In this section let us talk about persistence.
We do not want our access to be interrupted or lost,
so we need to, once we achieve initial access,
be immediately looking to maintain that access.
Within Meterpreter, there's some things we can use that will
help us successfully achieve that persistence.
As we said,
we need to maintain our access once we've achieved it, so we can use the
persistence script capability to set up callbacks. Within the Meterpreter
payload we have a script called persistence to do just that.
After going through all the hard work of exploiting a system,
it's often a good idea to leave yourself an easier way back
into the system for later use. The next method we can use
to maintain access is a RAT, not the rodent, but a remote access Trojan.
These are used to allow us to connect from our machine into the victim machine.
They've been around for a long time,
but most of the advanced groups today use them on port
80 or 443, so as a result of this, we refer to them as web shells,
but it is still the same concept.
We have a listener set up and allow the connection,
which then allows administration of the machine.
This brings us to our demonstration. In this demo we're going to
review some of the different methods of persistence we can use with
the Meterpreter shell. Enjoy the demo.