Hacking_and_Penetration_Testing_with_Low_Power_Devices

114 CHAPTER 5 Powering The Deck
EXPLOITING VULNERABILITIES
The Windows XP machine at 192.168.10.103 has two high-priority security holes.
One of these holes is related to a possible denial of service attack known as jolt2.
Given that this machine is not a server, this is not necessarily as concerning as it first
sounds. The other high-priority hole indicates a vulnerability related to file sharing
with the Server Message Block (SMB) protocol.
The Metasploit framework can be used to attempt to exploit this vulnerability.
Firing up the Metasploit console is a simple as becoming root, changing to the appropriate
directory, and running msfconsole. The initial welcome banner is shown in
Figure 5.16.
Exploiting the SMB security hole is as simple as loading the exploit, setting
parameters including a payload, and then running the exploit. The command to load
our desired exploit is use exploit/windows/smb/ms08_067_netapi. Note that tab
completion is available in Metasploit if you cannot remember the exact name of a
module or command. The Metasploit console prompt changes to reflect the currently
loaded module.
FIGURE 5.16
Initial Metasploit console welcome banner.