[MUSIC PLAYING]
Welcome to the course conclusion video.
In this video, we're going to be revisiting the learning
objectives that I highlighted in the course introduction
and essentially taking a look at whether we covered everything
and giving you an idea of what you should be able to do
at the end of this course.
All right, so if we revisit the learning objectives,
you can see that all of these objectives
are pretty much in line with what we've covered.
And we actually covered a little bit more,
so we have actually been able to learn quite a lot.
So firstly, you will get an introduction
or you should have an understanding of the post
exploitation phase of the penetration test
and what it entails in terms of the techniques that
fall under post exploitation.
You should also have an understanding
of how to perform and automate local enumeration on Windows
and Linux systems that you have compromised.
You should also know how to transfer files
to Windows and Linux targets, so you
should have an understanding of how to set up a web server,
how to transfer files from the web server to a Linux target,
and also to a Windows target.
You should also know how to upgrade non-interactive shells
to semi or interactive shells for that matter as well
as Meterpreter sessions.
You should also have an introduction
to privilege escalation on both Windows and Linux.
And we also covered quite a few techniques for both,
so you should have an understanding of how
to identify privilege escalation vulnerabilities, firstly,
and then how to exploit these privilege escalation
vulnerabilities in order to obtain an elevated session
on the target system.
You should also be familiar with persistence
and why it's so important, as well as the techniques
that can be used to establish persistence
or persistent access on both Windows and Linux systems.
You should also know how to dump and crack Windows and Linux
user account hashes.
So we covered the process of how to dump the hashes firstly,
both in the case of Windows and Linux,
and then how to correctly identify
the hashing algorithm that was used to hash the password
hashes, and how to crack these hashes with John
the Ripper and Hashcat.
You should also have an understanding
of pivoting, what it entails.
You should have a good idea of what port forwarding is
and how to implement port forwarding during the pivoting
phase and all to gain access to another target
system via the system that you initially compromised.
And finally, you should also have a good understanding
or a clear picture as to how to clear
your tracks on both Windows and Linux target systems
that you compromised.
Now, this is all well and good.
But I think we need to see this from the perspective
of a methodological format.
And we are going to be revisiting
the actual methodology that I created and specified
during the first two videos of this course.
So let me just switch over into another screen here.
And this will sort of give you a visual perspective
as to what we've been able to learn so far.
All right, so this is the post exploitation methodology
that I created for this particular course.
And as you can see, we have pretty much
hit all of the phases.
So starting off with local enumeration
which is the first step.
We covered enumerating system info, users and groups, network
information, services, and automating local enumeration,
both in the case of Windows and Linux.
We explored how to transfer files to Windows targets
and to Linux targets.
We know we also explored how this can be done automatically
with Meterpreter and how to set up a web server with Python.
We covered the process of upgrading command
shells to Meterpreter sessions, and, of course,
spawning TTY shells or the process
of upgrading a standard noninteractive
shell to an interactive shell.
We covered Windows privilege escalation and Linux privilege
escalation.
And of course, we identified or we
took a look at how to identify privilege escalation
vulnerabilities on both these operating systems
and then explored a few practical examples
or a few practical techniques as to how
to elevate your privileges on both of these operating
systems.
We then explored persistence and how
to set up persistence on both Windows and Linux.
We then moved on to dumping and cracking hashes on both Windows
and Linux systems.
We then, of course, explored pivoting.
We talked about or we explored the internal network
reconnaissance and the pivoting process itself.
And of course, the final step was clearing your tracks.
So this gives you a good idea as to how much we have covered
and the fact that we covered everything
in a methodological way.
So you can see we started off from the most important phase--
local enumeration, transferring files, upgrading your shells,
elevating your privileges, establishing persistence,
dumping and cracking hashes, and then, of course,
pivoting and clearing your tracks.
So hopefully this makes much more sense
at the end of this course and everything that we've done
is now contextualized and you really
have a good idea as to what to do
when you approach the post exploitation
phase of a penetration test.
With that being said, hopefully you found value in this course.
If you have any feedback regarding improvements
we can make or if you had any questions or queries,
please reach out to us as we are always
open to feedback and positive criticism
and-- or, rather, constructive criticism.
But as a final word, I would like
to say thank you very much for taking this course.
And if you have reached this far, I'm really proud of you.
And hopefully I'll be seeing you in other courses here at INE.
So that's it for me, and I'll see you in the next course.