windows 7 vulnerabilities

[bs3xy]

howdie friends,

im studying Ethical hacking and computer forensics in a UK's university and we have as a task (for extra points) to hack into a machine where we have the ip, and modify a file. The machine we know its running Windows 7 professional (with nessus scans and nmap etc) it also propably has the firewall off, our teacher said that the version on this windows 7 is a full one but with no recent updates ( no RS no RTM),
here is the nessus report... if someone has a clue on how to do that or knows something or need extra info ill be glad to answer and hear thanku very much

[Archangel-Amael]

Haha two in one day!
http://www.backtrack-linux.org/forum...orum/28793.htm

Colleges and Universities must really be hurting for money these days.

[thorin]

dcetest

[lupin]

I'm continually amazed that so many Universities assign these type of tasks without teaching how to actually complete them

Perhaps they want their students to understand that penetration testing requires a lot of self directed learning?

Some hints. Thorin has already pointed you to a tool to check for DCE vulnerabilities, its also worth looking at vulnerabilities relating to CIFS/SMB. The Hacking Exposed Windows book is a good reference. And assuming port 80 is running a web server...

Category:OWASP Testing Project - OWASP