Now, I did them.
So you may be wondering what's the use of being able to run a single command
inside of this session, right?
Well, let me give you an example of something that's actually
ex of an exploitation here, because being able to run task list is all great
and everything, but you want to get some use out of it.
So as I zoom in, you could see that I have here PowerShell in my command.
So I'm invoking from the command line, the run command prompt PowerShell,
net user Eric followed by a password slash add in that same session.
And what this does is it creates a user on the actual system that you're
targeting
for a user creation.
This is how you create that persistence of exploitation in the
pen testing lifecycle. So when I run this, you can see that it's been added.
Now, just so you know, there's no tricks up my sleeve, I already have local
users and groups here opened up on the system.
And as you can see before we ran that command, because I haven't refreshed yet,
that there's only four accounts on this particular system.
Learner being the only one that's available for you to log in with in
windows from the login prop.
Well, when I run a refresh, you can see right there that Eric was just created
and do with that what you will, because there's many other net user commands
that you can work with or net commands that you can play with,
maybe even make it an administrator of sorts if you want it.