‫Let's see the empire in action empire has its own show like command line interface.
‫As of this video, capturing Empire has 282 modules.
‫First, let's start by typing the HELP command to display the help.
‫Now I'm going to show you how to use Empire Project step by step, first step, create a listener listeners
‫and empower the channels which receive connections from our target machines.
‫It's similar to the listeners in metastable at framework.
‫Before we do anything an empire, we need to start the listeners type listeners to enter the listener
‫management state.
‫As you see, the Shell prompter changes as Empire Kolan listeners.
‫Once we move to the listener's management state, we can see its options by typing the Help Korban.
‫Let's take a look at some of the commands of the listener state.
‫Info is to display information about the active listener.
‫Now you think it's the same as the show options command of Métis Point.
‫Kill is to kill a particular listener list is to list all the active listeners, use listener is to
‫use one of the listener modules of empire.
‫You, stager, is to use one of the available stagers, we'll see that on the next step.
‫Let us now look at how to start a listener module and empire.
‫Type the use listener command for a space character and press tab twice to see the listener available
‫and empire.
‫There are seven different listeners listed.
‫Let's use the listener as an example type use listener http and press enter.
‫Now, the same as with the Linux bash, you can use the tab button to complete any particular keyword
‫here press tab in the middle of the word instead of writing the entire word.
‫Again, the Shell prop has changed as Empire listeners HTP.
‫Health command now displays the commands of this state, as you see some of the commands of the same
‫with the previous menu, but there are some different commands here.
‫The info and chose the options of the particular type of listening.
‫We want to start.
‫The set command is used to assign the values of the options.
‫Similarly, the unset command is used to clear these values.
‫Every listener requires certain options to be set, for example, when you run Infocom and you see that
‫the listener meets the host import values to be configured, an important warning here in Empire commands
‫are case sensitive.
‫That means if the name of an option is name with an uppercase M, you have to use its exact same style.
‫Name with a lowercase has a different meaning for empire.
‫Default values are set for the options IP addresses of your current system is set as the host and 80
‫is set as part.
‫The default name of the listener is set as HTP.
‫Change the values if you want, using set command.
‫I want to change the listener name as my HTP listener.
‫When all options are set, we can start the lists and are using the execute command.
‫When we go back to the main menu, using the main command or back command twice, we see that we have
‫now one active listener.
‫The second step is using stagers now and here, it's better to explain the stadia and stage concepts
‫of the exploitation world stagers set up a network connection between the attacker and the victim and
‫are designed to be small and reliable.
‫Stages are payload components that are downloaded by stage or modules.
‫The various payload stages provide advanced features with no size limit, such as an interpreter, VANOC
‫injection or shell.
‫Stagers at Empire are used to set the stage for the post exploitation activities.
‫They're similar to payloads which are used to create a connection back to empire type use stadia but
‫of space, character and press tab twice.
‫To see all of the available stages, let's start the launch stage.
‫As an example, a stage will generate a command ready to launch in command line terminal CMD.
‫Type used stager, multi slash launcher command to load the stager shell prompter changes as the name
‫of the stage we chose if you type help now you see the commands of the stagers state.
‫Use, generate or execute to generate a stage set and unset to set in on set values to particular options,
‫interact to interact with a particular agent which is normally used when there are multiple listeners'
‫type info to see the information about the stager and the options to be set.
‫Now, let's set the options to be able to generate the stadia we need to set a listener in order for
‫the stagers to be able to communicate with Empire.
‫In the last step, we already created a listener.
‫Let us set this listener for our launcher stager type set listener, my HTP listener for this purpose.
‫If you gave another name to your listener, use that instead of my HTP listener.
‫And once again, don't forget that empire is case sensitive, leave the other options as default for
‫now, run, execute or generate command to generate the stager.
‫The stager has created a command ready to be launched in the command line terminal.
‫The third step using agents.
‫When we set the stage to our target system in the machine engages with it, we get a reverse connection
‫back.
‫This is known as an agent in our example, let's run the generated command into the victim's command
‫line terminal window.
‫Now, there are a few different methods to start a terminal screen and Windows OS.
‫You can press Windows plus R to start the run dialog box type command in the dialog box and hit enter.
‫Or you can take command CMD in Windows Start menu windows will find you the tool.
‫Or you can try to find the command prompt to inside the all applications menu, which I honestly don't
‫remember.
‫Copy the generated command pasted in the command prompt of the victims system.
‫Command prompt disappears when the command is executed.
‫Go back to Kawi, as you can see, we have a new agent type main to go back to the main screen of empire.
‫We see that we have an agent.
‫Type agents to go to agents.
‫Use Interac command with the agent Edet, you're now in a session of the victim's system.
‫Type help to see the commands you can use.
‫For example, type info to see the entire information of the victim's system.
‫Autopsy to take a screenshot, etc..