‫So do you remember what I mentioned before, the first two steps of our scenario are to exploit a system
‫and to gather the password hashes.
‫Now we know that the Windows XP system in our network has Emma zero eight zero six seven vulnerability,
‫and it's exploitable.
‫So let's hack that system and gather the password hashes.
‫OK, so in Cali, let's open a terminal screen and run MSFT console first.
‫While the console is starting, I go to XP VM and look at the IP address again.
‫It's two 07, so back to Cali, MSF console is ready now, since we've already seen these before, I
‫just want to speed through this.
‫I recommend that you perform all these practices each time, so you will be more familiar with the exploitation
‫steps.
‫Search for the MW08 067 seven exploits, use the exploit with the use command, said the appropriate
‫payload and to make password gathering easy.
‫All said a mature operator payload.
‫And show the options, so the required options remote host is XP machine.
‫Local host as Carly.
‫And leave the other options with the default values and run the exploit.
‫OK, so now we have a maturity session on SBY.
‫And as we've seen before, we can use hash dump function to gather the password hashes, and here they
‫are.
‫What I'll do is I'll copy them and paste them into a text file to use later.
‫Now I open a new terminal and use the nano text editor to create a new text file to store my ashes.
‫I create hash export, text file in a desktop folder and paste the hashes into it.
‫Control and exit to exit.
‫Why to save changes and hit enter to save is the same file that we named in the beginning.
‫Now I have the hash file on my desktop.