Perfect! I'm happy to see you here until the end of this course, but
don't close this tab yet. In this section, we'll have a quick review
of what you learned in this course,
and we'll discuss some tips on how you can learn more about post exploitation.
We covered a lot of topics in this course, and I hope you've been enjoying it.
We started this course by discussing what Meterpreter is and how it works.
Again, remember that Meterpreter runs directly from the memory
and usually does not save anything on the disk,
which makes it harder for the traditional anti‑virus to detect this tool.
We then had a few demos showing how to get Meterpreter shells.
And remember,
you can do that by using a Meterpreter payload, by upgrading
the existing Metasploit shell or by simply sending an
executable payload to the machine.
Also, we discussed several techniques for privilege escalation,
and you learned how Meterpreter can help us to automate this task.
After that, we also covered several techniques from maintaining persistence,
for example, creating hidden services, creating scheduled tasks, and much more.
And in this last module,
you learned how to exfiltrate data without being detected.
And this is exactly how real attackers do in real hacks.
Pretty cool, right?
If you don't remember some of those attacks,
feel free to pause this video and go back and revisit the topics.
So if you want to get the most out of this course,
I have a few suggestions for you.
First, practice your skills that you learned.
If you haven't been following the demos in your own environment,
it is a good idea to do so.
Go ahead and install Metasploit and try to use the techniques you
learned here against some virtual machines.
Also, don't forget that this course has a course lab here at Pluralsight.
So, check it out.
Also, in here, we covered the most important
Meterpreter features. But in any case,
it's always a good idea to review the Metasploit
and Meterpreter official manuals.
You might find in there some other interesting features.
And last, you can try to exploit different machines and
different operational systems.
In here, we use the Windows Server as our victim computer,
but you can try to use a Windows 10 or even a Linux machine as a victim.
The more you practice, the more you learn.
So if you're interested in the pen test field, I can recommend a
few things as the next steps for you. First,
if you haven't done yet, check out the course lab for this course.
It's called Post Exploitation with Meterpreter Lab.
Also, the best way of learning pen test is by hacking machines.
Nothing replaces the hands‑on experience of a pen tester.
And the good news is you don't have to do illegal things
like trying to hack your neighbor.
There are a few websites that allow you to hack
real‑life machines to practice your skills.
The ones I like most is the hackthebox.eu and the pentestit.ru.
In both cases, you create an account,
and they will give you VPN access to a virtual
environment with several machines.
So then you can try to hack them, and the best part is those are free websites,
so there's no reason for you to not try them out.
Also, if you want to discover more about pen test and red teaming tools,
there is a course path here at Pluralsight called red‑team‑tools.
In there, you can find short courses about dozens of hacking tools.
It is really cool, so check it out.
And remember,
this course is part of a series of courses about Metasploit and Meterpreter.
So, check out the next Meterpreter course called Defense
Evasion with Meterpreter. In there,
we'll cover how to avoid being detected during a pen test.
So that's it.
That's the end of our Post Exploitation with Meterpreter course.
I hope you enjoyed this course as much as I did.
Thank you for watching, and I will see you in the next course.