So let me clear my screen.
List services again.
And you exploited SMB service on Matters Portable three.
So now I need the next candidate to exploit.
So let's go a little bit further, shall we, with this is RMI Registry.
Now you can follow different strategies, for example, you can search for a no service name and description.
You can also look for vulnerabilities on the Internet or as a necessary result.
It's entirely up to you.
This time around, I'm going to search RMI as a phrase in a Java platform.
So here are the modules related to Java RMI.
Now, I'm not going to use these blindly, so I need to find a suitable one.
And you can read all the descriptions if you want, and you can also do an Internet search.
Now, the other ones aren't really related, so I'm going to choose Java J Amex server from the exploit
module.
And this time I will directly set our host.
And I'm going to set the R port also.
And check.
So, yes, indeed, the target seems to be vulnerable.
So, yeah, you know, I'm reading your mind here, you've got a new command, the check command.
If the module allows you to do this test, go ahead and use it.
OK, so now let's show some options.
So what's missing here, the payload, right, so before setting the payload, let's have a look at
the suitable ones.
Reverse Java.
Interpreter payload will.
Fit perfectly for this XPoint.
Set payload to Java, Metropia reverse TCP.
And then set the host to your colleagues IP address.
And set down port to any available port, so I'll set mine to four four four seven.
So the options again.
Nothing to change here.
So let's run the XPoint.
All right, so this session open.
And you are in the machine with a restricted service user.