Procedure:
Obtain a list of the current ports in use from the target computer
by typing
netstat ??“an
and pressing
Enter
.
For the purposes of this lab, I made sure the netcat (
nc.exe
) application
is in the
same directory as the Elitewrap application.
Double-click the
Elitewrap.exe
icon to start the application.
Redirection
619
The Elitewrap application will open. First Elite needs to know what to call
the executable file you are sending to the target.
In this lab, we named the file
Hacked.exe
(be sure to put the
.exe
on the end).
620
Practical Hacking Techniques and Countermeasures
Answer
y
when asked to perform
CRC-32 checking
.
A list of operations will be displayed, but the next item is what we want the
victim to see when they execute our new executable file named
Hacked.exe
. In
this lab, we want the Windows calculator to open up. Unless the calculator
application is in the same directory as the Elitewrap application, you will need to
enter the full path. As this is a Windows 2000 machine the path is
c:\winnt\
system32\calc.exe
.
Redirection
621
Now we decide if we actually want the victim to see something happen
with this file. By choosing option
6
(execute only, visible, asynchronously)
the calculator application will actually be executed on the target computer.
The next line specifies if there are any parameters or options you want to
use with the executable. As this is the calculator, there are no options so just
press
Enter
.
Pages:
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211