Diventare Hacker

Well well. In the past lessons we have seen many things interesting, between which the IP, the DOORS, LIKE FINDING the HOLES ON the COMPUTERS THAT YOU WANT TO ATTACK and the ROUTING.
This time, we will speak about like taking advantage of the found holes, in order to enter inside of the coputer attacked.

You memory who you do not have to use the contained information in these articles in order to commit crimes and that the responsibility for all this that you will make with these information is yours and not ours.

Example: Imagined of having to enter in a palace that is in “via Rome N. 1 ″, knowing that on the back there is a door controlled from a boy who leaves to enter all indifferently.

If we wanted to then compare this example to the Hacking the data they are (on the left are indicated the data that we would use in order to enter in a palace and to right the data are indicated that extreme in order to enter in a computer):

- IP of the computer to attack:  “Via Rome N. 1 ″ – > 321.321.321.321
- Open DOOR where to enter: “door on the back” – - > 80/tcp
- HOLE allows that us to enter: “the access is controlled from a child who leaves indifferently to enter all” – > “Credential of DEFAULT”

Here, these are the 3 fundamental data that always serve when a computer must be attacked.
That is the IP, the DOOR from which it is wanted to be entered and the HOLE that we want to take advantage of in order to enter inside of the computer that we are attacking.
These three data are those fundamental ones. Us of they would be others but now they do not serve to us.

With these three simple data we can enter in any computer without having great acquaintances in computer science.

We return in order this article. That is “To take advantage of the found holes in order to enter in the computer that we are attacking”.
In the phase precedence we have since in order to attack a computer we must carry out the following things:

1. To characterize the IP of the computer that we want to attack (seen in “Lesson 2 – Objective of the Hacker “)
2. To characterize the holes will allow that us to enter (seen in “Lesson 5 – To find the holes on the Computers “)
3. TO TAKE ADVANTAGE OF THE FOUND HOLES PREVIOUSLY AND TO ENTER IN THE ATTACKED COMPUTER

The phase that we see in this seventh lesson third (is written in capital). Effectively it is the last phase of our “Plan of Attack”. Practically with the conclusion of this phase we would have effectively completed the Hacker attack and taken possession the full control of the attacked computer.

We see a hole as an example found to shakes of it of the second phase (Lesson 5 – “To characterize the holes will allow that us to enter “).
A hole example is the “most serious discovered vulnerability” on the Microsoft systems at the end of 2008, that is the “MS08-067” (this strange acronym represents the “name” of the hole/vulnerability), whose which extended name for is

“Microsoft Windows Serveur Service crafted RPC request handling unspecified remote tails execution”

The name is indeed complex, but what it counts it is that this hole, found on the computer that we want will allow to attack us to enter and to acquire the full control of it.

We see an image that it represents Nessus while finds the HOLE as soon as described:

Nessus Results

As you can see Nessus colors in red the title it of this vulnerability, since it is of SERIOUS type!
This means that this type of hole/vulnerability (according to as it is wanted to be called) can allow to a little expert forward to enter in a computer with LITTLE CLICK of the mouse and in little minuteren.

We see like!
In order to take advantage of the hole found from Nessus we will use an other called program “METASPLOIT “.
Obviously Metasploit is gratis like accessible Nessus and therefore to all!

Then unloaded the last version of Metasploit and installs it to you on your computer. If you have problems in this phase not hesitated to say it to us!

Once installed Metasploit under way “the interface WEB” and opening yours browser preferred typed the URL:

http://127.0.0.1:55555/

The following one shielded of welcome will appear you:

To this point cliccate on “Exploits” (up to right) and in the window of search that will appear you write:

ms08-068

The following one will appear you in this way shielded:

Now cliccate on the title it of the vulnerability and, at the bottom of the page, under the heading of “Select to target to continuous” you press on “Automatic”.
We will find ourselves now in the schemata “Select payload for target Automatic: ” where you will have to cliccare on:

generic/shell_bind_tcp

Of continuation an image of the link on which you must cliccare:

To this point it will appear following shielded (the calm ones, we have nearly ended):

In this shielded you will not have to make other that at the beginning to insert the listed data of this article, that is the IP of the computer to attack and the door from where we want to enter. Wanting we could also avoid to indicate the door, since us of it is already indicating of default (the 139), like you can observe from the image over.
Therefore in inserted field RHOST the IP of the computer that been attacking, than in our example is the 321.321.321.321
Obviously this IP is the same one on which you had launch previously Nessus and obtained the list of holes. You memory that in our example IP 321.321.321.321 corresponds to the address of the palace in which we want to enter.
To this point it does not remain that to press the push-button “Launch shown Exploit” in figure over and enjoying the result to us….
In next articles we will see what is possible to once make entrances in the computer that we are attacking.

If there is piaciuto this article we ask you to share it with your friends on Facebook so as to diffuse the acquaintance! Thanks! Used the push-button here under in order sharing with the friends the article.

For any question not hesitated to comment the article.

You memory who you do not have to use the contained information in these articles in order to commit crimes and that the responsibility for all this that you will make with these information is yours and not ours.