The first tool up that we're gonna use is power view.
In order to use power view we're going to have to install it.
So what I want you to do is go ahead and just go to Google and go ahead and search for power view.
Get hub.
And you can be brought here to power of you at Master.
This power tools one it's gonna say it's deprecated.
That's fine.
You could also go to the power exploit directory that they have here a repository and you can download
power of you right here.
So your best bet is either to just download these all of these if you want or you can just click on
power of you by itself and download just this file.
I'm going to just download just this file you can go into raw and copy it or copy the path and either
way.
What I want you to do is I want you to go ahead and take this file and then go bring it over to one
of your Windows 10 machines.
It doesn't matter which one the situation that we are having here is that we're going to run power view
which is a power shell type script and we're going to run it and do enumeration with it.
We're going to see what we can do for us.
However we're going to run it directly from the machine.
Now in an attacker situation say we have access to a shell then we'll use that shell and we're going
to load power shell and we'll upload this file for example and then we'll still run power of you.
The nice thing about running it on our machine here is just that it allows us to kind of auto tab complete
which we won't have and it'll just make things a little bit smoother.
So in a realistic scenario you're not going to be on the machine on like an already piece session you
might be.
Chances are you're not going to RTP into most machines but if you can't get RTP access and you know
it's a machine that a user is not using like a server or something that's just sitting there and you
have already access to it then feel free to log in and do it this way.
But for now this is just the best way to demonstrate.
So go ahead.
I have it sitting in my downloads folder you can put it wherever you want and then we'll go ahead and
just kind of go from there.
So meet me in the next video once you've got power of you put onto your machine and we'll go ahead and
start enumerating the domain using power of you.