From the course: Complete Guide to Penetration Testing

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Post-exploitation with PowerShell Empire

Post-exploitation with PowerShell Empire

From the course: Complete Guide to Penetration Testing

Post-exploitation with PowerShell Empire

- [Instructor] Kali contains a number of tools which are designed to run on Windows. Let's check them. ls /usr/share/ windows-resources. As we can see, there are two PowerShell tools, PowerSploit, and its successor, PowerShell Empire. Neither of these PowerShell testing frameworks are supported now, but they're still used by many pen testers. Let's take a look at PowerShell Empire, which is pre-installed in Kali. We'll need two terminal windows for running PowerShell Empire. The first is to start the server, and the second is to run our operator interface. Let's start the server. sudo powershell-empire server. This starts up and opens a couple of API endpoints. There's an error reported with the ICU package, which is due to an incompatibility between PowerShell and the latest version of ICU. We can ignore this for the moment. Now the service started up, we'll open a client interface into it, and we'll do that in a new terminal session. And we'll do that with sudo powershell-empire…

Contents