Greetings and initiate video presentation we're going to see how we go about using Metasploit to launch a DoS attack against a Windows XP machine. Meta sploit is an all around hacking suite of tools that comes with Cali landings. It is used by pen testers and hackers alike. This point comes with various exploits and payloads similar to commercial applications costing thousands of dollars. And an example of that would be Korean Pac. So as with every lab before we get too far along, let's make sure that we have network connectivity between our Kali machine and our target which is our XP host.

So I verified that I do have an IP address assigned to my Ethernet zero adapter on my Kali machine, and that IP address is 192 dot 168 dot 145 dot one three. Now this is my IP address not yours. Your IP address will differ. Let's go on over to my Windows XP machine and let's check out the IP address assigned to it. The IP address assigned to my Windows XP machine is 192 dot 168 dot 145 dot 131. Alright, so now let's go back over to Kali.

And we're going to ping that IP address. If both of these machines are on the same network sharing the same network ID, they should be able to see each other and his ping should be successful. And I get back nothing but positive responses. So I can do a Ctrl C, break that sequence. And now we're ready to continue on with the lab. A couple of caveats that we have to take care of before we get too far along.

One of those is make sure that your Windows Firewall on the Windows XP machine is disabled. Secondly, make sure that RDP is enabled on the remote target. So mine says that no firewall is turned on. And if I click on my start button, I right Click on my computer, I go to properties, and I go to remote, you'll see that the box is checked to allow users to connect remotely to this computer. We're good to go. On my Kali machine, I have typing the command clear on my terminal.

And that's going to give me a clean terminal to start work with. And we are now ready to begin the lab. So for grins and giggles, we can treat this as if this was the first time I've ever seen this network. And I need to find out what machines are running on this network and what their operating systems are. I also like to find out what services or ports are currently open on those machines. So I can type in 192 dot 168 dot 145 dot zero, forward slash 24 to scan the entire network, or in this case, since I already know that my Windows XP has the host IP a 131.

We can preclude all that and we can just get to the lab itself. And do the N map space dash small letter S, capital V and the IP address of the host, I want to scan, which is 131. So I'm going to go ahead and hit Enter. And in just a moment, the results of the scan will come back to me. So if I had done the network, scan every machine on the network that was available and connected to the same network, I would have got results back telling me what the operating system was, what the ports were and what services were running along with your IP address. Now, in this case, we know that this is an XP machine.

And we can confirm that because when I use this S, capital V switch within map, it looks for the OS. It tries to identify the OS and it comes back and it tells you what it believes the operating system is it doesn't always work, but a lot of times it does. And map also provides me with the ports and the services. that are currently running on this remote target. This is going to allow me to determine what exploits I can run. So currently I have a couple of ports that I'm interested in.

The first one is this SMB service that is running on port 445. The other one is RDP, which is using Port 3389. Again, I've cleared my terminal screen so that I have a clean working area. And now I'm going to go ahead and launch meta sploit we're going to do that by typing in m s f posle. And in just a moment, meta sploit will start up to see all the exploits that are currently available up inside of meta sploit. I can type in show exploits, and it'll bring up an entire list of all the exploits that are available to me.

Notice that all of these exploits are also rated by how successful they are. You either get a normal an average or a great but in this case I have a particular exploit that I want to find out I can try to scroll through all of these hundreds of exploit looking for this particular one, but I can also use the search feature. So I can type in search. And the information that describes the exploit in this case is the Microsoft Security bulletin 12 dash zero to zero. And if I hit Enter in just a moment, it's going to do a search and come up with this particular exploit. This module exploits the Microsoft 12 dash zero to zero RDP vulnerability which allows for remote code execution when an attacker sends a sequence of specifically crafted RDP packets to an infected system.

By default, the remote desktop protocol RDP is not enabled on any Windows operating system. So systems that do not have RDP enabled are not at risk. So to see the effects of this denial of service attack on this Windows XP target We need to have the Windows XP open because it's going to happen very quickly. So what I've done here is I have stacked my two operating systems Kali and Windows XP side by side. And I did this by going down to my taskbar, and right clicking and then I chose, I said, Show windows stack that brings both of them into the one monitors side by side, we're now ready to begin this denial of service attack. Now to do this, what I'm going to do is I'm going to copy this particular exploit right here, I'm gonna say copy.

I'm gonna go down here, and I'm going to type in you. And now I'm just going to right click, and I'm going to paste. Once that's done, all I have to do is hit Enter, and you'll notice that my prompt changes to let me know that I'm now using that exploit. This is a very simple exploit. So to see the options that I must configure, I can just type in show options. And you'll see that it says, the remote host must be configured remote Port 3389 is already set for us.

So I'm going to go ahead and set the remote host IP address for this particular exploit. So this is a good time to confirm that this is the IP address of your target. There's nothing wrong with going over and finding the IP address for this particular machine. Because we only want to do this once. We don't want to be banging our head on the keyboard three or four times because we type in the wrong IP address. I'm ready now to hit Enter.

And lets me know that the remote host IP address has been set. We're now ready to bring down our Windows XP machine using this denial of service attack. To do this, I'm just going to go ahead and run the exploit by using the exploit command. I'm going to go ahead and hit enter. Now you have to keep your eyes on the Windows XP target because this happens very quickly. And the Windows XP machine rebooted.

In this short video presentation, you got to see how easy it was to create a denial of service attack onto a Windows XP target using the meta sploit framework. That concludes this short video presentation. If you have any questions or concerns about the contents of this video or the lab, please do not hesitate to reach out and contact your instructor and I'll see you in my next video.