Would you like to learn how to use a tool that can handle
multiple sessions with clients who exploit it?
Do you need a tool that has built‑in functions to encrypt and mask
your traffic between your machine and your targets?
How would you like to take a screenshot of a target's desktop,
download their files, and dump credentials using simple commands?
Well, if that's what you're looking for, you came to the right place.
Hello,
I'm Matt Glass, and in this course I will show you how to use
Pupy as a command and control server to manage multiple sessions
with target machines you exploited.
We will see how Pupy can be used by hackers to mask their
traffic as legitimate SSL traffic and encrypt their
communications between them and their targets.
We'll also see how Pupy's built‑in functions can be used to
obtain additional credentials and elevate permissions to a
system level on a local machine.
But before we get into how it's used,
let's take a moment to understand what Pupy is.
Pupy is an open‑source remote administration and a post exploitation
tool written in Python. Pupy executes in memory,
allowing it to leave a low footprint.
It offers multiple communications channel options like SSL,
RSA, and even the obfs3 protocol used by Tor to hide
traffic. As a post exploitation tool,
Pupy is used to manage already exploited clients from a central server.
It is an open‑source project and can be downloaded
directly from their GitHub page,
which includes a wiki with installation instructions.
Pupy has multiple advantages, including a low footprint,
multiple channel encryption options, and built‑in privilege escalation tools
that we'll explore in this course. Pupy is used as a command and control tool
with additional options that fall after the exploit and continue through the
remaining phases of the kill chain.