Re: msf > use auxiliary/scanner/vnc/vnc_login

[Eric Schultz <fire0088 () gmail com>]

ToddAndMargo,

I'd recommend checking out Kali Linux instead of using Scientific
Linux. Kali is designed for doing security work, and is installed with
needed tools already configured. I think this would aid you in the
future, as it's one less thing to troubleshoot.

Since you are learning the basics, I'd also recommend shutting off
antivirus programs while testing to prevent unexcpected and difficult
to pinpoint errors. Once you get a good understanding of how things
are supposed to work, turn the AV back on and see ways to bypass them.


-Eric

On Sat, Nov 2, 2013 at 2:12 AM, ToddAndMargo <ToddAndMargo () zoho com> wrote:
> On 11/01/2013 11:04 PM, Ivan Carlos wrote:
> > Try doing it in a lab (using virtual machines) and using a vulnerable
> > VNC server.
> >
> >
> > Ivan Carlos
> > CISO, Consultant
> > +55 (11) 98112-0666
> > www.icarlos.net <http://www.icarlos.net>
>
>
>
> I have been.  Both live and VMs.
>
> By the way, none of the exploits work.  And they are there:
> # find / -iname \*psexec\*
> ...
> /opt/metasploit-framework/modules/auxiliary/admin/smb/psexec_ntdsgrab.rb
> /opt/metasploit-framework/modules/auxiliary/admin/smb/psexec_command.rb
> /opt/metasploit-framework/modules/auxiliary/scanner/smb/psexec_loggedin_users.rb
> /opt/metasploit-framework/modules/exploits/windows/smb/psexec.rb
> /opt/metasploit-framework/modules/exploits/windows/smb/psexec_psh.rb
>
>
> -T
>
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Computers are like air conditioners.
> They malfunction when you open windows
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------