‫System commands are related to the operations performed on the operating system in the target computer.
‫We've used almost all of the commands seen on the slide before, but I want to remind you of where we
‫will use the command clear up clears the event logs for windows systems.
‫It clears application system and security files.
‫We use a command interpreter against Windows Systems lecture.
‫Execute runs a command on the victim machine.
‫We used it to create a channel to have a command show on the victim machine.
‫Get Pedi shows the idea of the process in which our interpreter session is injected.
‫Yet you I.D. The see which privileges we have at the moment.
‫We use this and get paid commands while demonstrating the migration.
‫Kill terminates the specified process on the victim.
‫I don't think we've used that one yet.
‫Piece lists the processes running on the victim.
‫We use that to find a process to migrate.
‫Reboot reboots, the victim system.
‫That means you'll lose this session, but we've rebooted the victim machine while demonstrating persistence.
‫Shutdown is just that it shuts the vector machine down.
‫That means, again, you'll lose the current session reg to manage the registry of the victims system.
‫We use this command while removing the back door.
‫If you remember.
‫Shell to have a common shell on the victim.
‫I remember that we use this command in the session management lecture.
‫Says info.
‫Well, it's just that it's the command that I use most throughout the course.
‫It gets information about the victim machine, such as the operating system.
‫So let's have a look at the system command in action.
‫Here I have an interpreter session in Cali, so this info to gather information about the victims system
‫and I can see the operating system, the architecture domain name of the computer logged on user number.
‫Get PID.
‫See the process ID, we are injected, and that's nine, six four.
‫Get you ID to see who we are on the victim machine and we are the system user, which is very good for
‫us.
‫P.S. to list the running processes.
‫And here's our process nine, six four.
‫Now we can use the kill command to kill any process, so let's kill one one eight nine two.
‫All right.
‫Let's the process again.
‫Peace and the process 189 two doesn't exist anymore.
‫Let's kill another one.
‫Whatever.
‫Shell to obtain a shell on the victim.
‫Control see to exit from the show by terminating it.
‫So what else?
‫Clear effort to clear the locks.
‫So let's go to the victim before running the command, open the event viewer and see all the log files.
‫Back to Cali and run the clear rev command.
‫And Windows XP refresh the event viewer and the logs have gone.
‫Execute to run a command on the victim's system.
‫Let's run the command XY, which opens a command prompt F to specify the file to be executed, I to
‫interact with a created channel.
‫Now look at that the channel created and we are on the same channel.
‫So that means we have a command shell on the victim machine in an alternative way.
‫Now you can use Control C to terminate the channel.
‫I kept the shut down come in to the end because, well, it shut down the victim system.
‫But look at this, I run the command, and as you see, the victims system is shutting down.
‫Voila!