Shulou(Shulou.com)06/01 Report--

This is an example of Chapter 4 of the complete beginner's Guide to Penetration testing, which demonstrates the use of the MS08-067 vulnerability to gain control of a remote xp sp3 host. You can read more about it. This document is just a list of exploit steps.

Enable msfconsolemsfconsole to find the module of MS08-067

It can be seen that this is an exploit module, and the exploit module can perform * on remote hosts.

Load module

Only the use module name is needed to load the module, and the exploit in the path of the module name can be omitted

View the options of the module

View the operating system that this module can * *

Setting optionsrhost is to * the remote machine rport is the port of the remote host, which remains unchanged here, because MS08-067 uses the SMB service. Here, you need to set target to 34, that is, the target host to be specified is simplified Chinese xp sp3. If not specified, the module will press xp sp3 in English, and cannot * succeed.

The running module sees a meterpreter prompt indicating that the vulnerability has been successfully exploited, and Metasploit successfully establishes a Meterpreter session. The default Metasploit module will establish a meterpreter session after successful execution, or it can be set to establish other sessions. In a meterpreter session, you can execute ls and pwd commands to view files on a remote host, and you can download and upload files from a remote host in a meterpreter session.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.