‫User interface commands and webcam commands are grouped under two different headers, capturing keystrokes,
‫grabbing screenshots, taking a snapshot from the webcam are only some of the functions of the commands
‫of this group.
‫Idle time returns the idle time of the victor machine if you want to connect remotely and do something
‫on the machine, for example, disable the host based antivirus.
‫It would be best to do it in the idle time.
‫So screenshot guess what that does grabs a screenshot of the current desktop interface.
‫He can start, he can stop, he scanned dump used to capture keystrokes.
‫Record my records audio from the mike of the victim.
‫Webcam list lists the webcams of the victim machine webcam snap takes a snapshot from the specified
‫webcam.
‫So let's see some of these system commands in action.
‫As you can tell, I now have an interpreter session in Colly Idle time shows the idle duration of the
‫victim in seconds.
‫Screenshot takes a screenshot and saves it to our host.
‫So here it saved in the folder RWD with a strange name.
‫So let's look at the folder with the file explorer.
‫We're already in the home folder of the current user, which is the folder route, and here is the screenshot
‫in JPEG format.
‫It's exactly the same with a current look of the machine.
‫So now let's start a case can.
‫Now I am in the vector machine, open a notepad and write something down.
‫He scanned dump to look at what is dumped, absolutely nothing.
‫I think I know the reason.
‫So I'll stop the CAT scan for now.
‫Now get uid ID to see who we are at the moment.
‫And we are the system user at the victim machine.
‫But the user who opened the notepad and wrote something is.
‫The administrator, USERRA, so do you remember how we can change the user, we're going to migrate
‫a process which is run by the administrator user, for example, three to four.
‫How lucky are we migrated to the very first attempt to get started again?
‫And yes, we are the administrator now, so start the question again.
‫And go to the Victor machine and write something down.
‫Back in Akali and look at the key dump.
‫And here it is, all the key strokes, including backspace and enter, also known as carriage return,
‫are all logged.
‫So we can stop the question now.
‫So what else?
‫Let's list the API extensions command using help SDD API.
‫The webcam commands are here, and let's list the webcams of the victim.
‫No webcams were found.
‫Now, normally we can share the webcam of the host machine with a VM, so go to VM settings, click
‫add device, select camera and click add.
‫So we're supposed to have a webcam in the VM now, but it is a known issue that VMware cannot share
‫the MacBook FaceTime HD camera with VMS.
‫This is why nothing happens when we try to add a camera.
‫I cannot show the webcam commands now, but I'll try to find an external webcam, capture a new lecture
‫with it and add that lecture to the course.