Easily Breaking Into Metasploitable 6 Times !! | Exploits and Chill | HOXFRAMEWORK
Hox Framework
Visit my website for text versions of videos, or in this case used exploits and other cool stuff, or you can just look around:
!! hoxframework.com.hr !!
VIDEO TIMESTAMPS :
1:17 - scanning ftp
2:12 - exploiting ftp
5:20 - looking into http (twiki) , showing xss
7:45 - exploiting twiki
10:35 - shell_to_meterpreter
14:30 - scanning Microsoft-DS
16:30 - stumbled upon distcc, explaining it and scanning it
17:15 - exploiting Microsoft-DS18:40 - exploiting DistCC
20:10 - scanning RMIRegistry
22:40 - exploiting Java-RMI-Registry
24:35 - forgot to mention one thing about TWIKI ; Useful tip
25:40 - scanning IRC
26:47 - exploiting UnrealIRCd
27:20 - showing etc shadow!
Exploited things ! : FTP HTTP (Twiki) Microsoft DS Distcc
RMI Registry
IRCDExploits
got us : 4x root 2x non root
Thank you so much for watching and have a nice day :) ... https://www.youtube.com/watch?v=Qw0ZlFASJzo
104103531 Bytes