2KKUU7ita

Figure 11-17:
Checking
final parameters
before
carrying out
the exploit.
Chapter 11: Windows
7. Confirm your settings on the final screen, as shown in Figure 11-17,
and click the Apply button.
The job executes, and you see the shell session in the Sessions section
in the lower-right quadrant of the Metasploit GUI.
8. Double-click the session and a new window opens with a command
prompt on the target system, as shown in Figure 11-18.
I now “own” the system and can do whatever I want.
For example, one thing I commonly do is add a user account to the exploited
system. You can actually do this within Metasploit (via the adduser payloads),
but I prefer to do it on my own so I can get screenshots of my actions.
To add a user, simply enter net user username password /add at the
Metasploit command prompt.
Next, I add the user to the local administrators group by entering net localgroup
administrators username /add at the Metasploit command prompt.
You can then log in to the remote system by mapping a drive to the C$ share
or by connecting via Remote Desktop.
221