Home page logo
/

basics logo Security Basics mailing list archives

Re: msf > use auxiliary/scanner/vnc/vnc_login
From: Eric Schultz <fire0088 () gmail com>
Date: Mon, 4 Nov 2013 09:31:10 -0500

ToddAndMargo,

I'd recommend checking out Kali Linux instead of using Scientific
Linux. Kali is designed for doing security work, and is installed with
needed tools already configured. I think this would aid you in the
future, as it's one less thing to troubleshoot.

Since you are learning the basics, I'd also recommend shutting off
antivirus programs while testing to prevent unexcpected and difficult
to pinpoint errors. Once you get a good understanding of how things
are supposed to work, turn the AV back on and see ways to bypass them.


-Eric

On Sat, Nov 2, 2013 at 2:12 AM, ToddAndMargo <ToddAndMargo () zoho com> wrote:
On 11/01/2013 11:04 PM, Ivan Carlos wrote:

Try doing it in a lab (using virtual machines) and using a vulnerable
VNC server.


Ivan Carlos
CISO, Consultant
+55 (11) 98112-0666
www.icarlos.net <http://www.icarlos.net>



I have been.  Both live and VMs.

By the way, none of the exploits work.  And they are there:
# find / -iname \*psexec\*
...
/opt/metasploit-framework/modules/auxiliary/admin/smb/psexec_ntdsgrab.rb
/opt/metasploit-framework/modules/auxiliary/admin/smb/psexec_command.rb
/opt/metasploit-framework/modules/auxiliary/scanner/smb/psexec_loggedin_users.rb
/opt/metasploit-framework/modules/exploits/windows/smb/psexec.rb
/opt/metasploit-framework/modules/exploits/windows/smb/psexec_psh.rb


-T


--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault