Now, the post modules contain various scripts and utilities that help you to further infiltrate your
target system after a successful exploitation, once you successfully exploit a vulnerability and get
into your target system, the post exploitation modules are going to help you in the following ways.
Escalate user privileges.
Dump OS credentials.
Steal cookies and saved passwords, get key logs from the target system, execute power shell scripts
and make your access persistent.
The Menace Boite Framework has more than 250 such post exploitation, utilities and scripts.
So after gaining a shell, you can choose the appropriate post module to gather more information from
the target or escalate your privileges.
So let's see what a post module's directory looks like.
Under module's.
Post.
And there are the post module directories, so because I have exploited a Linux system, I'll need to
use Linux post exploitation modules.
So let's go have a look at the Linux folder.
And under Linux, there is a gather folder.
And what do you have here?
The hash dump module, now, it's not only for Linux.
If you look over here, you have the same four windows as well.
Now, before we go jumping into the command line, I just want you to realize just how meaningful the
Métis Bloy directory structure really is.
Now, you might ask, can you find your way around only by examining the structure.
Let's go back to terminal.
So now I'm going to use the VSP exploit again.
So use XPoint.
Unix FTP.
Voice of TPD.
So options.
Everything is ready to exploit, then exploit J.
So this command will exploit the target and if I get a session, then it will hold that session in the
background type sessions to list the available sessions in the background.
And there it is in session for.
So now is the time to use a post module over this session.
Now the usage syntax of a post module is the same type used and then the name of the post module use
post Linux.
Gather hash dump, now show the options, doing only this session variable, so set this variable to
the index of this session for.
Then exploit.
Aha, so here are the password hashes of medicine voidable to users.
Now, you don't have to stay with that.
You can also use some of the other post modules.