Talking To The Proxy
Let’s take a moment to talk about proxies
and the part they can play in a penetration test.
Many organizations and enterprises
force their network communication through a proxy,
which can allow security analysts to monitor traffic.
In these cases, penetration testers
must either ensure that their techniques work through the proxy
or if possible,
bypass the proxy and its associated monitoring.
The Meterpreter HTTP and HTTPS payloads
are proxy-aware,
but our PowerShell download cradles may not be.
It’s always best to check for ourselves.