Metasploit

[2cute2shy]

Hi All ,

I have a network with HP procurve switches , Windows Servers 2003 / 8 , Client OS = windows 7 / vista / xp and 1 Windows2k server.

Using Metasploit I did an nmap of the network ,and then autopwn, I couldnt get a single session created although I suspect there are vunerable computers on my network. So I decided to pick a target Win2k Server and got the following results via nmap.


PORT STATE SERVICE VERSION
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn
445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
1037/tcp open msrpc Microsoft Windows RPC
1047/tcp open msrpc Microsoft Windows RPC
5800/tcp open vnc-http WinVNC 3.3.7 (Server: univoice; Resolution 1024x800; VNC TCP port: 5900)
5900/tcp open vnc VNC (protocol 3.3)
6129/tcp open damewaremr DameWare Mini Remote Control

I even tried to manually exploit this 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds

But no sessions are created.

I have my Backtrack Black Hat edition on a VM ( not sure if this might be a problem?)

Can someone advise what could be the problem?

Many Thanks

[sickness]

I would suggest you take some time to read the Metasploit Unleashed and actually learn how exploits work and avoid using db_autopwn.
Also only an NMAP scan can't get you a session, and there could be a lot of problems why this can happen, the main one may be the lack of knowledge.

[spudgunman]

hacking in real life is not as easy as it looks in the lab (or youtube)


http://www.backtrack-linux.org/forum...-advanced.html

[2cute2shy]

I would suggest you take some time to read the Metasploit Unleashed and actually learn how exploits work and avoid using db_autopwn.
Also only an NMAP scan can't get you a session, and there could be a lot of problems why this can happen, the main one may be the lack of knowledge.

Hi ,

Apologies for posting this in the wrong section.

Was hoping that there might be an obious answer to this question maybe from someone with a similiar experience , never the less will try and see were my search leads me