More Metasploit….

A little assignment I did in college. Enjoy.

— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — —

Part 1: Identify the Version and Build of the Windows System

Part 2: Research and Identify Vulnerabilities and Exploits

Part 3: Use Metasploit Framework to Exploit a Vulnerability

Part 4: Retrieve Sensitive Files

Part 5: Use FTP to Extract Sensitive Information

Part 6: Identify the Root Causes

What are some root causes of storing information in cleartext files?

• Average computer users do not know how to encrypt plaintext. Your average computer user does not know how to encrypt plaintext by using SHA-1 or MD5 hashes. They do not even know what hashes are.

What are some root causes of using an FTP service on the internal network?

• Maybe the business that is using FTP does not know any better and they think it is the most secure option. FTP lacks encryption, and automation, and is just very outdated. I would tell the business to consider SFTP instead.

What are some root causes of having anonymous login enabled on the FTP service?

• Maybe someone wants to send a person file’s anonymously, but an attacker could use this to their advantage. They could utilize the anonymous logon vulnerability to directly log on to the FTP service and upload malicious files to take system privileges, which causes data leaks.