Metasploit Framework (14): Vulnerability Scan

VNC password hack

VNC Port 5900

Open the database First

Start MSF

VNC Access without password

RDP Remote Desktop Vulnerability

Win7 192.168.1.123

XP 192.168.1.122

Found two modules, one is DOS module, one is scanner module

Using the DOS denial of service attack module

Set the destination IP to XP

Run, XP on the blue screen

Set the target service to Win7

Run,

Win7 's blue screen too.

VMWare ESXi Password Blasting

Specifying a password dictionary

If the result is exploded, use the following module to enumerate all the virtual machines

After acquiring the virtual machine name, remotely turn on the virtual machine

HTTP Vulnerability Scan

To see if a certificate expires

Show Table of Contents

Display files, equivalent to a crawl process

WebDAV bypasses authentication using Unicode encoding

Tomcat Admin Login page, brute force hack

HTTP method-based authentication bypass

WordPress Password Blasting

WMAP Web App Scan

Metasploit Framework (14): Vulnerability Scan