The TCP-port to connect to (as set on the server).
A valid User Name (as set on the server).
The valid Password (as set on the server).
Click OK.
Right-click on the new target and click Connect.
Wireless 543
The bottom of the NetBus application displays a status bar. If successful
NetBus will display Connected to target ip.
Click Control and review all of the options available to the attacker.
544 Practical Hacking Techniques and Countermeasures
This lab will perform a Fun Stuff, Go to URL function. A URL box will be
displayed. Type any valid URL and click OK.
The target computer will now open an Internet Explorer session and go
to the Web site the attacker instructed it to go to.
*Note: NetBus has been around long enough for several NetBus removal tools to
be developed. This tool is still effective as a Trojan, however, because of the
sheer amount of unprotected computers.
Wireless 545
Lab 79: ICMP Tunnel Backdoor
Bidirectional Spoofed ICMP Tunnel: Sneaky-Sneaky
Prerequisites: None
Countermeasures: Updated antivirus, strong firewall ACLs
Description: Sneaky-Sneaky communicates in echo replies, which the
kernel ignores and are not normally blocked. The packets the client
and server send are spoofed, and the real IP is encrypted inside the
payload. Sneaky-Sneaky uses this IP to communicate; the ???visible???
source IP is never used. Remember that all commands in Linux are
case sensitive.
Procedure: Compile server- and client-side components, connect, and
control.
Pages:
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190