Hey there.
Welcome to the course, Persistence with Impacket.
In this Cybersecurity Tools course,
you'll learn how to create persistence in compromised
servers using the Impacket library.
So, imagine you're working on a red team engagement.
After getting initial access to a server,
you need to maintain a foothold on the server so you
can access it at any time you want, even if the initial vulnerability is patched.
And one of the main ways of doing that is using Impacket
to create hidden tasks in the system.
In this course, we cover the Impacket framework,
which allows you to perform several attacks,
including creating WMI events and triggers to automate tasks.
We start this course by discussing how you can
leverage Impacket to create persistence.
Then, in our first demo,
you'll learn how to use Impacket and the WMI protocol to
execute a file in a remote server.
After that, in our main demo, you'll learn how to deploy a hidden reverse
shell using Impacket, and this reverse shell would be useful for you to
access the server at any time you want. And in our last demo, you'll learn
how to use Impacket to harvest hash credentials, which can be useful to log
into the servers later if you need.
So, whether you're trying to establish persistence in a red team engagement or
just testing the detection capabilities of your own company,
join me in learning how to create persistence with
Impacket, here at Pluralsight.