‫OK, everybody, I admitted I made a mistake in a previous scan and I disable the Windows plug ins,
‫although two of my three targets are windows.
‫It's just a really big mistake that affects the results, so that clearly shows that we should be very
‫careful while configuring the tools such as a vulnerability scanner.
‫Now I scanned the target machines once again and I didn't disable the Windows Plugins this time.
‫So these are the result, two 07 is Windows XP and 2.3 three is Windows eight.
‫I click on the Windows XP to see the vulnerabilities.
‫As you see, there are a lot of critical vulnerabilities.
‫I'll click on one of them just to see its details.
‫So here is the name in the description about the vulnerability and scrolling down.
‫Yes.
‫It says a vulnerability is exploitable with Metasploit.
‫So let's go back to vulnerabilities.
‫I want to show you another vulnerability for XP system.
‫This is the vulnerability RMS zero eight zero six seven, which has a very stable exploit.
‫Rolling down a bit and missus says we can exploit this vulnerability using Metasploit, so let's do
‫it.
‫I think it's an invitation to open a terminal screen and start massive console.
‫Search for the vulnerability, Ms.
‫Zero eight, Dash zero, six seven.
‫Here is the exploit.
‫Let's use it.
‫Look for the available payloads using show payloads.
‫I want to use shell payload with mine TCP Stager for this time.
‫Joe Options.
‫Said the remote host.
‫That was.
‫Well, let me look at the Nessus page again.
‫Yes, two of 07.
‫And the port is for four or five, the default value is correct.
‫Show the options again and we're ready to run the exploit.
‫Here is the shell of the target system, exploitation is successful once again.