iCrOSS 2013_Pentest

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

PENETRATIONTESTINGAND
METASPLOITBASIC
Presented by

Syarif

!
Indonesia Creative Open Source Software ( ICrOSS ) 2013
...

Agenda
• Why & What’s Penetration Testing ( Pentest )

• << back|track basic overview

• Information Gathering & Port Sc...

Whoami
• Just me my self : http://ﬂ3x.us ; @ﬂ3xu5

• InfoSec Enthusiast & Trainer

• Lecture & Assistant Manager

• Cyb...

Why Pentest ?
• Millions of dollars have been invested in
security programs to protect critical
infrastructure to prevent ...

What’s Penetration Testing
• A method to evaluate the security of computer system / network

• Practice ( attacking ) an ...

Ethics
• Think before act

• Don’t be stupid

• Don’t be malicious

Pentest Phases
Vulnerability Analysis
Information Gathering
Exploitation
Post Exploitation
Reporting

<< back|track overview
• .
The Most Advanced Linux Security Distribution
Open Source & Always be
Developed for Security Pr...

<< back|track overview
• Watch theVideo ! :)

<< back|track overview

<< back|track overview

What’s
• Not just a tool, but an entire framework *1)

• an Open source platform for writing
security tools and exploits ...

Metasploit interfaces

• MSFconsole

• MSFcli

• msfweb, msfgui ( discontinued )

• Metasploit Pro, Metasploit Expres...

MSFconsole

MSFcli

Metasploit Terminology

• Exploit : code that allow a pentester take some advantages
of a ﬂaw within system,application,...

How does exploitation works
attacker
exploit + payload
vulnerable server
1
exploit run , then payload run
2
3 Upload / Dow...

Traditional PentestVs Metasploit
Public Exploit Gathering
Change offsets
Replace ShellCode
Load Metasploit
Choose the targ...

Meterpreter
• as a payload after vulnerability is exploited *1)

• Improve the post exploitation

Meterpreter
Exploiting a vulnerability
Select a meterpreter as a payload
meterpreter shell

Meterpreter command

Meterpreter command

Meterpreter command

Meterpreter command

Meterpreter command

Pentest Scenario
attacker vulnerable OS onVMware
* : Ubuntu 8.04 metasploitable
*

Pentest Skenario
• Set network adapter : NAT

• Firewall & Windows update : OFF

• Fresh OS installed

!
• startx

OS in the Lab
• BackTrack 5 R 3

• IP address : 172.16.150.169

• Windows Xp SP 2

• IP address : 172.16.150.165

• Wi...

Windows XP Exploitation
• msf > search windows/smb

• msf > info exploit/windows/smb/ms08_067_netapi

• msf > use exploi...

Windows XP Post Exploitation
• session -i 1

• meterpreter > getsystem -h

• getuid

• hashdump

Windows 2003 Server Exploitation
• msf > search windows/smb

• msf > info exploit/windows/smb/ms08_067_netapi

• msf > u...

Windows 7 Exploitation
• msf > use exploit/windows/browser/ms11_003_ie_css_import

• msf exploit(ms11_003_ie_css_import) ...

Windows 7 Exploitation
• msf exploit(ms11_003_ie_css_import) > sessions -l

• msf exploit(ms11_003_ie_css_import) > sessi...

Ubuntu 8.04 Metasploitable Exploitation
• search distcc

• use exploit/unix/misc/distcc_exec

• show payloads

• set PA...

Any Question ?
Contact me
• Website : http://ﬂ3x.us

• Twitter : @ﬂ3xu5

Greet & Thanks To
• BackTrack Linux

• Metasploit Team ( HD Moore & rapid7 )

• Offensive Security / Metasploit Unleashe...

References
!
!
• 1. Metasploit The Penetration Tester’s Guide : David
Kennedy , Jim O’Gorman, Devon Kearns, Mati Aharoni
...

Challenge in 45 minutes :)
• ConnectYour Windows OS to TP LINK Access
Point over dhcp

• BackTrack 5R3VMWare setting :
...

Challenge in 45 minutes :)

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 39 Ad

1 of 39 Ad