An exploit is a targeted attack on a specific moner Bill Bill exploit kit tools like Angler or unpack
can be used to easily exploit system vulnerabilities to try and compromise a host of exploits can be
classified as either local or remote remote exploit is when an exploit is performed remotely over the
network without already having access to a vulnerable system and a local exploit will require prior
local access to the vulnerable system.
To discover what vulnerabilities can be exploited on a system you can use exploit software like modestly
exploit is one of the most well known exploit testing programs and it is included with cal.
Let's jump back in the Kelly lab and I will demonstrate how to use a split right from the Kelly desktop
on the left hand side.
There are some application icons and the display framework application can be launch straight from there
or you can go up to the applications dropdown go down to exploit tools and then launch it from there.
Once amount of Sloyd done launching we could run all of our exploits right from the terminal by using
Madis boy terminal commands but what we're going to do is use another application called Armitt Taj
which is a GUI front and interface format.
So instead of the terminal commands you have a nice user friendly interface that makes it a lot easier
to run exploits now that white is loaded.
I'm going to minimize this go back to applications and exploit tools and then launch the army Tajh application
when this window pops up are going to want to hit connect
and then YES to start the RBC server.
And then this box will run for a few seconds and finally launch the application.
OK so here is the Armond Tajh application.
It actually shows you in the council the terminal version of the commands and output that will be launched
when we run the GUI commands in this rectangular area.
Here is where our hosts will be once we discover them to pull in host information for the hosts that
we want to scan for exploits.
You can click on hosts you could manually just add a host import hosts later on and map scan and map
as a network mapping tool that is used to discover networks and for security auditing it will Ron and
Chuck what ports are open on devices as well as operating system information.
So I'll just run a quick scan with OS detection so we get some operating system information
and then I'm going to put in the IP address of the server that I want to scan.
You can also put a whole network in but that will take a little bit longer.
OK.
And then you'll see the command that it actually is running in the background in the terminal for this
scan.
And this may take a little while to run through the scan.
Ok so my scan is complete.
OK.
And we can look through the terminal here to see what map discovered for this house.
If you hover over the host that shows we're operating system that found this actually isn't accurate
because it's a Windows 2000 Server.
It's showing it as XP.
I could run additional scans to try to get more accurate information for the operating system but this
is OK for this demonstration if you right click on the host you can love the click services to see what
services are running on the host.
Next I'll go to a tax and hit find the tax.
So this will populate some possible exploits that we could run on this host.
All right so the attack analysis has completed.
OK.
And now when I right click on my host there is an attack option with different categories of attacks
that I can try to exploit on my machine.
What's really cool is some of them have chucked exploits so it will actually do a quick check to see
if the host is vulnerable for any of these exploits.
I'll run this check for.
I asked exploits.
And then you can see down below in the terminal.
If it was vulnerable or not
some exploits may pop up and say that it does not support the check.
So here this is saying that this exploit would not be successful on the sun point based on the information
that it has.
OK so it chucked all these exploits against my host that fortunately or unfortunately for for this demonstration
the target is not exploitable for these exploits.
If it were it would show in green that yes this target is exploitable then you could run that exploit
against the machine to try to exploit it.
If you want to just run an exploit regardless of if it passes the check or not.
Right click on your machine go to attack and then just pick any of these exploits and you can actually
just click it and it will run the ex-boy.
So here's a description of the exploit that it's going to attempt to run on my machine at launch.
Definitely don't do this.
Playing around in a production environment because it could be quite intrusive on your machines.
So it looks like the exploit failed on the host in the lab.
Sorry if you were looking forward to seeing me hack into one of my machines.
I really just wanted to demonstrate my display so that you had an idea of how you could play around
with it and get to see for your own eyes how attackers could potentially try to compromise machines
because the more you understand what an attacker could potentially do the better you could protect your
network as a cyber security engineer.