Quantcast
Channel: Pax Pentest » Virtual Hacking Lab
Browsing index pages (34 articles)
↧

Ncat Reverse Shell (Shell Shovelling)

This will probably be my last Ncat post for now as I really must get on with other things. If you want a comprehensive Ncat tutorial then hop over to IronGeek. Ncat really is a superb tool. Previous...

View Article


Image may be NSFW.
Clik here to view.

Creating a persistent Ncap backdoor in Windows XP startup using Metasploit

I couldn’t figure out how to do this in Armitage and so had to resort to the good ol’ Terminal. I exploited the XP system as per this post and obtained an Meterpreter shell. First to upload the...

View Article


Image may be NSFW.
Clik here to view.

Seting up a simple backdoor shell using Ncat via Metasploit Armitage

First I exploited my Windows system with Metasploit Armitage obtaining a Meterpreter shell as per this post. Then I needed to upload the ncat.exe file (which I download from here) to the target...

View Article

Image may be NSFW.
Clik here to view.

Metasploit: My First Successful Armitage Exploit

I just completed my first successful exploit in the marvellous Metasploit GUI Armitage. Details of the target machine on my Virtual Hacking Lab: Windows XP Pro Service Pack 2 (unpatched). Firewall and...

View Article

Image may be NSFW.
Clik here to view.

Detecting Metasploit Armitage attacks in Security Onion Via a Dualcomm...

Back from holiday and managed to get my hands on an excellent cheap Dell laptop and a Dualcomm Network tap. I loaded the full Security Onion suite (Xubuntu 12.04 64-bit) on the Dell laptop and rigged...

View Article


Image may be NSFW.
Clik here to view.

Detecting Nmap ARP Scan (-PR) in Wireshark

This is the first in a series of posts looking at detecting Nmap scans in Wireshark. I’m being guided by Chapter 31 of Wireshark Network Analysis entitled: “Detect Scanning and Discovery processes“....

View Article

Learning Nmap Security Network Port Scanner: Remote Operating System...

This is the eighteenth post detailing my notes on Nmap Network Scanning. Although the inner working of OS detection are complex, it’s very easy to use.and the results very comprehensive. Here is scan...

View Article

Metasploit: My first use of Auxiliary Modules

Chapter nine of Metasploit: The Penetration Tester’s Guide moves into auxiliary modules. Here’s a snippet from the book: In addition to providing valuable tools such as port scanners and service...

View Article


Learning Nmap Security Network Port Scanner: Service and Application Version...

This is the sixteenth post detailing my notes on Nmap Network Scanning. Following on from the last Nmap post on service and application version detection, Nmap considers rarity and probes of high...

View Article


Metasploit Meterpreter: MS11-006 Client-Side Malicious Document Exploit –...

I’m following instruction given in Metasploit: The Penetration Tester’s Guide - Chapter 8 (Exploitation Using Client-Side Attacks). Details of the target machine on my Virtual Hacking Lab: Windows XP...

View Article

Image may be NSFW.
Clik here to view.

Metasploit Meterpreter: Internet Explorer “Aurora” Memory Corruption...

I’m following instruction given in Metasploit: The Penetration Tester’s Guide - Chapter 8 (Exploitation Using Client-Side Attacks). Details of the target machine on my Virtual Hacking Lab: Windows XP...

View Article

Metasploit: Experimenting with Immunity Debugger, NOP’s, Opcode, Assembly...

I’m following instruction given in Metasploit: The Penetration Tester’s Guide - Chapter 8 (Exploitation Using Client-Side Attacks). It’s worth watching this excellent video which demonstrates the...

View Article

Image may be NSFW.
Clik here to view.

Metasploit Meterpreter Railgun: Post Exploit Windows API Manipulation

Metasploit: The Penetration Tester’s Guide has this to say about Railgun: You can interface with the Windows native API directly through a Metasploit add-on called Railgun. [....] Railgun gives you the...

View Article


Metasploit: Listing Meterpreter Post Exploitation Modules

This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....

View Article

Learning Nmap Security Network Port Scanner: TCP FIN, NULL and Xmas Tree Scans

This is the ninth post detailing my notes on Nmap Network Scanning. The TCP FIN, NULL and Xmas Tree Scans exploit a loophole in TCP RFC: The TCP RFC says that if a closed port receives a packet that...

View Article


Metasploit Meterpreter: Killing Antivirus Software on Exploited System – Killav

This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....

View Article

Metasploit Meterpreter: Migrate a process and obtain system password hashes

This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....

View Article


Metasploit Meterpreter: Creating a persistent backdoor connection

This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....

View Article

Image may be NSFW.
Clik here to view.

Metasploit Meterpreter: Sniffing traffic on exploited system – Packetrecorder

This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....

View Article

Image may be NSFW.
Clik here to view.

Metasploit Meterpreter: Run VNC

This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....

View Article
Browsing index pages (34 articles)


Latest Images