HTB — Legacy

Machine IP — 10.10.10.4

Nmap

Here we can identify that the windows xp microsoft-ds is outdate and it’s vulnerable to ms-08–67

Get Raj Singh’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Found exploit at github then i modified the script by changing the shellcode and then i executed , and then started nc at our local host

Using

python ms-08_67.py 10.10.10.4 6 445

And here we get our administrator shell

…….cowabunga 😆