Hacking Lab 0x00 NMap and Hydra Part 1
Hacking Lab 0x00 - NMap and Hydra
© Paul W. Poteete, 2016
Overview:
This lab will present the student with basic techniques that may be used to scan, gain access, and maneuver within a system. The labs introduce command syntax as it would be used in the actual attack. Additional labs often discuss the commands in greater detail. This method presents the information in a “What” then “Why” model, allowing the students to experiment with the tools before studying the tools in hope that this will generate greater understanding when the tools are studied in the future.
Resources:
Victim: Windows 2003 Server (only requires 128MB of RAM)
Attacker: Linux Box (Debian-based)
Victim Tools:
Built-In Services
Attacker Tools:
nmap
hydra
telnet client
Part I - Setup the Victim
Note: The following commands are to be executed from the Windows 2003 CMD CLI:
1) Setup General Access Vulnerabilities:
REM Enable Guest Account
net user /active:yes guest
REM Enable Remote Desktop
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
REM Enable Telnet
sc config TlntSvr start= auto
tlntadmn config maxconn= 9999
tlntadmn config maxfail= 100
sc start TlntSvr
tlntadmn config
2) Create the Users for Enumeration and Access:
net user /add /active:yes fatima amitaf /fullname:"Fatima Abdullah" /comment:"Marketing Purchasing Agent - Abu Dhabi Branch"
net localgroup /add TelnetClients fatima
3) Create the File Shares for Enumeration and Access:
mkdir c:\Shared
icacls "c:\Shared" /grant Everyone:(OI)(CI)F /T
net share Shared=C:\Shared /grant:everyone,FULL
mkdir C:\Marketing
icacls "c:\Martketing" /grant fatima:(OI)(CI)F /T
net share Marketing=c:\Marketing /remark:"Marketing Department Files" /grant:fatima,FULL
4) Create a file with sensitive information and place it in the Marketing Directory:
copy con "Credit Cards.txt"
Discover
Fatima Abdullah
6011867894563770, 03/16, 765
Mastercard
Fatima Abdullah
5274019139434540, 08/21, 346
Visa
Fatima Abdullah
4261655623330294, 09/19, 462
^Z (Press CTRL+Z)
5) Login as Fatima to create an active session for the scan in Part II
telnet -l fatima 192.168.1.111
or
login fatima at the console of the server
VICTIM SETUP COMPLETE
-----------------------
Thank you for dropping by!
Please join me:
/ paulwpoteete
/ paulwpoteete
/ paulwpoteete
CC by Paul W. Poteete