Maintaining access with PowerSploit
The PowerSploit framework is a real treat for the post-exploitation phase. The framework consists of a goodie bag full of PowerShell scripts that do various bits of magic. A full exploration of PowerSploit is an exercise I leave to you, dear reader. For now, we’re checking out the persistence module.
Let’s understand the module concept first. Modules are essentially collections of PowerShell scripts that together form a cohesive theme or type of task. You can group tools together in a folder, dump that into the module path, and then import the group as needed. A well-written module integrates seamlessly with all of what makes PowerShell special. In particular, Get-Help
works as expected with the scripts. Yes, you can run Get-Help
on these malicious scripts to understand exactly how to use them. Let’s try it out.
Installing the persistence module in PowerShell
In older versions of Kali, we had to manually pull the latest...