‫So I'll introduce you to the last example of compromising as an MP.
‫Let's try to grab as an MP configuration of the Cisco router using Metasploit Framework.
‫Metasploit Project is the most used penetration testing framework of, well, the whole world.
‫It can be used to test the vulnerability of computer systems or break into remote systems, as best
‫known sub project is the open source Metasploit Framework.
‫That's a tool for developing and executing exploit code against a remote target machine.
‫So here we have our network prepared by GNC three again will perform this demo on this network because
‫look at that, it's right here.
‫So go to college and open a terminal screen type MSF console and press enter to start Metasploit Framework's
‫console application.
‫So now we have a shell like MSF environment.
‫We can run the MSF console commands in this environment.
‫Now, because it's the subject of exploitation and post exploitation course that I did, I won't go
‫into deep detail about Metasploit right now, but I will talk about some certain applicable points.
‫We'll use a module to collect the configuration of the router.
‫I don't remember the exact name of it, so why don't we search for Cisco and config keywords?
‫We find an auxiliary module, auxiliary modules are not to exploit a vulnerability, but to gather some
‫information and to help the pen tester figure out the systems and the vulnerabilities, so use the use
‫keyword with the entire module name.
‫Command prompt is changed as the module name now.
‫Type show options to see the options we should set before running the module.
‫The community option is required and is public by default.
‫But let's set it is private.
‫Set output directory option to save the results in a file.
‫So I'll choose the desktop as the output directory.
‫Now set the remote host the IP address of the target router.
‫Our port is one, six, one by default, which is definitely OK with us and leave the other options
‫with it, default our values.
‫Now we're ready type, run to run the module.
‫Auxiliary module execution completed and the configuration file is saved to the output directory.
‫In this example, of course, to the desktop.
‫So here's a fire double, click it to open it.
‫Welcome to the configuration of the router.
‫We don't have any credential on our router yet, so let's close a file now.
‫Go to the router console and create a user, then collect the config file again and just see how a user
‫is saved in the config file.
‫So I'm in the has three emulator in my whole system, which is a Mac, and I'll go to the console of
‫the router and just create a user.
‫Of course, we need to enter the configure terminal mode first, so type username.
‫Well, to understand the command, I'll put a question mark at the end of each word.
‫Username is expected.
‫Let's give it an exceptional username.
‫How about Cisco?
‫Question mark, once again, these are the next options.
‫OK, we want to specify a password for the user so we can use either password or secret as the keywords
‫to set a password.
‫I'll tell you their differences soon, but let's just use password as a key word for now.
‫Yeah, let's just keep the password simple for now, one, two, three, four, five, or wait, maybe
‫that's just too popular.
‫In any event, just press enter.
‫Now, to identify the privileges of the user type username Cisco.
‫Privilege 15.
‫Where 15 stands for the complete control over the router.
‫OK, now let's go to Carly and run the auxiliary module again.
‫So it's all finished, and the output file is created if there is a file with the same name, it's overwritten,
‫so just be aware that double click on the file and look at the configuration of the router again.
‫And look at that, the entire configuration of the router and look at the Rose more carefully.
‫Yeah, there it is.
‫The credential we created just a couple of minutes ago says, you see the password is saved as clear
‫text and as hackers, we learned the username and password remotely.
‫Now, does it have to be like this?
‫I mean, are there credentials of the users always stored as clear text in the Cisco config?
‫The answer is, of course not.
‫So I'm going to show you the ways to keep the password data secure.
‫Better pay attention.