Exploiting the computer as we did earlier is something awesome.
But the goal of most penetration tests is to maintain access to the compromised system.
There are a number of methodologies for maintaining access to the exploited victim.
However the conclusion of each of these methodologies is to reduce the time consumed and the efforts
required to keep attacking the same machine over and over after it has been exploited.
Maintaining access is a form of art that involves just as much if not more thought than exploiting the
system.
Below are some terminologies but however they are not just definitions.
They are in deep relation and they will give you introduction on how to maintain access to system after
exploiting.
So what does malware malware is a general term used for viruses worms Trojans kill loggers bots etc..
And actually it's a good thing to use when you're doing your penetration testing report to an executive
level.
But when you are doing your penetration testing the airport at the technical level it's better to define
which is warm.
Georgian viruses etc. a backdoor is a program that is left running on the compromised system to facilitate
later entry without having to exploit the vulnerability over and over again Trojan Horse or simply Trojan
is a malicious program that is installed onto the host to perform desired function.
So you install it thinking that it will do like function ABC but actually it will do function x y z.
So it conceals and to hide its intentions.
Virus is a malicious code that infects a file.
It needs to be invoked by humans so you need to click or double click on the file to invoke it.
And this virus will will just infect the file and the virus cannot be moved on its own from one machine
to another.
Compared to the warm which has the same destructive force as the virus but they do not need the human
interaction to replicate from one target or another they just replicate on its own.
From our perspective penetration testers we can use viruses for for the sake of compromising the system.
But it's better not to use warm cause as you can see the nature is not controllable of the one.
A key logger is a system or a code that captures the keystrokes from the user and feeds that back to
us.
It's a well as an essential tool for four penetration testers in which we use routinely botnet is short
or bots are short for robots which are sometimes called Zombies and it's a network of compromised systems
that are controlled by a single computer which called the bot master and these systems are infected
by viruses Trojans back doors etc. and they are usually used to perform attacks such as the US attacks.
Maybe of course as well spam services etc..
So the idea here is that a single computer controls a bunch of computers the single computer which called
the book Master tenth as welcome control another Masters in the same network.
If it is compromised of thousands of machines and where slash spyware is supposed to be a program that
is designed to display of tiny amounts on your computer or even your phone you see these pop ups going
here and there.
You cannot close them.
So they are controlled by an Adware Software which makes this developer gain money through paper click
or pay per view and it actually irritates users.
So once this adware collects information and monitors your activities without your consent it is named
a spyware.