This brings us to the end of the module and our module summary.
In this module, we learned the different methods of how we can trick a
client, and by doing this, we provided access to the machine.
We also learned that this is one of the main methods to attack today
due to the protections in place by the defender.
Once we learned about how to trick clients,
we next look at what we could do to try and avoid detection.
This is a valuable goal,
but we also explain it's not always going to be possible to avoid
detection. But part of professional testing is to document what we find
that works and does not work so our clients know we did our due diligence
and defenses are providing any protection. And then we identified the
different types of client exploits, and we said primarily, when we're
talking about client exploits,
we have to determine kernel version and also the patches
and the level of the patch installed.
Linux, the kernel version and the patch level is usually displayed when we do
the output of the dump of the kernel version, but in Windows, we may or may
not be able to determine the service pack level.
It's not just the service pack level,
it's also what patch is installed, and sometimes that can
be a little bit more of a challenge.
So these are all things we have to consider when we're
looking at attacking our targets.
This brings us to the end, and we'll conclude the module here.