Notice the IP address of the target when you select it.
Right-click the target and select Script, then Metasploit.
488 Practical Hacking Techniques and Countermeasures
The Metasploit settings screen will be displayed.
Change Select payload to Reverse Shell.
Vulnerability Scanning 489
Under Payload options change the Listening host to the network card
you are using. Click the Exploit button.
*Note: Most readers will not have to make the Listening Host change. In my Virtual
Machine I had two virtual network cards (NICs) installed and had to tell
AutoScan which one to use.
The appropriate screen, according to the parameters you just set, will appear.
In this case, I immediately received a DOS prompt, hopefully from the target.
490 Practical Hacking Techniques and Countermeasures
To verify that I am indeed on the target computer, I type the command
ipconfig and press Enter.
The IP address listed is indeed that of the target.
*Note: If you attempt to attack a target and the screen appears, attempts to run, and
then disappears, chances are the attack will not work against that target. This
does not mean other attacks will not work but the legwork an attacker performs,
as outlined in previous labs, tells the attacker which exploit to attempt.
Vulnerability Scanning 491
Lab 73: Unique Fake Lock Screen XP
Grab the Administrator Password: Fake Lock Screen XP
Prerequisites: Windows XP
Countermeasures: Strong security policies, strong physical security
Description: Until now, the ???Fake??? security screen locks did not handle
Microsoft??™s Ctrl+Alt+Del screen.
Pages:
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174