‫OK, so let's see some of the basic interpreter commands with a Windows victim.
‫Here I have a system running Windows XP Service Pack one, and its IP address is two zero seven.
‫Now, I'm not sure if it's legitimate to share it with you.
‫I'll search and if it is legitimate, I'll somehow share the virtual machine with you.
‫Says we've seen in the beginning of the course this system has MW08 08 Dash 067 vulnerability.
‫So now let's try to exploit the vulnerability and have him interpreter session on the Windows system.
‫We in the Metasploit voidable interpreter session.
‫So send them interpreter session background to access MSV console shell.
‫Now, let's find the exploit module written for the RMS zero eight zero six seven vulnerability.
‫And we have one exploit with a great rank.
‫That's good for us.
‫So type, use and the full module name to use it.
‫So now let's look at the payloads we can use with this exploit.
‫Wow.
‫There are a lot of payloads, and let's choose this one.
‫Windows slash interpreters slash reverse TCP.
‫And show the options now we have already seen these steps before, so I'll keep it quick, said the
‫remote host the IP address of the Windows machine.
‫Listen, host as our colleague.
‫Remote port is correct.
‫Listen, port, it's OK for me.
‫Ready to run the export.
‫And yes, we have an interpreter session on the Windows system.
‫And was the first command since info was always my first command.
‫And look at that.
‫We are confirmed.
‫We are on Windows XP Service Pack.
‫One help command is the second one, of course, shows the commands available.
‫OK, so now there were a few commands, which I said that I will show you with an interpreter session
‫on a Windows system.
‫The hash dump command was not available when we were on Metasploit BBL.
‫Now, an interpreter has this command.
‫Of course, we can also use the hash dump post module as well.
‫The hastam command is more important for Windows systems, and I'll tell you why in a Linux system,
‫looking at the shadow file is usually enough to see the password hashes.
‫However, gathering hashes is a bit complicated for Windows systems.
‫Password hashes are located in the SAM database, and you need to have the key of the same database,
‫which is in the system file.
‫Thankfully, we have maternity.
‫We can dump password hashes of a Windows system with a single command now.
‫You can use either ifconfig or ipconfig commands to learn the IP address of the victim machine.
‫Same as an interpreter on Linux.
‫Now you can use the pWt command to see your current location on the victims system.
‫There's no such command in modern systems, but hey, this is not the command show.
‫This is mature operator.
‫And again, you can use the CD command to change the location.
‫Now, the search function has the same functionality.
‫So you can use it to find any file in the victim machine.
‫You can use the command to see the contents of a file, and as you know, Cat is a standard Linux command,
‫but this cat is not that cat.
‫If you know what I mean.
‫So now I want to show you an interpreter command, which is Windows specific.
‫Clear, Eve.
‫This command is used to clear the application system and security logs on a windows system.
‫There are no options or arguments needed.
‫Your activities on the system after the exploitation will leave some footprints.
‫So you just better clean them up.
‫Let's go to the Windows system and look at the event viewer.
‫Well, I don't know its location, so I'll use the search option.
‫And here it is.
‫Here's the log files.
‫And now let's run the clear of command, and it wiped the log files.
‫So turn back to the Windows system, refresh the event viewer and see no logs remain.
‫Well, I don't know if you see what I'm seeing, but there is a new record in the security log you see.
‫But I don't know what it is, but it doesn't look like a warning.
‫Well, at least it doesn't contain any clue about who we are.
‫Now, the shell command presents you with a standard shell on the target system.
‫This time we have a command prompt as well.
‫Now we can use the standard must dos commands.
‫The air to list the files and folders, ipconfig to see the internal IP, et cetera, et cetera.
‫Use exit to exit the shell.
‫Now we couldn't run.
‫Idle time commands on Metasploit while Linux system, but now we can.
‫And as I said before, it displays the number of seconds that the user at the remote machine has been
‫idle.
‫Very useful info.