In this video,
you'll gain some additional tips and guidance on how to control our entire
network during a penetration test. If you recall,
one of the first things we need to do is identify all systems on our network
that is within our scope to perform the penetration test.
During the scanning process,
it's really important that you document all the systems that are within scope,
document all the open ports, whether it's T ports, even UDP ports,
even document the services that has opened those ports by performing banner
grabbing and enumeration. Next,
you should definitely start to look for any sort of security weaknesses that
could be exploited. Keep in mind, for each security weakness that you exploit,
you should implement persistent access. In other words,
set up multiple back doors on the same system. For instance,
if you compromise five systems,
then you should have at least two back doors per system that you have
compromised. The reason for this is if one backdoor is closed,
then you have another way in to that target system and you simply repeat this
process. Scan, exploit, maintain access,
but set up multiple back doors to the system.
You can even use interpreter or just generally Metasploit to help you manage
all the sessions as you have seen.
You can simply send sessions to the background.
You can even set up persistent access on systems by, let's say,
creating user accounts, enabling remote services, uneven s,
ssh, or even Telnet in data systems as well. During this video,
we have briefly discussed some additional tips and guidance on how to
continuously maintain uncontrolled access of the network.
In the next video, we'll cover the learning objectives for the next section,
section eight. I hope this video has been informative for you,
and I'll see you in the next one.