- [Instructor] Earlier in this course,
you learned how to maintain persistence
on a compromised system after exploitation.
You learned about tools like Netcat
that can be used to create bind shells
or reverse TCP shells on a victim's system
or from a victim's system to actually connect to you
or to a command and control system.
You also learned that you can actually use
remote access protocols to communicate
to a compromised system and perform lateral movement.
These protocols include the things like
the Microsoft Remote Desktop Protocol or RDP,
Apple Remote Desktop, VNC,
and X server forwarding.
You also learned that you can use PowerShell
to get things like directory listings,
copy and move files, get a list of running processes
and perform many, many different administrative tasks
that can actually help you
as "an attacker" was a pentester
to further compromise a system.
Now, PowerSploit is a collection of PowerShell modules
that can be used for post-expedition
and other phases of the penetration testing assessment.
PowerSploit can be downloaded from the GitHub repository
that I'm sharing in this screen.