In our challenge, it was pretty straightforward. Can you create your own service? Now I'm doing
this using the PowerShell commands listed above as a secondary demonstration for you.
Inside of our Windows 10 system, I have PowerShell open for us. Pretty straightforward and to the
point where I create a new service. In this one, I'm calling dummy2. I'm using the binary path name
of C drive users learner desktop dummy exe. Same file, I'm just creating it with
dummy2 as the service name. Now you'll notice that I'm not putting anything at the end of it
as far as like how it starts up because I want to show you what it is by default just as a
verification. So I'm going to go ahead and zoom out and press enter on this. Come on, you can do
it. I had an equal sign where it shouldn't have been. Now I'm going to create it again by pressing
enter after deleting that equal sign and you can see that the service was created. We're going to
go in our task manager and you'll see that it has not refreshed yet. So we can either close it or
open up MMC and I would prefer to open up MMC because that gives us a more detailed version
of that actual service. So MMC, yes, we're sure we want to open it. We're going to go add our
services plugin for this real quick, services for the local machine and click okay. And then we're
going to go into the actual services themselves and I'm going to go down to right there. Let me
get rid of the extended view so you can see it and zoom in and we can see dummy2 automatic.
Now again, I didn't put anything in there concerning the actual startup. I just wanted
to show you that that was the actual default method for a service starting up. And it created
it and so now it's in a stopped state. Whenever the computer boots back up again, as we saw earlier
in the skill, not only will the previous dummy start up, but this dummy will too, and then we
have a whole bunch of dummies running around. But we can set up our listener on Kali and find a way
for us to be able to set up a listener to be able to receive that incoming connection. So you could
also set alert up on Kali and be able to have a ding or some sort of sound to let you know
whenever that connection has been made. And once you're inside of that remote system using the
dummy service that we've created, you can start not only verifying your persistence to the system,
but also start beginning to pivot across the network. And now let's say you also had some
unfinished business from our last skill. Now that you're back on again, you can finish things up and
get ready to do some more chaos, or excuse me, pin testing across the organization.
I hope this has been informative for you and I'd like to thank you for viewing.