‫So let's go get some hash domes to use in the further hands-on experiment.
‫Go to Carly, hack a Windows system and dump its ash file.
‫I'll keep it fast because we've seen these steps several times.
‫Over an internal screen, start MSF's console.
‫I'll use Exact to open an interpreter session on the victim search for the exploit module.
‫Now I'll set an appropriate payload.
‫So the options.
‫Sent our host as my Windows XP, VM two, seven and L host as my colleague two.
‫Remember, the user is the administrator in the password is one two three four QQQ uppercase Q, but
‫please don't mind this.
‫It's just an intermediate step that we need to retrieve the hash file.
‫Now we're ready to run the export.
‫Interpreter Sessions open.
‫Use hash dump command to get the hashes, and here they are.
‫So let's copy them all and place them into a text file, which will be our hash file.
‫I'll use the nano editor for this purpose.
‫I'll open a new text file named Hash XP that text.
‫Right click and paste.
‫Control X to exit, Y to save changes and hit enter, to save the file that we named at the beginning.
‫Now look at the upper left corner.
‫Now we have a hash file on the desktop.
‫So now I want to get the hash file of my Windows eight VM as well.
‫I said in the current maturity session to the background, I'll use peace exec once more for Windows
‫eight VM this time.
‫Our host is 2:58.
‫Username is a Meydan.
‫Suppose that we collect this data in the exploitation phase and run the exploit.
‫Now I have an interpreter session on Windows eight p.m., So run hash dump to collect the hashes, huh?
‫It fail.
‫Will it stop us?
‫I don't think so.
‫Remember, we have another hash dump method one post windows, gather hash dump and hit enter.
‫This method runs in a different way from the previous hash dump method.
‫And here's the hash them for Windows eight p.m. again, open a text editor and create a new text file
‫to keep these hashes.
‫So let's just for fun, have one more harsh tone, this time from a Linux system.
‫I send the second interpreter session to the background.
‫Now, I remember that my Metasploit of Linux VM has Java RMI server, insecure default config vulnerability.
‫So that's what I searched for Java RMI keywords.
‫And let's pick this one.
‫Show payloads to select an appropriate one.
‫I'll set Java interpreter, reverse DCP show options and set the option.
‫Our host is Metters voidable Linux two zero six L host is Kali to to to leave the ports with the default
‫values and run the exploit.
‫More than one session open.
‫So I use Sessions I to interact with one of them.
‫For example, session three and I have a session on Metasploit or Linux VM.
‫Metaphor to has no hash don't function for Linux systems by default, so I'll use a post module type
‫run post, Linux hash dump and hit enter.
‫And once again, we have the dump, the password hashes of the victim.
‫So let's create a third hash file for Metasploit able to VM same method.
‫Copy the ashes of an a text editor, paste them and save the file.
‫So at the end, we have three hash files for three of our victims.