In this lecture we will start our hands on practicing.
We exploit.
So we can lunch meat exploit by clicking here or from the terminal.
So let us first conduct and in map scan for the meat exploitable the M with the third option.
So here in the results we see that we have he was degree secure all database on the move explode.
Well we m with the ECB board of five thousand four hundred and thirty two.
And with this virgin and he can get the same results using the meat exploit frameworks or so I will
Will to know the meat exploit framework.
So MSF console we see that the framework is starting now
so let us search for the port scan modules
and here we see that we have a module for DCP board scan.
So let us use that one.
So use auxiliary scanner
port scan
DTV
and we can get info about that one using the info comment or use d show options comment
and you can also use the set command to get the options that you have to set.
So here we see that the ports are by default from one to 10000 and the unit hosts parameters are not
set.
So I will see those using the shared command so it ports it is configured that we from five thousand
to six thousands to include the port of the ports degree and I would say the
our hosts to be the IP address of 1 to 3 with VDI Raiders Of The Lost Boys will VM it does check for
our configuration so we see that keyboard on the IP address are configured now.
So now we can use the run command or the exploit comment.
So now we see that the abort of the first degree is open.
We can also get the legend of the particular that I using the
first degree version module
and we have to set to
our hosts to EDI I read this one to three and then we can use the exploit command foreign command.
So here we see that the version was found.
Let us now try to find if we can log in into the database using the log in module and then should the
host and then usually around command
we see that we have one successful log in using these credentials.
Let us now try to access the database using the
auxiliary admin
post degree and then
school module and set the you won't host and the school statement to be for example.
Select
database name from the B database
and then run.
Here we see that we have error because of the our host.
So why would you sit com and you see that we have to set the our host.
But and we talk about not the our hosts so
I may sit that one and then run again.
And here we see that we have three databases the post degrees the template zero on template 1.
And also we can use the army days which is a good way for the meta broad framework.
So I would click here.
So now I will click on Connect
and then yes
so now we have to find the IP address of the computer that will be attacked which is the one the three
IP address.
And then I will track that one here and then I will search in the gallery for the scanners and then
postgres and I will try to use the
Logan module.
Here we see that the parameters are configured.
So I will click now on like
so we see that we have one successful log in you the same logging that we have discovered using the
command line of the sprite.
So in this lecture we have explored how to work with the meta spotlight framework using both the command
line and using the glory of the army take.