Hello, everyone.
Welcome to the post-exploitation course.
In this video, I'm going to be giving you
an introduction to the course.
So we will be exploring what we'll
be covering in terms of the sections that
make up the course.
We'll also get an understanding of the various cause
prerequisites that you need to essentially
be aware of before you begin this course.
And finally, we'll also be exploring the various learning
objectives and outcomes.
And that, again, will tie into what you should be able to do
or what you should have learned by the end of this course.
So let's get started firstly by getting
an introduction as to who am I or who I am, if you will.
My name is Alexis Ahmed.
I am a senior penetration test at HackerSploit,
and I am an offensive security instructor at INE.
If you want to reach out to me or contact me,
you can do so via my email, via my Twitter profile,
or my LinkedIn profile, which have all been linked
to this particular slide.
So now that we have all of the formalities out of the way,
let's get an introduction or an understanding, if you will,
of what we will be covering during this particular course.
So these are all the sections that make up the course.
And as you can see, there are quite a few.
So we'll start off by getting an introduction
to post-exploitation.
The objective here is to give you
an introduction to post-exploitation
and what it entails in terms of the techniques that
are typically performed under this phase of a penetration
test.
In addition to that, we also want
to get an understanding of where post-exploitation falls or fits
in regards to the penetration testing lifecycle.
Once we have an understanding of post-exploitation as a process
or as a phase of a penetration test,
we can move on to the first section
of this course, which will deal with local enumeration.
And we will be performing local enumeration on both Windows
and Linux systems.
So what is local enumeration?
Well, these two sections essentially
entail the process of gathering as much information as possible
from a target system once you have gained access to it.
So checking out the network configuration,
enumerating the users and groups that are on the system,
et cetera, et cetera.
Once we have explored local enumeration on both Windows
and Linux, we'll move on to the next section, which essentially
entails the process of transferring files
to Windows and Linux targets.
So once you have gained access to a target system,
whether it be Windows or Linux, you
need to have the ability to transfer files,
whether they are exploit code or scripts onto this target
system.
So that's what that section will be dealing with.
We're going to take a look at how to transfer files
from your attacker system or your attacker distribution,
if you will, onto these target systems,
whether they be Windows or Linux targets.
We'll then move on to a very interesting section that
is really applicable, in most cases,
to the Linux operating system, and that, of course,
is upgrading shells.
So in some cases, if you are able to gain access to a Linux
target, you may have access to the Linux target
via non-interactive shell.
As a result, you need to have the ability
to upgrade that non-interactive shell into a bash session
or probably into a Meterpreter session.
So that's what we'll be covering in the upgrading shells
section.
We'll now move on to pretty much one
of the most important phases of post-exploitation,
and that is privilege escalation.
So we're going to be taking a look at how
to identify privilege escalation vulnerabilities on both Windows
and Linux systems as well as exploring
a few practical examples of how you
can elevate your privileges on both a Windows and Linux target
system.
We'll then move on to persistence.
So again, we're exploring this for both Windows and Linux
within the own sections as we have
with privilege escalation and local enumeration.
So persistence will essentially involve
the process of establishing persistent access on a target
system.
So once you gain access to a target system,
you need to ensure that you maintain that access
in the event that the initial vulnerability you exploited
is patched.
And of course, there are various other reasons
that could lead to you losing access,
so it's really a very, very important phase
of post-exploitation that, again, essentially entails
setting up various measures or protocols in order
for you to maintain persistent access to the target system
after you have exploited it.
We'll then move on to dumping and cracking Windows and Linux
hashes.
So we've already explored a little bit of this
during some of the previous courses,
like the system and host-based attacks
course, where we took a look at how
to dump NTLM hashes on Windows systems
or from a Windows system and how to dump Linux user count
hashes from a Linux system.
So in these two sections, we'll go over that process again.
But in addition to that, we're also
going to be exploring how to crack them in order
to obtain the clear text passwords from these hashes,
which, again, can be used for a plethora of other tasks,
like lateral movement, authenticating to the target
legitimately, so on, and so forth.
Once we've have covered the process of dumping and cracking
hashes on both Windows and Linux,
we'll move on to pivoting, right?
And this section will essentially
entail the process of performing internal network reconnaissance
to discover other target systems that
are part of the target network.
Once you've identified target systems
that you would like to exploit that are part of the target's
internal network, we can then explore the pivoting process
or the process of exploiting a system on the company's
internal network from the system that you've just exploited
or the system that you've gained access to.
And the final section of this course
will entail the process of clearing your tracks.
So as a penetration tester, once you're
done with your penetration test, if you have been provided
with the necessary permissions and privileges,
you can also demonstrate how attackers or you can
essentially perform various techniques
to clear your tracks in order to avoid detection
by the company's blue team or incident responders
for that matter.
So that's what we'll be covering in the final section
of this course.
Now that we have an idea of what we'll be covering,
let's get an idea of the prerequisites, right?
So given the fact that we're dealing with systems that
are part of an external network and also an internal network,
you need to be familiar with the TCP and UDP protocols.
In addition to that, you also be must have a basic familiarity
with Windows and Linux as these are the systems that we
are going to be interacting with or performing post-exploitation
on.
And furthermore, you also need to have a basic familiarity
with the Metasploit Framework.
If you want to learn more about the Metasploit Framework,
you can check out my course, which again is very, very
comprehensive on the Metasploit Framework
before you actually start this one.
Although, that really isn't a requirement.
You just need to have a basic understanding of the Metasploit
Framework and how it can be used during a penetration test.
One additional prerequisite that I haven't added here
is for various reasons, but primarily is the exploitation
course that I have already--
that you should have gone through
before going through this course as exploitation
comes before post-exploitation.
So if you haven't gone through the exploitation course
already, be sure to go through that as it essentially sets up
the stage for this course.
Because this is really the final course
within the EJPT certification or training material.
All right.
So as for the learning objectives,
these will tie into the actual sections
that we'll be covering within this course.
So again, you will get an introduction
to the post-exploitation phase of a penetration test.
You'll also learn how to perform and automate
local enumeration on both Windows and Linux systems.
You'll learn how to transfer files
to Windows and Linux targets.
You'll get an understanding of how to upgrade shells.
You will also learn how to elevate your privileges
on both Windows and Linux systems.
You'll learn how to establish persistence on both Windows
and Linux systems.
You'll learn how to dump and crack Windows and Linux user
account hashes.
You'll learn how to pivot onto other systems
on the target network, and you'll
learn how to clear your tracks on both Windows and Linux
targets.
So this is really what you will be learning
throughout this course.
And by the end of this course, you
should be fairly competent in regards
to all of these sections that I mentioned during the course
overview, where we explored the various sections.
So this is what you'll be learning
throughout this entire course.
With that being said, I'm really excited to get started.
And I'll be seeing you in the first video.