The 15-Minute Network Pen Test Part 2

There are numerous tools used in the Penetration Testing (pen testing) process, and there are plenty of books that go into how to use the individual tools. There are very few resources that discuss how the tools are used and how to approach the process. Ryan Linn, a regular columnist for The Ethical Hacker Network, is your host.

Part 2 covers some of the post-exploitation tasks that a pen tester may use. It begins with some basic Meterpreter tasks. Meterpreter is a specialized pen testing shell that is included in Metasploit as a payload. Using Meterpreter, password hashes are obtained from the exploited machine, and 0phcrack is used to crack the obtained passwords. While the passwords are cracking offline, the viewer is taken back to Meterpreter in order to create a hidden cmd.exe shell on the remote host. Finally we create a new user and add that user to the Administrators group. Ready to see it in action?

Category:

Science & Technology

Tags:

• ethical
• hacker
• hacking
• network
• security
• windows
• metasploit
• nessus
• ophcrack
• nmap
• pen
• test
• password
• crack
• rainbow
• tables
• meterpreter
• linn

[coolabhijits]

hey wher's the part 1 demo

[thetech250]

Thanks for the video it really help me since I new using metasploit. I think it works great on windows 2000 and windows xp, but it seems to me that its kind of harder to find vulnerabilities on windows vista. Is there any tool that would let me know the exploits that could work on Vista so my Pen Test would less painful on Vista machines?

[sabbi6678]

lol

[randomlaughingman]

There's Vista password tables, at the usual places to get the other tables for XP and the boot disk.