Post-exploitation using Empire
In this section, you will learn how to set up Empire to perform post-exploitation techniques on a compromised host on a network. Additionally, you will learn how to establish C2 connections between an agent on the compromised host and the Empire server.
To get started with performing post-exploitation using Empire, please use the following guidelines:
- Power on both your Kali Linux and Windows Server 2019 virtual machines within the Red Team Lab topology.
- On Kali Linux, open Terminal and use the following command to start the Empire server:
kali@kali:~$ sudo powershell-empire server
- On the same Kali Linux, open another Terminal window and use the following command to start the Empire client:
kali@kali:~$ sudo powershell-empire client
- Once the client starts, it will attempt to automatically connect to the local Empire server. Therefore, it's vital you start the Empire server before enabling the Empire client.
- Any commands...