.

Some Basic Advice.

<<

jjwinter

User avatar

Jr. Member
Jr. Member

Posts: 80

Joined: Mon Mar 05, 2012 10:33 pm

Post Mon Jul 16, 2012 10:16 am

Some Basic Advice.

spending a bit of time in my home lab today. Have a VM of BT5 R2 loaded up, target machine is XP Pro SP3, firewall disabled. Nothing else installed. Fully patched.

If there are no vulns to exploit, would the only way to get a shell be to go after the browser and get the user to click a link?

Working on learning the basic strategies and tools.
<<

Triban

User avatar

Hero Member
Hero Member

Posts: 620

Joined: Fri Feb 19, 2010 4:17 pm

Post Mon Jul 16, 2012 11:14 am

Re: Some Basic Advice.

Well vulnerabilities may still exist, but they may not be with the OS.  There may be a 3rd party app running on the device that has vulns such as Adobe Reader or java.  you won't get that information from a frontal scan of the device.  These may be assumptions and yes your only way to tell is if you send them a crafted phishing email with an infected attachment or link.  Again you will still need to exploit something.  And even though your initial scan comes up empty, vulns still may exist but other controls are in place to prevent the information from being known.

Ways to get the information on what software they might be running could involve some social engineering attempts (unless that is listed as out-of-scope on the engagement docs).
Certs: GCWN
(@)Dewser
<<

jjwinter

User avatar

Jr. Member
Jr. Member

Posts: 80

Joined: Mon Mar 05, 2012 10:33 pm

Post Mon Jul 16, 2012 11:25 am

Re: Some Basic Advice.

So social engineering aside, the attack method for my test XP box is basically throw best guesses at it, like recent java /IE/adobe exploits at it and see what sticks? So for a better testing experience, I should load up old adobe and other apps and toss exploits at it.

On the target machine, I am browsing to the IP and port my BT5 box is serving malicious code on. Pretending to be a user who says OK to everything.

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software