‫Now, the post modules contain various scripts and utilities that help you to further infiltrate your
‫target system after a successful exploitation.
‫Once you successfully exploit a vulnerability and get into your target system, the post exploitation
‫modules are going to help you in the following ways.
‫Escalate user privileges.
‫OS credentialled, steal cookies and saved passwords, get key logs from the target system, execute
‫power shell scripts and make your access persistent.
‫The Menace Boite Framework has more than 250 such post exploitation, utilities and scripts.
‫So after gaining a shell, you can choose the appropriate post module to gather more information from
‫the target or escalate your privileges.
‫So let's see what a post module's directory looks like.
‫Under module's.
‫Post.
‫And there are the post module directories, so because I have exploited a Linux system, I'll need to
‫use Linux post exploitation modules.
‫So let's go have a look at the Linux folder.
‫And under Linux, there is a gather folder.
‫And what do you have here?
‫The hash dump module, now, it's not only for Linux.
‫If you look over here, you have the same four windows as well.
‫Now, before we go jumping into the command line, I just want you to realize just how meaningful the
‫Métis Bloy directory structure really is.
‫Now, you might ask, can you find your way around only by examining the structure.
‫Let's go back to terminal.
‫So now I'm going to use the VSP exploit again.
‫So use XPoint.
‫Eunuch's, fpp.
‫V.S., F.T. PD.
‫So options.
‫Everything is ready to exploit, then exploit J.
‫So this command will exploit the target and if I get a session, then it will hold that session in the
‫background type sessions to list the available sessions in the background.
‫And there it is in session for.
‫So now is the time to use a post module over this session.
‫Now the usage syntax of a post module is the same type used and then the name of the post module use
‫post Linux.
‫Gather hash dump, now show the options to me only this session variable.
‫So set this variable to the index of this session for.
‫Then exploit.
‫Aha, so here are the password hashes of medicine voidable to users.
‫Now, you don't have to stay with that.
‫You can also use some of the other post modules.