Ethical Hacking: Post-Exploitation

Explore initial access in ethical hacking by simulating a Windows compromise from a Kali Linux attacker, including malware creation, reverse shell payloads, firewall considerations, and listener setup.

Demonstrates how a reverse shell enables a program on a Windows computer to connect outward, bypassing firewall restrictions and preserving access on the same network, including Windows 7.

Explore how to gather system information with command line tools such as system info, net start, and wmic to view installed updates, running services, and installed programs on Windows.

Discover how user privileges determine access: run whoami and whoami /priv to view capabilities, use groups to verify admin status, and understand actions like shutting down.

Explore meterpreter shell capabilities in post-exploitation, upgrading from a basic reverse shell to an interpreter shell with advanced commands for screenshots, file transfer, and UI control.

Demonstrate post-exploitation basics with msf venom, establish a listener, and gain a shell on the victim's computer to inspect files and user data, including passwords, guiding next steps.

this lecture demonstrates cracking linux passwords by accessing the password and shadow files, combining them, and using john the ripper with a word list to escalate privileges.

Discover how to enumerate Linux systems and users by inspecting files like /etc/os-release, /etc/hostname, /etc/group, /etc/passwd, and /etc/shadow, using commands and sudo.

Learn to obtain Linux network information with IP address show. Use netstat, nmap, and arp scan to identify listening ports, loopback addresses, and network devices.