all right. So now that we've explored some of the encoding options and some of the output file options for building your payload,
I'd like to explain a little bit more about how the database works and some of the other features that
are there for enhanced productivity. For instance, I can
workspaces, but by default I have one named default.
So let's look at the help
affection I can list my workspaces. Aiken switched from one to the other. Which, of course, is very handy. If you're working on several projects at a time
and you want to keep them all straight
and it works based elite
delete all and rename. So let's create, since where we are going to be
doing our pen testing work on the Medicis. Plausible,
workspace called Min Exploitable.
Now, if I run my work space command, I should see it listed and notice. When I create a workspace, it automatically switches me to that.
Uh, renaming and deleting are fairly
Your call. I also ran the D B Status Command
to make sure that I'm connected to my database
and as a reminder, you have to
I can't do that from this.
I can make another command show. One thing I'd like to show people also a shortcut. So if you're within the command, shell and Callie shift control T open up another terminal as a tab,
and it makes life a lot easier. So I could just switch back and forth
control. Paige, up, down or sorry, control page down, control page up.
We'll let you switch between the tabs.
So if you're if you're really, like using the keyboard and you feel like the mouse slows you down, then some of these shortcuts are really handy to know about.
the point I was trying to make again was, don't forget to run
your, uh, your post grass and database start up.
Once we install some other features, then we'll see some a couple of other areas that we want to remember. Start service is you can certainly put these any start up
uh or rather your nick dot d director at sea, an adoptee,
but generally starting them up. Daniel, he's not a big deal, and it helps to make sure that you're only enabling the resource is that you need at the time that you're doing your work.
Okay, so I know my databases there. I've gotta work space to find
What are some of the other features that I can
Explorer. But you do the help command,
we'll get a review of our database back and commands.
Noticed that if I'm running an instance of medicine point and I'm not connected, I can run the d B Connect command.
So we run the dash h.
Basically, I give a user name and a database name,
maybe a I p address that might be required depending on what kind of,
path names you've set up
that I could also do other things, like things like Look at my hosts. There in the database, I can look at whatever loot, which is any files or other components that were that were gathered during a scan or some other kind of exploit
I might also look at my service is that are defined.
is should be empty right now because I don't have any anything to find no hosts. No service is,
But we'll see shortly once, uh,
we use the import command.
I can, for instance, run a scan and nexus
and then use the D B import to pull that information into menace. Boy,
now you can do this from the command line based medicine point that the council I must have counsel.
You could also do it from the Web based community edition. You can also do it from Armitage. So we have three different options
you can run and maps can directly from the, uh from menace Point counsel on that, we'll pull that data into the database, or it will suck it in. Maybe is a better way to put that
any vulnerabilities that were discovered we'll be list in the database. So this is pretty nice
command line interface to this to this database tool.
And let's not forget the need for doing backups of your information so the D B Export Command will help you with that. It's pretty self explanatory.
run the health screen,
and we see we just pick a format XML or PW dump,
and then we pick a farm, it
and a path to a falling. So it's pretty straightforward,
and one of the thing to point out before we go move on to the next topic is the
for instance, I ran the hosts command. We know that there's nothing there because I haven't done a scan yet.
But Host Service's and some of the other commands will let you select which columns you want to view so I can use the dash C option for this
cell. For instance, if I wanna run hosts
there, see, maybe only want the address
you may not like the, uh,
space there for each other to get without the space.
civil player, but does not parse the space. So you be aware of that now. I can kind of simplify what I'm looking for, depending on what I'm running,
which command I'm running. For instance, I'm mourning. Service is
maybe I only want to know the host in the port number, for instance.
I can also, if I have any credentials that have been captured as part of a
scan or some exploit that would also be saved, Aiken Then sort those columns as needed
so you can see the The database has a lot of neat features
And once you get familiar with it, getting around from the command line as we're doing here, could be, ah, they're efficient and a great way to, uh, to save time as you're doing your different tasks.