Coding for Penetration Testers

Chapter 10

Post-exploitation scripting

Information in this chapter:

• Why Post-Exploitation Is Important

• Windows Shell Commands

• Gathering Network Information

• Scripting Metasploit Meterpreter

• Database Post-Exploitation

Getting into a machine is only half the battle. Being able to take one asset, gather information, and use that information to gain further access to the network or other resources are skills that will turn a fair penetration tester into a good one. In this chapter, we will look at some basic shell scripting to help gather information once an exploit has been successful. We will also examine how to gain further access through Meterpreter scripting. Once we are done with network post-exploitation, we will use database vulnerabilities ...