In this course, along with previous courses that we've done together like pin
100, pin 103,
we explored Metasploit. And we've even used examples going through this course
and many of the skills
and a lot of them upcoming as well, of some of the commands that we could use.
In fact,
the previous skill we covered MSF Venom and MSF Console along with the overall
arching
Metasploit framework. Now, there are many, many things we can use Metasploit
for and
things that we can do with it. We could use it as a vulnerability assessment
tool,
but primarily it's used as a way to be able to leverage against vulnerability
found on a target
system. And for us in the pin testing environment, especially with pin 200 as
we continue this course,
that's exactly what we're going to be doing with it. And you'll see that we use
Metasploit in a
wide variety of different fashions to be able to leverage those exploits to see
if we can infiltrate
a system, multiple systems, active directory, for example, get in, look around
and see if we can
look at some Kerberos and stuff, get some enumeration going on, POSIX-based
systems,
just so much we can do. But I wanted to take this time and this skill to cover
tactics.
And that's why we're unofficially naming this skill Metasploit payload tactics.
That's right. I got to get it out of my system because Final Fantasy Tactics is
one of my favorite
games. And it kind of has the overall idea of what it is that we're getting
into. You played Final
Fantasy Tactics. You get the idea throughout that game that the ones following
it were going to
kind of be in the same style of gameplay in sense of the fighting style, the
party styles,
basically the characteristics that make Final Fantasy Final Fantasy. And with
as much as we've
explored with Metasploit, I kind of wanted to go into the tactics side of it,
which is why in this
skill we're going to be taking a look at how Metasploit puts things together,
how we sage things,
the tactics of Metasploit and its use in those different scenarios that we have
run across and
that we will run across. See, before tactics, there were already other Final
Fantasy games out there.
And they varied in gameplay and followed some of the basic rulesets. And just
to get you familiar
with the Final Fantasy universe and the different names that were out there.
But after Tactics,
that was kind of the cornerstone for a lot of maybe some of the mini games that
you played inside of
one of my favorite Final Fantasy games, Final Fantasy 10, where you played
Blitzball. Tactics
allowed us to be able to have a little bit of gameplay that got us familiar
with addressing
those things and coming up with a strategy on how to be able to do things like
that while
keeping focus of the overall story that future Final Fantasy games will have.
Metasploit is the
exact same way. There are different tactics that we use in Metasploit of how we
develop a payload
and how that payload is delivered. Is it a single payload? Is it a multi-phased
payload? Is it
something that we're developing in MSF Venom as an exploit to send to a system
through, let's say,
an email attachment to get them to run it on the system. Now, would that be
instead? There are many
stages of tactics that we are going to review in this skill with examples of
how to do them in
Metasploit itself, which is why I'm having the lab that we've been using and
will use for a few
skills in this one. We're going to be looking at stages, how to prep and get
the payload developed
and how it is that we're going to be delivering it into singles, which is a
single payload and how
we would export that to be able to send out by determined method for our pen
test. There are
some payloads out there that require different stages. So not only is there the
actual development
of the payload itself, but there's different things that require for it to work
. For instance,
you may develop an malicious file to send to someone for them to open it up.
But what is it that it's
going to be doing right after that? Is it going to be doing a reverse shell? Is
it going to be making
manipulations to the system? Could do multiple things. It could, as an example,
of things that
we would like to do as pen testers, have somebody open up the fake file. And
then in the system,
it creates a user for us on that system that we know the credentials to already
. And then when we
reverse shell, we can log into that user without making it look like it's done
on that target user
accounts status or profile. And then later on, we go into inline, which is
making like a streamline
process of being able to compile all this together for an exploit against a
vulnerability. And then
one of my favorites, because it's just wreaks havoc and chaos is the knobsleds.
It doesn't do
anything in terms of like making that account that we were talking about, and
maybe even potentially
elevating it with different permissions. Knobsleds are there to basically
create buffer overflows
in a controlled, controlled environment for us to be able to go through and
inject commands or
different instructions in, let's say, a simply, even as simply, we won't be
going into a simply,
but it can't in such an area of the running process that it doesn't know what
to do in it.
It's already reached the end of the file, the end of the buffer, and then we're
just cramming
something at the end of it because the knobsled allows us to go past the end of
the known universe
for that process. And that's kind of why I wanted to go into the tactics of
this, because in previous
skills, you saw that where I opened up a specific function of metasploit, and
what would that,
why did I go with that? How did I go with that? And where will that go and will
that play into
other things that we can do to create different stages for an inline process
that we create
to test those vulnerabilities? So with all that being said, let's go ahead and
do it to it.