Hands-On Red Team Tactics

Summary

In this chapter, we introduced Empire and its fundamentals. We have also covered Empire's basic usage and the post exploitation basics for Windows, Linux and OSX. We were also able to get a Meterpreter session opened using Empire and, finally, used Slack as the alerting mechanism whenever an agent connects back to the Empire C2. However, in an organization, accessing a server is not enough. The final goal for intruding into the network should be to get full access to the Domain Controller (DC). In the next chapter, we will cover how we can use Empire to gain access to DC and how we can achieve this using automated tools.