Sploitin' with Ruby (Point, Click, Root)
summary
Metasploit proves a Ruby framework that packages exploits, encoders and payloads so a NetBIOS/WINS ms04-045 exploit runs from ~200 lines of Ruby to a working shell on a Windows 2000 SP4 VM, loads a tiny interpreter DLL (~8k) and a payload DLL (~80k), dumps SAM hashes, uploads files and time stomps timestamps to hide traces. The demo uses meterpreter and Metasploit with nmap/backtrack for enumeration and a VNC injection payload that successfully opens remote control.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 5:03Tools
- 6:05Metasploit
- 12:27Metasploit Framework
- 17:14Hacking
- 22:35Exploit Code
- 28:02Exploit Target
- 30:17System Privileges
- 34:55Uploading Files
- 42:55Rails App
- 45:05Backtrack
related talks
36mWhat Is Metasploit? How Do I Use It to Test Project Security?
51mThe Anatomy of an Exploit
01h 00mA Security Tester's Toolbox
30mBuilding a binary protocol client in Ruby: A magical journey!
38mCatch Me If You Can. LOLBins and the Adversaries Who Abuse Them
42mHacking With Gems
01h 06mHow hacking works
31mHacking with Gems