All right.
So we're at the very last video for egg hunters.
I think it's time for you to show you the actual exploit as it runs.
So let's see.
Command prompt.
See my documents downloads up on server on 999.
And is more time and metasploit.
Sir.
Oh.
Host 000.
Payload window flashing.
Interpreter Flashers.
Sad though.
How close to 0.01.0.0.
Remember when you generate the payload?
The payload itself just has to have the connect back address.
When you're touching the shell, you can always just specify yourself as 0.0.0.0 and it just means that
you'll be listening on your whole machine.
So since it's the last session of.
Monastic the lesson navigate to.
Our Dog control module.
So this is really listening times to your C to the pie and we open up a mature show.
So let's go in session one.
See.
How?
Let's see if we can get the system.
System?
Got system via TikTok one.
And let's see.
We can dump the ashes.
So now we have trackable intel, them hashes for administrator myself.
All the other accounts are made.
And let's see if we can drop in our shows and ask yourself the new user.
All right, so let's see that user and I'll allow password.
L allow that.
That local group administrators.
Well, flash at.
See if we can get.
I'm sorry.
I always go into T-shirts.
Let's enable more desktop protocol.
Not so far.
A wall.
Service time.
That's time.
So it will enable.
And let's log in to their victim using Gallo Allen now lol.
So I'm actually SS aged into my casual work session from a bum two.
That's why you get these wonky looking, you know, icons right here.
But let's see if remote desktop works.
I'm curious.
Let's go to my column.
And it's hypervisor.
Yeah.
Let's see our desktop user AOL password l allow.
Six.
Resolution six divided by nine 100 192168112 125.
This my victim XP machine.
Windows XP machine.
That's like that guy out.
It usually takes a while.
There we go, Farai.
And now we just grant you remote access to the machine.
Using exploit from application for server Q and we now have 4G you access.