Professional Penetration Testing, 2nd Edition

Chapter 8

Vulnerability Exploitation

Abstract

This chapter examines different methods of exploiting vulnerabilities, including both manual and automated attacks against target systems. In this chapter, we use exploit code found within Metasploit, and also from Exploit-db.com, to successfully exploit vulnerable systems.

Keywords

Metasploit

Vulnerability exploitation

Hacking

Exploit code

Pentest

Contents

Introduction

Automated Tools

Nmap Scripts

Default Login Scans

OpenVAS

JBroFuzz

Metasploit

FTP

Simple Mail Transfer Protocol

Server Message Block

Network File Shares

MySQL

PostgreSQL

VNC

Exploit Code

Internet Sites

Summary

Chapter Points

■ Automated Tools

■ Exploit Code

Introduction

In Chapter 7, we discussed how to identify potentially ...