Learn Ethical Hacking from Scratch

Metasploit remote code execution

Now we're going to have a more advanced look at Metasploit, and we'll see how to use it to exploit a vulnerability that exists in a certain service. It's a code execution vulnerability that will give us full access to the target computer. Coming back to our results in Nmap, we're going to do the same thing that we've been doing for a while: we copy the service name and see whether it has any vulnerabilities. For now, we're having a look at port 139, which has a Samba server version 3.X. We're going to go to Google, just like we did in the previous section, and we're going to look for Samba 3.X exploit. You will see there's a number of results. The one that we're interested in is from Rapid7, because, as mentioned ...