In this lecture, we are going to see what is Metasploit and how we can hack Windows ten with Metasploit.
Metasploit framework is a set of tools that allow information gathering, scanning, exploitation,
exploit development, cost exploitation and much more.
While the primary uses of Metasploit framework focuses on testing domain, it is also useful for vulnerability
research and exploit development.
Metasploit has three major components and must have.
Console is the main command line interface.
Then there are modules, the core components, which includes exploits, payloads and scanners sector.
Third are the tools.
These are the standalone tools that help vulnerability research, vulnerability assessment or testing.
For example, MSF venom.
Metasploit comes preinstalled with Kali.
No.
Let's see how we can hack Windows ten with Metasploit.
First of all, we need to scan the target and map, locate the target and check for open holes.
If the command is shown on the screen and map is the name of scanner we are using.
A flag is used to gather most important information about the target, including OS etc. SC flag runs
and map default scripts against the target.
We are going to cover and map in detail now.
Future lectures.
So once we have scanned, we will know exactly what type of system we are trying to hack and what are
open posts on it.
The second step is to start MSF consult.
No search for eternalblue exploit and use the command as shown to use the particular module.
Those that are also said the target and set lost as you can imagine it.
No execute the exploit and you will gain a better, better session.
My typewriter is essentially an attack platform that gets injected into the memory of a learning process.
That's why detection by different detector systems, as well as bypass the limitation of operating system
native command share.
It can be used to perform different actions on the machine, which includes taking screenshot, get
a live screen or the target webcam, record keystrokes, or get a share or sector.
No.
Let's see the actual demonstration.
So here we are on our target machine and we can check the IP address of the machine with IP config command.
Your tech walks.
An end map scan against the target.
The commander shown on the screen.
It will gather all information about the target.
So we can see that board four or five is open and it is a Windows ten system.
Open in the terminal.
And launch Metasploit, the MSF console command.
No.
Look for Eternalblue exploits.
If we are going to use M17 zero ten as exact module for Eternalblue.
Normally we need to set the payload, but in this case it has already defaulted.
Our payload to windows met.
Operator Reverse TCP.
They'll give the option command to check all other options that we need to provide.
You'll need to set the R host as a target IP.
Instead, I'll host as your colleague IP machine IP.
They'll give the command of exploit.
And you can see that we have gained access to the machines remotely.
He can learn different commands.
We can see the processes running on the target machine.
You can take a screenshot if you want.
If you get an error, it means you do not have the necessary privileges.
Let's migrate to some other process.
Here I am migrating to a slower process.
And now let's try to take screenshot again.
So move the screenshot to your home directory.
And open it.
And you can see that we have successfully taken the screenshot.
Similarly, we can perform some other actions against our target asset, which we are going to cover
in the next lectures.
I hope you like this lecture and see you in the next lecture.