From the course: Penetration Testing with Metasploit
Unlock the full course today
Join today to access over 24,700 courses taught by industry experts.
Dumping passwords and privilege escalation - Metasploit Tutorial
From the course: Penetration Testing with Metasploit
Dumping passwords and privilege escalation
- [Instructor] Now let's see what other types of fun that we can have with a Meterpreter session on a Windows environment. So we have a Meterpreter session open. Let's try and interact with it. Now, unlike in the previous video, if you see Meterpreter session with Windows environment comes with few additional features, like the privilege commands for password database dump using the hashdump command. We can use the timestomp command to manipulate file time attributes. We can also use certain user interface commands to scan the keystrokes of a user, like a keylogger. We can take screenshot. We can enable screen share. And do basically lots of things, like rebooting the system, shutting the system down, so on and so forth with a particular Windows system. Let's try some of these examples. Now, if we want to take the password hashes of that particular system, we can simply run hashdump so we'll have the…