SEC335 ‐ Staging and Exfil ‐ 09 18 26 - tnugent371/tech-journal GitHub Wiki

Trevor Nugent SEC 335 Staging and Exfil

Task One

  1. Outputs: https://github.com/tnugent371/tech-journal/tree/main/SEC335/enumeration

  2. 5 Additional commands:

LOLBin Command Information gathered Why useful
hostname.exe hostname Computer's hostname Identifies the target system
query.exe query user Logged-in users/sessions Shows who is currently using the system
driverquery.exe driverquery /v Installed drivers Identifies hardware/software drivers
netstat.exe netstat -abno Connections + owning processes Correlates network activity with processes
wevtutil.exe wevtutil el Windows event logs Identifies available logging sources
  1. Screenshot:
  1. Enumeration Script: https://github.com/tnugent371/tech-journal/blob/main/SEC335/enumerate.ps1

Task Two

  1. Meterpreter Session:
  1. Successful Download:
  1. ls -la:

Task Three

  1. Decompression Video: https://drive.google.com/file/d/1nmszJaW1-EWciF_nrLYeqBThUQ1bsGzX/view?usp=sharing

  2. Readble File Screenshots:

  1. Which archive format produced the smallest file?: 7zip

  2. Which compression tool was easiest to use?: The basic zip. It's a format usable by default on all major OSes and didn't need installation.

Task Four

1 & 2) Alternative Exfil Methods Video: https://drive.google.com/file/d/1f5iTCdAB9tfA7z9RODt7VtihDd0y8rE3/view?usp=sharing