Hey there.
Welcome to our lab environment. I have here a Windows 2016 machine, which is
part of the Globomantics domain. As you can see, I'm logged in as Kenny, which
is a domain user. In here, we're simulating that you got access to machine in
a company and you're trying to discover information about the machine and the
environment so that you can move laterally and execute any actions that you
might have in mind.
So, let's get started. Let's go to the Seatbelt GitHub. In here, we can
download the whole repository by going to the button Code and then going to the
option Download ZIP. Once the download is completed, we can open the file and
then extract the folder to whatever you want.
I've already downloaded and extracted the files to my desktop, so
let's take a look at them. As you might have noted,
we have here the source code of this tool, which is written in C#, so we need
to compile the source code to be able to execute this. And for that, I already
have on this machine the Visual Studio software. It is free to use, so you can
download and install it in your system.
So, let's open the Visual Studio project file. Done. As you can see,
I have here all the source code for this tool.
I could even customize it if I wanted, but let's just compile
the code as it is. For that, I'll go to the menu Build and then
Build Solution. Amazing. Now, we just have to wait a couple of
seconds, and there we go.
We have success here in the Output screen. As you can see, the
executable is saved under the folder bin and then Debug, so let's
go to that folder. Seatbelt\bin\Debug.
Here you go.
The Seatbelt executable is here. To make things easier, I will move this
file to our desktop so we can easily find the tool.
Also, quick pause here. In this demo, I'm using my victim machine to
compile the code just to make things easier. In a red team
engagement, I would recommend you using another Windows machine to
download and compile the code and then only transfer the executable
to your victim computer.
In this way, you don't need to download a lot of files and
install Visual Studio in your victim, you only need to
transfer one executable file.
Okay, now that I have the executable file on my desktop,
I can open the terminal, go to my desktop, and then run Seatbelt.exe.
And this will ensure that executable is working fine. Awesome, we got to help
page for the tool, and this means that executable is working and ready to be
used. As you can see here in this help page,
the tool has several modules to collect any kind information you can
imagine. So in the next demos, we'll use some of those modules to
discover sensitive information about this server.