So we'll need to choose a service and how do we do that, we list him as the only HTP module's.
You know, I always do forget to sort them, but that's easily remedied.
And we can look for the service on four eight four eight four, so open up your browser.
And Type 10, 10 to 10, choline eight four, eight four, and that's what it looks like.
So this is what's called a genuine application.
It's pretty much a leading opensource automation server that provides building, deploying and automating
any project so you can look for anything vulnerable on the Web site and that can give us a good start
or you can go back to the console and try to find an exploit.
So let's just quickly check the links.
I nothing here.
Nothing here.
And nothing here.
So here are the menus.
You can go ahead and examine them.
But I want to call your attention to two menus here, system information and script cons. First, let's
check into the system information menu.
Of course, it's going to be great information.
If you don't know about Matus voidable three, this is a perfect place to start so that you can enumerate
the target system.
All right, so now let's have a look.
A deep dive, as it were, into the script console.
And when you read all of this information provided.
I hope that you picked up that you can execute some groovy scripts from console.
Now, at this point, you might not know about groovy, can you execute system commands over groovy
so.
I did find out, let's search.
On a new tab type, how to execute system commands from and script console.
I just click on the first one.
And here's an answer that gets a green check.
Let's check the answer.
I think there's another worry about that answer.
So I'm going to copy this, and if you want to control it, we can execute it from the script console.
So it's paste it and run it.
I don't think there's going to be a problem with execution.
So let's change the commands and code.
So only, alas.
Executed.
So let's change it to IP config.
And yeah, this is executed as well.
Who am I?
OK.
Now, I think that we found what we're looking for.
So this obviously is going to take a lot of time and let's say I don't even know groovy that well,
so you do need to find a reasonable exploit that can do all of this stuff for you.
Right.
So in a new tab.
Let's have a search to see if there is an exploit for script, console, and naturally, Matus Boyd
has an exploit module for this perfect.
So now you can use this module.
So let's go back to MSF console and choose Jenkins' script console as our export.
Show options.
Set our host to ten, ten to 10, set our report to eight, four, eight four, set payload to windows.
Interpretor.
Reverse TCP.
Said, I'll host for payload to colleagues IP.
Said homeport two four four four three, now show the options again.
And then exploit.
Oh, something went wrong.
OK, so how are you going to fix it?
Oh, yeah, you probably already saw the problem is target you are I variable?
The you are out of the script console page is just like that, so.
You should change its value to script.
I'm going to directly exploit without further control.
And I think that's OK, and that's how you get the interpreter session.
Don't forget, though, where am I and who am I?
And then we can spend that session to the background and let's have a look at the list of sessions.
So you see, you have many sessions running on metastable three.
All right, then let's go to the next service to exploit.