the mouse if we want to.
So let's try this comment.
If I copy mouse move and then paste right here.
Let us put the mouse right here and if I press enter.
Here, the mouse moved on its own.
Let's do it once again.
Did you see it, it moves on its own so we can control the mouse on the target machine now, even though
this is called, it is not really that useful.
However, there are other commands we would find a lot more useful than this, such as, for example,
running a key logger.
Let's see how we can run a simple logger.
So if I scroll all the way up here, we get the comments, kids can start, kids can stop and kids can
dump.
Hmm.
Let's give them a try, if I could.
This comment that says start capturing keystrokes.
And put it inside of my mother there, it says, Starting the keystroke sniffer.
Now, let's go to this page and this is a people page.
And now just going to type something random right here.
So let's say example at Gmail, dot com and password will be test one, two, three, four.
If I click on login, of course, this account does not exist, but let's go right here and see whether
our material shall manage to capture it to print out the keystrokes that were captured.
We can type, can underscore, dump, press, enter and here at this example shift at Gmail dot com.
And here is the password test.
One, two, three, four.
To stop Hochelaga, we can type can underscore, stop, and this will stop capturing keystrokes.
So this is really useful if you want to capture the messages that they're sending online or basically
whatever they type on their keyboard, you can capture it by typing keys, can underscore start and
then you can type keys, can underscore dump to dump all of the keystrokes that they captured in that
specific time lapse.
Great.
Let's check out more options as well.
So another interesting one is the one that we already covered, which is the screenshot option, as
it says.
Grab a screenshot of the interactive desktop if we run it real quick.
This will save a screenshot inside of this slash home slash Mr. Hacker directory, and we can visited
by clicking on this open folder.
And here is the screenshot.
So it is a screenshot of our Callinan's machine, because Michael in this machine is running on this
Windows machine.
But what if I wanted to, for example, see what the target is doing or simply just record the screen
at the live time?
Well, there is a command called Screen Share, and it says watch the remote user's desktop in real
time.
We can type it right here.
Screen share.
And this will start streaming the target's desktop to our Linux machine.
Here it is now, this command knows to be a little bit buggy as it does require some of the power in
order to run.
As we can see right here, it can be buggy sometimes, but nonetheless, we can see the target's desktop.
Let us close this real quick.
And another command that they wanted to show you that is really cool is recording the target's desktop.
How we can do that if I type the help command, go up here.
Here we can see these commands right here, record mike, record audio from the microphone for X seconds.
We can also stream the webcam and take a snapshot from the specified webcam using these commands right
here.
But since my Windows 10 machine doesn't have a webcam, I'm not going to be running this.
Of course, you can test these comments out if you got the webcam and see if they work for now.
I'm going to record a microphone on our Windows 10 target machine.
Now, this command requires a parameter we can specify the amount of seconds using dash the option and
I will specify ten seconds if I press here, enter this will start recording and it should capture what
I'm speaking at the moment to the microphone.
So here the ten seconds finished and it saved the file inside of this home.
Mr. Hacker and this is the file name.
You can listen if you want to, but for now, let's check out what other commands we have at the end
of the help menu.
And we got these cool commands such as get system and hash done.
And believe it or not, these commands could be the most useful out of all of the others that we covered.
However, if I tried to run the system command.
Inside, one interpreter, Shell.
Hmmm, operation failed, they will not work.
It seems we cannot get system privileges on the target machine.
And just to remind you, system privileges, our highest privileges on the Windows machine even higher
than the administrator once we get system, level, account.
We can say we fully hacked that box.
So what are we going to do?
Well, we are going to try to elevate our privileges in the next video by using post exploitation modules
for now recovered basic interpreter commands.
And you saw how useful they are despite being so easy to run.
We simply got the screen shot by running one command record at the microphone by running one command.
But it is time to get into more advanced things and running more advanced modules.
See you in the next video.