At this time, we're at the beginning of our post‑exploitation journey.
Our agent has successfully connected to the Merlin server, and
we're ready to do some additional recon.
Let's go to the main menu.
Okay, let's see what commands are available.
Perfect, we see the agent command. Let's dig in a little bit further.
And also, I'm going to adjust the text size just so you can see the next command.
Okay, let's get a little bit more granular information about the agent.
Perfect, wow, we even have root.
Let's get back to the normal text size. For this command to
work, we must type in the agent's GUID.
Luckily, Merlin has tab completion to make this easier.
Boom, much better.
Okay, once again, let's check out the help text.
Ooh, that shell command looks pretty promising.
So in order for us to get our recon script, linenum, on the host,
we need to install Curl.
Let's go ahead and start that off.
Okay, it looks like the command was successful.
Hmm, I wonder what Suricata and Wazuh think about this installation.