I am reading one of Lupin's tuts on buffer overflow attacks and think my virtual network may be causing a problem. My setup is a Mac OSX 10.5.8 host with one BT4R2 guest and one XP SP2 guest using the internal network setting in VirtualBox. I have designated VB to be my DHCP server handing out the range 192.168.50.0/24 (different than my real internal network of 192.168.76.0/24 to avoid conflicts) and that part works fine. So I have:
XP = 192.168.50.2
BT4 = 192.168.50.3
DHCP = 192.168.50.4
There is no internet access and it should not be needed. I can ping back and forth between all the devices and just tested a telnet connection to XP from BT4 so communication seems to be fine.
Now comes my issue:
I have a python script as follows (modified from Lupin's to simplify it since his didn't work, I wanted to simply get the socket connection and then I can add in his buffer overflow attack later):
The goal is simply to open the socket and then close it to make sure the connection works but when I run my python script I get the following:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
I ran nmap against my XP box and it doesn't show it as listening on port 80, so I suspect this is this issue but I'm not sure. This is my first time working with Python so I could have coded it incorrectly too. I used this howto to generate the code for my socket connection after Lupin's didn't work the way I'd expected: Socket Programming HOWTO — Python v2.7.1 documentation
Traceback (most recent call last):
File "./minisharesploit.py", line 10, in <module>
File "<string>", line 1, in connect
socket.error: (111, 'connection refused')
So I guess my questions are:
1. How can I verify that my XP box is listening on port 80? (I have disabled the firewall, killed the service, and then actually even enabled it and explicitly allowed port 80 but nmap still shows it as closed)
2. If that's not the problem, is there something wrong w/ my Python script?
3. Is there something I don't know about setting a virtual XP machine to listen on port 80 with VirtualBox's internal network? I don't want to use bridged or host-only networking because I want to isolate the virtual network completely from my host network.
Thanks in advance
EDIT: I just enabled port 23 on the XP VM and modified the python script accordingly and was able to establish a socket. So the issue is definitely that I'm not listening on port 80. Does anyone know how to set my XP machine to listen on this port in VirtualBox with internal networking only (i.e. I don't want to port forward through my router, etc). I'll keep searching in the meantime. Thanks again