Project 14 Attacking Internet Explorer and Migrating (10 pts.).pdf - Project 14 Attacking Internet Explorer and Migrating(10 pts What You Need A Kali

Project 14 Attacking Internet Explorer and Migrating (10 pts.).pdf

This preview shows page 1 - 2 out of 7 pages.

Project 14: Attacking Internet Explorer and Migrating (10 pts.) What You Need A Kali Linux machine to serve as an attacker A Windows 2008 Server machine without patches to serve as the target Task 1: Using the MS14-064 Attack (5 pts.) In a Web browser, go to: Read about this attack. It's amazing--it uses a vulnerability that's been in Internet Explorer since IE 3 on Windows 95. The Metasploit module only claims to work on Windows XP and 7, but since it uses PowerShell, and PowerShell is included in Windows Server 2008, it works there too. Testing Networking Start both your Kali and Windows 2008 server machines. On your Kali machine, execute the ifconfig command to find your IP address. On your Windows machine, ping the Kali machine. If you don't get replies, you need to troubleshoot your networking before proceeding. Freeing Port 80 We plan to start a malicious server on port 80, so we need to make sure there's nothing already listening on that port. On your Kali attacker, execute this command: netstat -pant If there's no process listening on port 80, you don't need to do anything. If port 80 is listening, you'll see what process is listening. In the image below, apache2 is listening on port 80. If you need to stop apache, do that with this command: service apache2 stop You could also use the kill command to kill the process by its Process ID number. Starting a Malicious Web Server On your Kali attacker, execute these commands: msfconsole use exploit/windows/browser/ms14_064_ole_code_execution show options As shown below, all the options have sensible defaults--none of them require adjustment. However, let's set the URIPATH and SRVPORT, just to make the typing easier, and to label the screen show with your name.
Image of page 1
Image of page 2

You've reached the end of your free preview.

Want to read all 7 pages?

  • Fall '15

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern

Ask Expert Tutors You can ask You can ask ( soon) You can ask (will expire )
Answers in as fast as 15 minutes