All right.
The last thing we want to look at are the firewall and antivirus configurations on the machine itself.
Now these don't come into play too often on the Capture the Flag style events but it's always something
to look at because some of the harder ones actually do have a firewall enable their antivirus enabled.
So we need to know kind of what we're up against.
And it's always good to enumerate that even if you're in a real world environments.
Really good to enumerate that.
So what we're going to look at first is we're going to look at the service control and you're going
to see this kind of begin in the course over and over.
So the service control command is S.C. let's go ahead and drop down into a shell and we can just say
SC for service control and let's say we want to just query one that we know and understand say query
and I'm going to find out information about wind defense.
So we say when defend we're going to see information about Windows Defender why am I picking this.
Well we're on a Windows machine.
And by default Windows machines have windows defender on.
Well look it's running.
We know the state is running so antivirus is up on this machine and running but it's not doing a great
job.
If you ask me we were able to run medicinally with a basic shell we got in on four four four four.
So not the best.
And this is Windows 7.
So maybe there's some excuse there maybe it's mis configured on purpose.
We don't really know.
But the state is running let's say we see it as stop.
But we think that maybe there's something still blocking us some kind of antivirus is running on this
machine and we don't know what's going on and we can do a quick service query.
We could say something like service control and we'll do a query X like this and we'll just say type
equals service.
Now this is going to tell us all the services that are running on the machine.
It's going to be a lot.
But if we want to kind of search through here and see Hey what's running what am I up against like See
here's Windows Defender.
But you might see something like I don't know Sophos as an example you might see some well-known antivirus
running on this machine.
You're gonna say Oh I'm up against that.
Now I know what's there and maybe you start looking into ways to bypass that just as an example.
Now the last thing that we should talk about is firewalls.
So firewall settings are important to look at too.
So we want to see firewall settings because maybe there are ports open or only certain ports that we
can navigate around.
Maybe as you'll see later again with the net set that we looked at maybe there's ports that we can utilize
that are only internally open and we can utilize those for some sort of port forwarding and use that
to exploit a machine further.
So there's a lot of cool little tricks that we can do but we have to know the firewall configuration
especially for getting blocked on ports like 4 4 4 4 which is really common in med school.
We might have to run something like 4 4 or 3 and pretend we're doing traffic over a Web server or maybe
fifty three and pretend we're doing traffic over DNS.
Something along those lines we got to see what's actually open for us.
So what command we can run them to the common command or the modern command I should say is this net
s h ATV firewall firewall dump.
Now this isn't going to return anything and that's OK we are going to use a different command.
This is a little bit older but we're gonna say firewall shows state.
So either way try both of these commands depending on the machine you're on.
So this tells you what the state of the firewall is you can see that it's enabled and that it's running
the regular old Windows Firewall group policy version.
So that's a little bit information.
Other information that you can gather is that age firewall.
We can show the configuration and here's where we can look for like specific ports and things that might
be open or any sort of configurations that are in here that are special to this machine.
So I'm not seeing anything crazy here which is expected to we got in on 4 4 4 4 but it's just something
to keep in mind if you're doing an immigration if you're up against a wall something that might be sticking
out.
So something to keep in your back pocket.
Again this is gonna be automated when we look at our tools but it's always good to know the process
manually and understand why it's doing it and why the tools are running it instead of just firing tools
with no purpose behind it or no understanding behind it.
So that's all this section was.
And now that we're wrapping up we're gonna see how we automate it in the next section.
So I just want you to have good notes at this point.
If you didn't take good notes please go back.
Watch these again or even go in.
Check out the resources that were provided.
Jot down some decent notes on this.
Understand why we're doing it and don't just go fire tools at this.
So it's just a really high level overview for you to get the understanding.
But now that you have the understanding we're gonna dive into the tools.
So I'll catch you over the next video as we start looking at different tools that we can utilize and
make this process a lot easier for us.