Hack a IP with Armitage!
This Does NOT show how to install armitage, go to http://fastandeasyhacking.com to learn how to install.
Prerequisites:
Armitage and Metasploit installed.
A MySql user, database, and password.
Armitage allready set up.
Begin!
First you will need to start Armitage.
In the terminal type:
>>>sudo armitage
![[Image: armitage1.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uy-0CVe2xT3bd5FLS1rePmjjmAkgCg0e1WEJ7484fgy-MlmX7V_p-so2JzRtveq32Ak9c0RHYJ_JHLc3JflqA2b9SgaPTYQ2XV0lCwZrxkT12E79q36hBQ=s0-d)
Now, a login box will appear.
Put your mysql information in it:
host: 127.0.0.1 (your localhost)
Port: 55553 (metasploit's default port)
User: your mysql username for the database you will use for armitage
Pass: the password for the mysql user
Hit connect
![[Image: armitage2.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vANBlE5F48aEl1WnZ0SHfdyEskAjvz1H09kcTIXJMhMdbVGQryit6NZYORpOXNszrgrUHJXZxDCyTNzuRIqvG01HOggp8bJarJlF9nM8ZZ2rfde0UJdddz=s0-d)
A new box will pop up saying something such as:
"A metasploit RPC server is not running"
Click on Yes.
A loading box will appear which says "Java Connection refused"
![[Image: armitage3.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uIY_4Z9Z0Ytc2uB66T9CjHadFmT7T5gvwUpOOTj8ueTfZqzN0iQb2_rp4QW77hbsWznQLLT2ryZYiyWyCHVNyNqT_1-zwyZK4AUJZ10tvl9ufIEg=s0-d)
That is normal, armitage is gathering all the ruby plugins into armitage's GUI.
Armitage will look somewhat like this:
Now, I have a windows XP SP2 running on a Virtual Machine with the ip of 192.168.0.14
To scan your network for vulnerable hosts, do this:
On the tool bar> Hosts>Nmap Scan> Quick OS Detect (in this case you don't need to do any long scans as we will be targetting a Win XP)
now type the ROUTER'S IP and the whole network such as: 192.168.1.1/24 ( /24 is the ip range on the network)
After finding all the PC's on the network, you should see one appear that you like
![[Image: armitage5.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uc0bIE2OO5CqZ-SIHIRRKUb0tADVORNIZp0anQhFTi87EQArXsr5c3AST4ctIicFjNmCZ9N1bfjrJPke0COkNSznE8oJh2PQwEjaQ-c-rkiDFxKzo=s0-d)
Now, click on that target, and select Toolbar> Attacks> Find attacks.
It will look for all attacks for that OS.
Exploit time!
Right click on the target. A new menu will appear called: Attack.
You can try any of those attacks, or use the SMB attack as we will.
Click on Attack>SMB>ms08_067_netapi
This will appear:
![[Image: armitage6.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sdjvjGoupR4OXgNXIeDMqGGCb7ZgFNQ2oaEzCphr_Fo7eg9P9BwErfvyYIRSqlXILy0xvdgkMLKmAcX3CWHnD5AkZJcAGbpWKADaBr3RthU8g47ZcTzos=s0-d)
Check the Reverse Connection, and unless you know what you are doing, you don't need to change any other items.
Click Launch.
Your Console will run until it shows this:
Congratulations, you have exploited a PC Just with a IP address! :)
I will be creating Part 2 of this tutorial which will be Using the Meterpreter!
This tutorial was created by TechLab AKA Inventor!
This Does NOT show how to install armitage, go to http://fastandeasyhacking.com to learn how to install.
Prerequisites:
Armitage and Metasploit installed.
A MySql user, database, and password.
Armitage allready set up.
Begin!
First you will need to start Armitage.
In the terminal type:
>>>sudo armitage
Now, a login box will appear.
Put your mysql information in it:
host: 127.0.0.1 (your localhost)
Port: 55553 (metasploit's default port)
User: your mysql username for the database you will use for armitage
Pass: the password for the mysql user
Hit connect
A new box will pop up saying something such as:
"A metasploit RPC server is not running"
Click on Yes.
A loading box will appear which says "Java Connection refused"
That is normal, armitage is gathering all the ruby plugins into armitage's GUI.
Armitage will look somewhat like this:
Image has been scaled down 37% (870x453). Click this bar to view original image (1365x710). Click image to open in new window.
Now, I have a windows XP SP2 running on a Virtual Machine with the ip of 192.168.0.14
To scan your network for vulnerable hosts, do this:
On the tool bar> Hosts>Nmap Scan> Quick OS Detect (in this case you don't need to do any long scans as we will be targetting a Win XP)
now type the ROUTER'S IP and the whole network such as: 192.168.1.1/24 ( /24 is the ip range on the network)
After finding all the PC's on the network, you should see one appear that you like
Now, click on that target, and select Toolbar> Attacks> Find attacks.
It will look for all attacks for that OS.
Exploit time!
Right click on the target. A new menu will appear called: Attack.
You can try any of those attacks, or use the SMB attack as we will.
Click on Attack>SMB>ms08_067_netapi
This will appear:
Check the Reverse Connection, and unless you know what you are doing, you don't need to change any other items.
Click Launch.
Your Console will run until it shows this:
Image has been scaled down 37% (870x450). Click this bar to view original image (1365x705). Click image to open in new window.
Congratulations, you have exploited a PC Just with a IP address! :)
I will be creating Part 2 of this tutorial which will be Using the Meterpreter!
This tutorial was created by TechLab AKA Inventor!
0 Comments:
Post a Comment