Penetration Testing Bootcamp

Clearev with Metasploit

Within Metasploit, there is a script that will clear out Windows event logs. It will clear all event logs that are contained on the system. It saves a lot of time and manual effort with one command. Packaging this utility inside Metasploit is tremendously smart.

The one caveat is that it's only supported if you have compromised a Windows system. When you compromise any other operating system, this particular menu item will not be available.

The process for using clearev is quite easy. You first need to compromise a Windows host of some sort. Once you have performed this, you will arrive at the following prompt:

meterpreter >

Once you are at this prompt, you will know you have successfully compromised a host. To see ...