Skip to content

Commit 9bdfb18

Browse files
Create README.md
1 parent 149a2f0 commit 9bdfb18

1 file changed

Lines changed: 30 additions & 0 deletions

File tree

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# Post-Exploitation Challenge
2+
3+
### Room Link: Task 5 in https://tryhackme.com/room/meterpreter
4+
5+
- Meterpreter provides several important post-exploitation tools.
6+
- Commands mentioned previously, such as `getsystem` and `hashdump` will provide important leverage and information for privilege escalation and lateral movement.
7+
8+
- Meterpreter is also a good base you can use to run post-exploitation modules available on the Metasploit framework.
9+
- Finally, you can also use the `load` command to leverage additional tools such as `Kiwi` or even the whole `Python` language.
10+
11+
![image](https://user-images.githubusercontent.com/63872951/187616790-cb4bd69a-e6d7-473a-a5d4-1bfd485976f0.png)
12+
13+
- The post-exploitation phase will have several goals; Meterpreter has functions that can assist all of them.
14+
15+
- Gathering further information about the target system
16+
- Looking for interesting files, user credentials, additional network interfaces, and generally interesting information on the target system
17+
- Privilege escalation
18+
- Lateral movement
19+
20+
- Once any additional tool is loaded using the `load` command, you will see new options on the `help` menu.
21+
22+
- The example below shows commands added for the `Kiwi` module (using the `load kiwi` command).
23+
24+
![image](https://user-images.githubusercontent.com/63872951/187617084-6e2a12e4-bcf0-4f84-8003-2405bd5d83ff.png)
25+
26+
- These will change according to the loaded menu, so running the `help` command after loading a module is always a good idea.
27+
28+
![image](https://user-images.githubusercontent.com/63872951/187617226-6666b927-8cdb-48e6-bc1b-e4814af87de6.png)
29+
30+
- Head towards QnA section for this practical task.

0 commit comments

Comments
 (0)