October 2018
Intermediate to advanced
404 pages
8h 50m
English
In the previous sections, we attacked a 64-bit machine using the standard EternalBlue exploit. Now let's compromise a 32-bit system using the psexec module. We are using this module since we gathered credentials from the last exploit. This time we are going after a workstation on the network. Workstations are normally used by a lot of different people so there should be a lot of stored credentials on this machine. The more credentials we have, the more access we have. To use this module, type the following:
use exploit/windows/smb/psexec show options # To see the module's options.
We will need to load the same options as before but we will be attacking 172.16.42.173 \\WIN7-01:
set RHOST 172.16.42.173 # Set the ...