Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Metasploit Penetration Testing Cookbook

You're reading from   Metasploit Penetration Testing Cookbook Over 70 recipes to master the most widely used penetration testing framework with this book and ebook.

Arrow left icon
Product type Paperback
Published in Jun 2012
Publisher Packt
ISBN-13 9781849517423
Length 268 pages
Edition 1st Edition
Arrow right icon
Author (1):
Arrow left icon
Abhinav Singh Abhinav Singh
Author Profile Icon Abhinav Singh
Abhinav Singh
Arrow right icon
View More author details
Toc

Table of Contents (17) Chapters Close

Metasploit Penetration Testing Cookbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
1. Metasploit Quick Tips for Security Professionals 2. Information Gathering and Scanning FREE CHAPTER 3. Operating System-based Vulnerability Assessment and Exploitation 4. Client-side Exploitation and Antivirus Bypass 5. Using Meterpreter to Explore the Compromised Target 6. Advanced Meterpreter Scripting 7. Working with Modules for Penetration Testing 8. Working with Exploits 9. Working with Armitage 10. Social Engineer Toolkit Index

A deeper look into the killav.rb script


Continuing from our previous recipe, we focused on how to kill running antivirus processes on the target machine using the killav.rb script. But, what if the processes are still running or they were not killed even after using the script? There can be two reasons for it. Either the killav.rb doesn't include those processes in its list to kill or the antivirus process is running as a service. In this recipe, we will try to overcome the problems. So let's quickly move on to our recipe.

Getting ready

We will start with the same meterpreter session where we ended our previous recipe. We have used the killav.rb script once, but still the antivirus processes are running. We can view the running processes by using the ps command.

PID     Name                   User                  Path
 ---     ----                   ----                  ----
   
 1060 svchost.exe    NT AUTHORITY\SYSTEM    C:\Windows\System32\.

 1096 svchost.exe    NT AUTHORITY\SYSTEM  ...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime