After achieving and maintaining access, it's time to exit the system. Lisa Bock takes a look at a couple of ways of cleaning up any evidence and covering any tracks or traces of activity on a Linux machine by using Metasploit meterpreter and clear everything. In addition, take a look at event log on Windows to clear any activity.
- [Voiceover] After achieving and maintaining access,…it's time to exit the system.…Keep in mind, other devices on the network…may have picked up unusual activity,…but are truly difficult…to remove log files from every device.…Any good hacker will clean up any trace of their activity.…If there is any evidence that they were in the system,…a forensic team might be able to…trace the activity back to the hacker.…Before leaving, we'll take a look at couple of ways…of cleaning up any evidence,…and covering any tracks of activity on the machine.…
On a Linux machine,…we can clean up evidence using the Metasploit meterpreter.…And in this case we would just say "Clear everything."…Also on a Linux system,…you can take a look at an open log files…that are stored in the var/log messages file,…and we can use kwrite /var/log/messages.…Now remember we've probably entered some commands,…so we'll want to go back in there…and erase the command history,…and set it back to zero,…so that there's no trace that I was there.…Just go in and export HISTSIZE=0.…
These tutorials, along with the other courses featured in the Ethical Hacking series, will prepare students to pass the Certified Ethical Hacker exam and start a career in this in-demand field. Find out more about the exam at https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/.
- Acquiring passwords
- Generating rainbow tables
- Understanding where passwords are stored
- Defending against privilege escalation
- Understanding spyware
- Protecting against keylogging
- Detecting steganography
- How hackers cover their tracks
Skill Level Intermediate
1. System Hacking Overview
2. Gaining Access
3. Privilege Escalation
6. Hiding in Plain Sight
7. Cover Your Tracks
How to cover your tracks2m 34s
Next steps1m 2s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.