Freaks City

The MS17-010 vulnerability, commonly known as EternalBlue, is a critical remote code execution flaw in Microsoft’s Server Message Block (SMB) protocol implementation. Original developed by the NSA and later leaked, it gained global notoriety in 2017 when weaponized in the WannaCry ransomware outbreak. Unpatched Windows systems—particularly Wind ...

Chapter 4: Network-Level Exploitation This chapter covers practical techniques for exploiting network services using tools available in Kali Linux. We will use vulnerable virtual machines such as Stapler and Metasploitable 2 to demonstrate credential attacks, service exploitation, and custom script usage. Gathering Intelligence to Credential At ...

MSF Module Structure Metasploit Framework's default module directory path: /usr/share/metasploit-framework/modules/ Framework Components Auxiliaries: Information gathering modules (scanners, fingerprinters) Exploits: Vulnerability attack implementations Payloads: Post-exploitation code execution mechanisms Encoders: Anti-virus evasion tools P ...

Experiment Overview This session focuses on the Metasploit Framework, an open-source platform designed for vulnerability assessment and penetration testing. It offers a comprehensive set of tools and modules to identify, exploit, and validate software weaknesses. Initial Reconnaisance Host Discovery Use auxiliary modules like arp_sweep to detec ...

Client-Side Attacks and Social Engineering Modern penetration testing often extends beyond server-side vulnerabilities to target the client software or the human element. Attackers frequently use web servers as conduits to exploit client-side software flaws or trick users into performing actions that compromise sensitive data. Credential Harves ...

Information Gathering Target IP: 192.168.0.104 Port Scanning Perform full port scanning using masscan for speed, followed by detailed nmap scanning of open ports: masscan -p 1-65535 192.168.0.104 --rate=1000 Ports 445, 3389, and 80 indicate a Windows server with MySQL database. Web service runs on port 80, displaying a PHPStudy default page. D ...

Metasploit Windows Remote Exploitation This section demonstrates exploiting the MS08-067 vulnerability (CVE-2008-4250), a critical Windows SMB service remote code execution vulnerability affecting port 445. Target Environment Attacker machine: Kali Linux at 192.168.20.129 Target machine: Windows 2000 at 192.168.20.132 Exploitation Process Lau ...

Before using Metasploit, initialize and start the database: msfdb reinit msfdb start Launch the console: msfconsole connect Command Connect to a remote host on a specific port: msf5 > connect 10.0.0.50 80 Send an HTTP GET request to review the server banner: GET / HTTP/1.1 200 OK ... show Command List all available modules: msf5 > sho ...

Automated Installation via ScriptThe Metasploit Framework can be deployed rapidly on Ubuntu systems using the official Rapid7 installer. This method automates the installation of dependencies and the framework itself.curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate. ...

Initializing the FrameworkAccess the primary command-line interface to begin penetration testing operations.msfconsoleEstablishing the backend database ensures efficient tracking of hosts, services, and session data.msfdb initTarget Reconnaissance via Auxiliary ModulesLeverage scanner modules to enumerate active services. For instance, identify ...