Post‐Exploitation and Local Privilege Escalation Operations (Phase 2) - sophialevasseur/SEC-335 GitHub Wiki

😱Main Doc😱

⭐Objective⭐

• Perform comprehensive reconnaissance on the Windows 10 host using a mix of Meterpreter modules and custom scripting.

  1. Module Execution: Utilize at least five (5) distinct Meterpreter modules to gather system information from the Phase 1 attack.
  2. Custom Script Deployment: Download the enumeration file from the "Staging and Exfiltration" module you created to the Windows 10 host. Execute the script to perform additional enumeration.
  3. Data Consolidation: Compress and stage the compressed file for exfiltration.

📜Documentation for Phase 2📜

• Report Section:
  1. Create a table listing each Meterpreter module used, the specific command executed, and a summary of the critical information retrieved (e.g., sysinfo -> OS version, architecture).
     • Post a screenshot of each command output.
  2. Explain the purpose of the custom enumeration script and how its output was integrated into the final data package.
  3. Document the compression tool chosen and the command used to stage the file for exfiltration.
     • Take screenshots of the staged file, the output showing the files were compressed.

1. Report Section 1:

Module	Command	Key Findings
sysinfo	sysinfo	-
ipconfig	ipconfig	-
ps	ps	-
getsid	getsid	-

2. Report Section 2:

• The purpose of the custom enumeration script is _______. Its output is integrated into the final data package by _______.
  • Custom Enumeration Script

3. Report Section 3:

• Compression tools used and chosen are below: