Kali Linux 2018: Windows Penetration Testing - Second Edition

EvilGrade

EvilGrade is a modular framework that allows the user to exploit upgrade implementations by injecting fake updates, not only for Windows OSes but also for other popular Windows applications. The list is long. The framework comes with pre-made binaries (agents), but custom binaries can also be pushed to the victim machine. The framework comes with its own web server and DNS server modules.

In the attack, we are going to exploit the Windows wpad service and push out a bad Windows update. Instead of using the pre-built binary, we will build our own payload so we can upload a Metasploit Meterpreter shell to the victim machine. This way we can use Metasploit tools for further compromising.

EvilGrade doesn't come with the default install ...