1. ETHICAL HACKING
Lab 3: System Hacking
QUACH VAN LAM
December 6, 2013

2. I. Password Cracking
Logon Windows Server 2003 and create 2 User: admin/Aa123, Admin/Aa1234
User command “net user” to check
On menu bar, Click choose “+”
1

3. The same, we will crack password of u3 (Bruce force)
ETHICAL HACKING| 06/12/2013
Check “Import Hash from local system”
After importing, we have the result:
Now, we will crack password of admin (Bruce force)
2

4. Log on Windows Server 2003, change username “administrator” to “duy” and create
user
with username is “administrator” and password “321bca”. How to identify
Administrator
when Username is changed.
3

5. And now, we will concentrate to crack account “duy”
ETHICAL HACKING| 06/12/2013
II. Escalating Privileges
User u1 belong to Users Group
Browse “Supper_XP.iso” to CD/DVD
Boot Virtual Machine (Windows Server 2003) from “Supper_XP”
Change “C:WINDOWSsystem32cmd.exe”  “C:WINDOWSsystem32secthc_.exe”
Change “C:WINDOWSsystem32sethc.exe”  “C:WINDOWSsystem32cmd.exe”
Reset Virtual Machine, at stop logon you press “Shift” 5 times and cmd.exe will be
execute.
Type “net localgroup administrators u1 /add”
4

6. Check u1 in Administrators Group
Finish
III. Scan Target to get vulnerability and exploit
Use “Nessus & Retina Network Security Scanner” to identify vulnerability
5

7. 6
ETHICAL HACKING| 06/12/2013

8. When Scanning is complete. You can see a lot of vulnerabilities. In this case, I
choose“Microsoft Windows Server Service Crafted RPC” to exploit
Now, we use Metasploit tool to exploit:
Step 1: Search info of this vulnerability
Step 2: the result
Step 3: Set target IP to exploit
Step 4: Exploit
Step 5:
- Remote to Victim to create User
7

9. ETHICAL HACKING| 06/12/2013
User “exploit” command to create session to victim
When logon “meterpreter” mode, we will create channel to
Interact with victim through the channel has established:
Now, we will create User:
IV. Hide File (Student research)
Step 1: In the Command Prompt we use cd command to access disk in target host.
8

10. Step 2: User Dir command to view list of files and folders in C.
Step 3: Use CD command to access to Data Folder. And DIR command to view list of files
and folder.
Step 4: Use COPY /b command to bind file data.txt and contracts.txt to images.jpg
Step 5: Result.
9

11. 10
ETHICAL HACKING| 06/12/2013