Post Modules
In Wiregost, there are 2 ways to perform post-exploitation tasks on implant's targets:
- Through the console implant menu, with commands and their options.
- With Post-Exploitation modules.
The aim of Wiregost is currently to integrate all Merlin post-exploitation modules, but with many enhancements, especially providing more methods for interacting with implants.
This page shows how to use a very simple Post Module: MimiPenguin, which uploads a bash script onto the target, executes it for retrieving plaintext credentials, and then deletes it.
All post-exploitation modules have a path prefixed with post/:
The only required option, for a post module, is the Session option:
We can now run the module. If the session is not found, or if the session's target does not fit for the module (wrong OS/arch), it will exit and show an error. It will also exit with an error if a required option has no value. Otherwise, you should see this:
