Wrapping Up
In this module, we focused on exploiting the user’s behavior
and discussed how to craft convincing pretexts.
We introduced client-side execution
and discussed how malware can operate through Microsoft Office and PowerShell.
We greatly improved our tradecraft to execute
arbitrary Win32 APIs directly in memory
from either VBA or PowerShell, and included network proxy support.
Gaining an initial shell on a client is a crucial first step.
We'll discuss other techniques for this critical skill in later modules.