Maintaining Access - After successfully compromising a host, if the rules of engagement permit it, it is frequently a good idea to ensure that you will be able to maintain your access for further examination or penetration of the target network. This also ensures that you will be able to reconnect to your victim if you are using a one-off exploit or crash a service on the target. In situations like these, you may not be able to regain access again until a reboot of the target is preformed.
Once you have gained access to one system, you can ultimately gain access to the systems that share the same subnet. Pivoting from one system to another, gaining information about the users activities by monitoring their keystrokes, and impersonating users with captured tokens are just a few of the techniques we will describe further in this module.
MAINTAINING ACCESS - SOFTWARE'S / TOOLS / UTILITIES
- cfexec.cfm
- cmd-asp-5.1.asp
- cmdasp.asp
- cmd.aspx
- cmdjsp.jsp
- jsp-reverse.jsp
- perlcmd.cgi
- php-backdoor.php
- simple-backdoor.php
- 3proxy
- CryptCat
- ctunnel
- Dns2Tcp
- Miredo
- Nstx
- Proxychains
- ProxyTunnel
- Ptunnel
- pwnat
- Sbd
- Socat
- Stunnel4
- TinyProxy
- UdpTunnel
- Injector
- HTTP-Tunnel
- Super network tunnel
- reDuh
- Httport
- Weevely
- macchanger
CORE Impact Professional is the most comprehensive software solution for assessing and testing security vulnerabilities throughout your organization.
IBM Rational AppScan Enterprise is a scalable solution to help resolve application security vulnerabilities, offering recommendations to simplify remediation.
HP WebInspect gives security professionals and security novices alike the power and knowledge to quickly identify and validate critical, high-risk security vulnerabilities.
Acunetix Web Vulnerability Scanner (WVS) is an automated web application security testing tool that audits web applications by checking for hacking vulnerabilities.