使用MS08-067 漏洞攻击xp靶机

电玩女神 2023-08-17 16:27 191阅读 0赞

一、攻击前的准备

Linux 虚拟机 用于运行大名鼎鼎的msf

1512006-20190711113526866-1516979306.png

xp sp3 中文版 (或者其他版本)

1512006-20190711113557016-1363397752.png

二、准备攻击

在msfconsole 中搜索漏洞编号

1512006-20190711113730437-1214219984.png

查看该漏洞支持的平台

1512006-20190711113825406-1978787527.png

  1. Available targets:
  2. Id Name
  3. -- ----
  4. 0 Automatic Targeting
  5. 1 Windows 2000 Universal
  6. 2 Windows XP SP0/SP1 Universal
  7. 3 Windows 2003 SP0 Universal
  8. 4 Windows XP SP2 English (AlwaysOn NX)
  9. 5 Windows XP SP2 English (NX)
  10. 6 Windows XP SP3 English (AlwaysOn NX)
  11. 7 Windows XP SP3 English (NX)
  12. 8 Windows XP SP2 Arabic (NX)
  13. 9 Windows XP SP2 Chinese - Traditional / Taiwan (NX)
  14. 10 Windows XP SP2 Chinese - Simplified (NX)
  15. 11 Windows XP SP2 Chinese - Traditional (NX)
  16. 12 Windows XP SP2 Czech (NX)
  17. 13 Windows XP SP2 Danish (NX)
  18. 14 Windows XP SP2 German (NX)
  19. 15 Windows XP SP2 Greek (NX)
  20. 16 Windows XP SP2 Spanish (NX)
  21. 17 Windows XP SP2 Finnish (NX)
  22. 18 Windows XP SP2 French (NX)
  23. 19 Windows XP SP2 Hebrew (NX)
  24. 20 Windows XP SP2 Hungarian (NX)
  25. 21 Windows XP SP2 Italian (NX)
  26. 22 Windows XP SP2 Japanese (NX)
  27. 23 Windows XP SP2 Korean (NX)
  28. 24 Windows XP SP2 Dutch (NX)
  29. 25 Windows XP SP2 Norwegian (NX)
  30. 26 Windows XP SP2 Polish (NX)
  31. 27 Windows XP SP2 Portuguese - Brazilian (NX)
  32. 28 Windows XP SP2 Portuguese (NX)
  33. 29 Windows XP SP2 Russian (NX)
  34. 30 Windows XP SP2 Swedish (NX)
  35. 31 Windows XP SP2 Turkish (NX)
  36. 32 Windows XP SP3 Arabic (NX)
  37. 33 Windows XP SP3 Chinese - Traditional / Taiwan (NX)
  38. 34 Windows XP SP3 Chinese - Simplified (NX)
  39. 35 Windows XP SP3 Chinese - Traditional (NX)
  40. 36 Windows XP SP3 Czech (NX)
  41. 37 Windows XP SP3 Danish (NX)
  42. 38 Windows XP SP3 German (NX)
  43. 39 Windows XP SP3 Greek (NX)
  44. 40 Windows XP SP3 Spanish (NX)
  45. 41 Windows XP SP3 Finnish (NX)
  46. 42 Windows XP SP3 French (NX)
  47. 43 Windows XP SP3 Hebrew (NX)
  48. 44 Windows XP SP3 Hungarian (NX)
  49. 45 Windows XP SP3 Italian (NX)
  50. 46 Windows XP SP3 Japanese (NX)
  51. 47 Windows XP SP3 Korean (NX)
  52. 48 Windows XP SP3 Dutch (NX)
  53. 49 Windows XP SP3 Norwegian (NX)
  54. 50 Windows XP SP3 Polish (NX)
  55. 51 Windows XP SP3 Portuguese - Brazilian (NX)
  56. 52 Windows XP SP3 Portuguese (NX)
  57. 53 Windows XP SP3 Russian (NX)
  58. 54 Windows XP SP3 Swedish (NX)
  59. 55 Windows XP SP3 Turkish (NX)
  60. 56 Windows 2003 SP1 English (NO NX)
  61. 57 Windows 2003 SP1 English (NX)
  62. 58 Windows 2003 SP1 Japanese (NO NX)
  63. 59 Windows 2003 SP1 Spanish (NO NX)
  64. 60 Windows 2003 SP1 Spanish (NX)
  65. 61 Windows 2003 SP1 French (NO NX)
  66. 62 Windows 2003 SP1 French (NX)
  67. 63 Windows 2003 SP2 English (NO NX)
  68. 64 Windows 2003 SP2 English (NX)
  69. 65 Windows 2003 SP2 German (NO NX)
  70. 66 Windows 2003 SP2 German (NX)
  71. 67 Windows 2003 SP2 Portuguese - Brazilian (NX)
  72. 68 Windows 2003 SP2 Spanish (NO NX)
  73. 69 Windows 2003 SP2 Spanish (NX)
  74. 70 Windows 2003 SP2 Japanese (NO NX)
  75. 71 Windows 2003 SP2 French (NO NX)
  76. 72 Windows 2003 SP2 French (NX)
  77. 34 Windows XP SP3 Chinese - Simplified (NX)
  78. 靶机的ip地址

1512006-20190711114211508-1274038657.png

三、开始攻击

1512006-20190711114309114-1530052043.png

设置攻击目标和目标平台

1512006-20190711114420952-1425742625.png

如果这里让其自动选择目标平台(不设置target为34)的话,程序会把简体中文的xp错误识别成繁体中文版的xp 导致攻击失败

1512006-20190711121026543-706625366.png

设置一个反弹型payload

1512006-20190711115023206-1510133443.png

一切准备就绪 可以开始利用漏洞了

1512006-20190711115235454-1177427481.png

转载于:https://www.cnblogs.com/BD1A489/p/11169116.html

发表评论

表情:
评论列表 (有 0 条评论,191人围观)

还没有评论,来说两句吧...

相关阅读

    相关 漏洞:重定向攻击

    什么是重定向攻击? 应用程序允许未验证的用户输入控制重定向中的 URL ,攻击通过构建 URL ,使用户重定向到任意 URL ,利用这个漏洞可以诱使用户访问某个页面,挂马

    相关 sql漏洞攻击

    SQL注入攻击的总体思路: 发现SQL注入位置;判断服务器类型和后台数据库类型;确定可执行情况 对于有些攻击者而言,一般会采取sql注入法。下面我也谈一下自己关于sql注