We're a little bit past halfway point in this course now, and it's time to
start looking at post exploitation methods with Metasploit.
Think of this as the sequel to our previous skill way earlier in the course,
Metasploit Tactics.
Now, the point behind this one is that we've already gone through a bunch of
different methods on how to actually penetrate the system that's one of our
targets for our pen test.
Now, we want to do a little bit more and maintain maybe a little bit of
persistence, because the just because we break into one doesn't mean the pen
test is exactly over.
And using Metasploit in a creative and, you know,
all be a good manner, we can actually do a whole lot more than just do it
reverse show. We can actually create ways for us to maintain that persistence
and even grow in style of permissions and access to data.
Because the pen test is not just about breaking into stuff and reporting
vulnerabilities and doing all this other stuff. It's going even deeper into
security vulnerabilities that the organization may not even know about.
Or there's a problem within the network that's not necessarily covered by a CVE
. Maybe it's identifying their security policy and their SOPs that need to be
updated.
So we're going to go through and expand on our Metasploit knowledge and try to
do some things together in our lab environment to let us kind of maintain a
presence inside the organization,
have a way for us to be able to open the door and have more things to do.
All while tying in everything that we've done previously in this course, using
things like our B-WAP to gain some practice.