I hope you have enjoyed this lesson on PoshC2 and how command and
control tactics can be used in a variety of post‑exploitation
activities. Below, I have put together some additional information you
can use to explore the capabilities of PoshC2, as well as some of the
features we covered in our demos.
We had the opportunity to cover a few of the open source
modules available with the framework; however,
there is much, much more you can explore.
Below is a link to the PoshC2 GitHub resources repo,
which contains all of the available module scripts,
which you can explore for planning future red teaming activities.
Additionally,
I recommend checking out the domain fronting capabilities
available with the PoshC2 framework,
which can offer you a more discrete channel for communicating with
your implants. On the right‑hand side of the slide,
I have included some external resources that you can leverage with PoshC2,
including my Pluralsight course on King Phisher,
which can be used for gaining initial access as we
demonstrated in our first demo of this course.
Additionally,
I have provided a link to the substantial PoshC2
documentation available on the readthedocs.io site.
Also, if you're interested in learning more about how you can utilize PsExec,
which we used extensively in our final course demo,
I recommend you watch the Pluralsight course on Lateral
Movement with PsExec by Matt Glass.
I also encourage you to access clickable versions of the links on
this slide by reviewing the slide's PDF available in the exercise
files download. I hope you have enjoyed your introduction to PoshC2
and are able to take advantage of the framework during your red
teaming activities.