OK, everybody, I admitted I made a mistake in a previous scan and I disable the windows plug ins,
although two of my three targets are Windows, it's just a really big mistake that affects results.
So that clearly shows that we should be very careful while configuring the tools such as a vulnerability
scanner.
Now, I scanned the target machines once again and I didn't disable the windows plug ins this time.
So these are the result, two zero seven is Windows XP and two to three is Windows eight.
I click on the Windows XP to see the vulnerabilities.
As you see, there are a lot of critical vulnerabilities.
I'll click on one of them just to see its details.
So here is the name in the description about the vulnerability and scrolling down.
Yes, it says the vulnerability is exploitable with Métis Point.
Let's go back to vulnerabilities.
I want to show you another vulnerability for XP system.
This is a vulnerability M0, a Dash 067, which has a very stable exploit.
Rolling down a bit and Nessus says we can exploit this vulnerability using motor sport, so let's do
it.
I think it's an invitation.
Open a terminal screen and start MSF console.
Search for the vulnerability, Ms zero eight, dash zero seven.
Here is the exploit let's use.
Look for the available payloads using show payloads.
I want to use Shell payload with buying TCP Stager for this time.
Joe options.
Set the remote host, that was.
Well, let me look at the Nessa's page again.
Yes, two zero 07.
And the board is for four or five, the default value is correct, so the options again and we're ready
to run the XPoint.
Here is the shell of the target system, exploitation is successful once again.