All right let's wrap up this section with some actions against Linux targets.
OK so we have here a one to desktop food besht absolutely up to date all no anti-virus is running of
course because Linux is kind of not that type of environment where you can get into or is to act efficiently.
Right.
So let's first generate a lot to run on Linux and then let's get connected back to him and his boy tower
and see what type of post exploitation techniques we can
we can perform.
Right so uploading let us blow it.
Agent would be possible in cases you can compromise a
application running on Linux host.
Very often it's something obligations are related Tomcat or JBoss or something like that.
Right.
So anything in range rover can be might be exploitable in the exploitation of those vulnerabilities
will result in you having access in the context of obligations or.
Right.
This is this is not much but it's enough for further exploitation activity.
So let's imagine we already have that connection and we can upload something and run something on the
server.
And that might be a
very specifically crafted Materne printer.
All right.
So we do that with myself and I'm
right which is a new name for MSF payload.
And I was surfing quote right if you're familiar with this board framework you remember that there were
two separate tools for crafting and coding payloads.
Now it's combined in one utility.
And
let's use Let's first see what payloads we can put
into into the Executive Board.
And for that we will have to we have to run
motorsport for that.
Now let's just do that list.
You know it's you know on the are we only know it's from the output
because there isn't a bunch of them can we use Metohija of course accounts or use my interpreter for
all 64.
Is there a thing like that.
Not exactly.
Yes all that's running leg is symbol x.
It is six so
again it's really helps trying to make any mistakes we shouldn't make.
So fable is like that.
So we'll have to all these variables here.
All right.
Guess so you know code word is in the fall but we'll put it here also.
Doesn't it.
Right.
It's just to be sure it's like.
Yeah.
And we'll have to code the format and they'll see what are the formats
we can use
Kamarck
you know the faster all around but it pays out.
Patience is totally worth it.
So here we can encoded is
as you laugh of course or as a shared object library but we will do it in one piece.
So let's do it you know.
And then we'll have to
save the whales to file case or would it be enough.
Well you know it's all just like this.
All right
well.
It's only a laugh binary and firmly and once that's passed it over to our
whole how can religion that's
is use Dragon go
I totally hope not.
That's unnamable is sharing.
Remember the word is
can drag and drop is old and is very directional.
Why isn't that working.
That's funny.
Let's put it into polar.
Why not
OK.
So
can we
just put it into a shared directory and I hope so.
So it's just copy this file to a share of the character we have.
And then on this host
we'll have to
wrong.
Yeah it gets really weird.
Well that's what our next hour should look like.
Yes or something really really manual we deliver to the target portion.
OK.
What we have here
I think it's there.
OK.
So
to all
it's there cool.
So getting around that.
I hope so.
OK.
Was just check it out
remissions do not allow us to run that.
OK.
It's fix that too.
All
now everything is OK.
OK fine.
So are here on the other side.
We will have to of course fire up the console.
Come on.
Start up already.