This is mainly a post-exploitation demonstration that first starts with a walk-through of exploiting a Windows machine. Next, we walk through getting a copy of the Web server's home page and then modify it with an iframe that points to an exploit server.

From: InfoSec Institute