Let's get familiar with this matter Prater decision which should give you full access on the victim
machine.
Now we don't need to memorize any common just type help and it will show you what can be done.
Sorry.
What can be done using this method parentheses as.
As you can see he divides them to uh possible common to privilege escalation to web cam comment so all
you have to do is just to take one of those copy and paste it to show you.
So let's try some of those for instance.
Uh let's.
You can download.
You can upload you gonna start some of those comments and see.
So uh I'm gonna start with hedge dump hedge.
I'm actually quite important common because it will dump all the passwords from the victim machine except
it will be them encrypted which is not hard.
I mean you're going to see how easy it is to decrypt the file so if you type the hash dump you will
see all the account.
Here you go.
And the account and the password but the password is encrypted.
And even if you didn't decrypt those password you still can use them uh using a technique called Paul's
the hedge.
That would be explain.
Uh.
Let's take another comment for instance.
Let's type and get desktop which would give you the uh this could top of the victims so let's copy and
let's type and get desktop
and
I'm not sure if we get anything or not sessions.
Let's see.
OK.
This is a file on the victim machine.
US try to download the file and you go and let's see how to use it.
So let me go to my vector machine you go.
Let me log in and I'm gonna see how to download or upload the fine.
And also I'm gonna see how can I uh execute a comment.
And how can I start.
The key logger where I can watch everything that the victim is writing.
So let me just look in
and let's assume that I'm gonna open my C drive and let's see what file do I have you open also the
note but needs it so here's my computer.
And this is the C drive and I would create the file here under the name of text file name of secret.
Let's put anything inside
of unsaved
so going back to the Kelly mystery machine let's see how can we use it so we can use this common call
download from the C drive.
Secret
and should we specify a location.
Yeah.
He downloaded this fine on our Kelly.
The next machine that's open must after me.
I'm sorry and let's see if it has been downloaded or not.
So let's open another 30 million and let's
locate order.
Uh s
is it here or not.
Yeah.
Here we go.
So as you can see it has been downloaded to the uh home folder.
And if you need to check the content.
No no
secret.
You can see this was the file so it's a very powerful tool or X and you know uh what else we can do.
We can try to uh run a remote key logger.
This is very actually very nice.
So if we type help and you can see that there is a commons that allow you it also can open a mike.
You can open a web cam.
Uh yeah let's take this one.
Kids can start.
And kids can start.
We'll start a key logger where uh whatever the victim is writing you will be able to dump on your computer.
So key scans start and it start.
Let's go to the victim machine and let's type anything it will.
Good morning.
You know
use my bank account.
So the victim is writing any mean he is logging his writing username and password to his Facebook.
You don't know that everything that he's writing will be captured by the victim.
And uh if we here need to see what has been written you just need to type uh.
Kids can dump.
So if he takes this comment.
KEYES can dump and pasted here you will see uh dumping up to
uh.
Tom No way.
Didn't talk.
Okay let's try another comment.
Yeah.
Execute Execute will allow you to execute a comment.
So uh s he.
Copy.
He scanned them.
Okay.
So if we try to execute paste and let let's try to execute calc she's a calculator that you see and
you must specify an executable fired was minus F.
So let's try minus F..
Let's see with and B had been executed or not.
No
so sore point is if you were able to get a metal plate position on the victim machine you can do a lot
of uh activity and you can have more than one method printer to more than one machine on the same time.
I mean if you establish another method printer or you need to try another exploit or you have to adjust
for type back ground.
And this comment would be go into the background and now we can try another exploit.
And if you need to get back to your method pretty efficient so you can type station minus sessions minus
I first to see the snip session number and then session minus I won and you will be able to look into
the session one more time.
So the method printer you can have more than one method printer to more than one computer and you can
keep all of them in the background and keep trying.
Another vulnerability and exploit and so on.
It's an extremely powerful payload and we can use it in many attacks later on during this course.