Now let's repeat the same scenario but using Army dash and sees a difference between using the graphical
interface and the command line for me to split.
So I'm going to open a terminal and I will type Armitage
and me going to connect nurse
with a few seconds
meet a couple of minutes until it start.
And the comments that we used on the previous lecture when we are fixing our meter she don't need to
use it every time.
This is a one time process excellent and it load.
Now we will search for the same exploit which was m as 0 3
iv in 0 2 6.
So
0 3 0 2 6
we just increase the size.
I'm not sure how accommodating need go.
Let's go down here.
Yeah.
So
0 3 dash 0 2 6.
And let's see if we know nothing.
So let's search by name 2 is R B C and D.
Come
R U C G from
Yeah.
Here we go.
M S 0 3 0 2 6.
So you were able to find the exploit so what are we gonna do.
Gonna double click on it.
And we will write a target host here.
This is the empty field that is required which was 1 9 2 2 1 6 8 0.
Uh 1 6 3 2 5 0 and everything is okay.
You don't need to put any other input you type on launch
so once you get compromised you can seize a computer here.
Here you go.
And with this right frame right frame that's mean it has been compromised with the metal pretty.
So here it is a metal pretty you use it as a menu right click on it and you choose what everyone so
you can for instance go here and let's see uh let's see if we can see uh sir.
Uh let's take for instant you just increase the size a little bit.
Now it's much more easier to use uh the graphical interface so if we go to for instance uh access and
we go to uh Dom Pesh it would get us the hash that illegal also account but encrypted.
And I told you it's not important and scripted once you get the hash is very easy to compromise to decrypt
it.
We can go to explorer and browse file and you can see all the file on the victim down here so you can
ask him to see what is like to see it right.
Zoos are also fine.
You can right click on any file and type download or delete or execute okay we can for instance let's
see Mr. Prater interact.
You can get a common chill where you can type whatever you want.
You can get the desktop of the victim and uh file on
exploited didn't talk.
Not a problem.
Uh this is a different exploit.
Let's see what else we can do with an interpreter.
You can screenshot or webcam.
And here we go.
This is a screen shot of the machine.
So my point is you can use the same in metropolitan except it's easier to manage now.
Leaving that here we can see that we have different vulnerability and exploit and you can easy to test
them.
So uh let's see
let me just increase the size.
One more time and let us go here.
So this one was under the.
When does exploit.
So if you like opens exploit let's remove this one from here.
Let's see what you can get.
So uh in exploit.
Sorry.
This is a payload.
Different payloads that you can include in the exploit.
But if you go to the exploit here you will find exploit related to Android which you're going to see
on another lecture exploit related to Windows to explorer to Linux to depend on to Solaris depend on
the victim operating system or application you can choose the exploit.
And even if you're not aware of a specific exploit you can try.
All those are related to this.
Now the question will be.
Okay.
Can I using Armitage instead of doing search myself and looking for a certain ability and looking for
an exploit.
Can I ask him for to do that on behalf of me.
In the sense of.
Can I ask him for to change the computer and check which one is applicable from that instead of trying
one by one.
Yes we can.
And on the next lecture you can see how to do that.