‫User interface commands and web cam commands are grouped under two different headers, capturing keystrokes,
‫grabbing screenshots, taking a snapshot from the webcam are only some of the functions of the commands
‫of this group.
‫Idle time returns the idle time of the vector machine.
‫If you want to connect remotely and do something on the machine, for example, disable the host based
‫antivirus.
‫It would be best to do it in the idle time.
‫So screenshot guess what that does grabs a screenshot of the current desktop interface.
‫Key scan, start, key scan, stop, key scan, dump used to capture keystrokes.
‫Record might records audio from the MC of the victim.
‫Webcam list lists the webcams of the victim machine webcam snap takes a snapshot from the specified
‫webcam.
‫So let's see some of these system commands in action.
‫As you can tell, I now have an interpreter session in my idle time shows the idle duration of the victim
‫in seconds.
‫Screenshot takes a screenshot and saves it to our host, Carly, so here it's saved in the folder.
‫Rude with a strange name.
‫So let's look at the folder with the File Explorer.
‫We're already in the home folder of the current user, which is the folder route.
‫And here is the screenshot in JPEG format.
‫It's exactly the same with the current look of the vector machine.
‫So now let's start a key scan.
‫Now I am in the victim machine.
‫Open a notepad and write something down.
‫He scan dump to look at what has done absolutely nothing.
‫I think I know the reason.
‫So I'll stop the key scan for now.
‫Now get you to see who we are at the moment and we are the system user at the vector machine.
‫But the user who open the notepad and wrote Something is.
‫The administrator user, so do you remember how we can change the user?
‫We're going to migrate a process which is run by the administrator user.
‫For example, three to four.
‫How lucky are we migrated to the very first attempt to get you ID again, and yes, we are the administrator
‫now.
‫So start the key scan again.
‫And go to the Vigdor machine and write something down.
‫Back in economy and look at the key dump.
‫And here it is, all the keystrokes, including backspace and enter.
‫Also known as carriage return are all logged.
‫So we can stop the key scare now.
‫So what else?
‫Let's list the STD API extensions command using Help STD API.
‫The webcam commands are here.
‫And let's list the webcams of the victim.
‫No webcams were found.
‫Now, normally we can share the webcam of the host machine with a VM.
‫So go to VM settings, click Add Device, Select Camera and click Add.
‫So we are supposed to have a webcam in the venue, but it is a known issue that VMware cannot share,
‫the MacBooks face time HD camera with VMS.
‫This is why nothing happens when we try to add a camera.
‫I cannot show the webcam commands now, but I'll try to find an external webcam, capture a new lecture
‫with it and add that lecture to the course.