Hacking Lab 0x00  NMap and Hydra Part 1
Channel: The Expat Professor
Date: 2022-07-08

Hacking Lab 0x00 - NMap and Hydra
© Paul W. Poteete, 2016

Overview:
 This lab will present the student with basic techniques that may be used to scan, gain access, and maneuver within a system.  The labs introduce command syntax as it would be used in the actual attack.  Additional labs often discuss the commands in greater detail.  This method presents the information in a “What” then “Why” model, allowing the students to experiment with the tools before studying the tools in hope that this will generate greater understanding when the tools are studied in the future.

Resources:
 Victim: Windows 2003 Server (only requires 128MB of RAM)
 Attacker: Linux Box (Debian-based)

Victim Tools:
 Built-In Services
 
Attacker Tools:
 nmap
 hydra
 telnet client

 
Part I - Setup the Victim
Note: The following commands are to be executed from the Windows 2003 CMD CLI:

1) Setup General Access Vulnerabilities:
REM Enable Guest Account
 net user /active:yes guest

REM Enable Remote Desktop
 reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f

REM Enable Telnet
 sc config TlntSvr start= auto
 tlntadmn config maxconn= 9999
 tlntadmn config maxfail= 100 
 sc start TlntSvr
 tlntadmn config

2) Create the Users for Enumeration and Access:
 net user /add /active:yes fatima amitaf /fullname:"Fatima Abdullah" /comment:"Marketing Purchasing Agent - Abu Dhabi Branch"
 net localgroup /add TelnetClients fatima

3) Create the File Shares for Enumeration and Access:
 mkdir c:\Shared
 icacls "c:\Shared" /grant Everyone:(OI)(CI)F /T
 net share Shared=C:\Shared /grant:everyone,FULL

 mkdir C:\Marketing
 icacls "c:\Martketing" /grant fatima:(OI)(CI)F /T
 net share Marketing=c:\Marketing /remark:"Marketing Department Files" /grant:fatima,FULL

 
4) Create a file with sensitive information and place it in the Marketing Directory:
 copy con "Credit Cards.txt"

 Discover
 Fatima Abdullah
 6011867894563770, 03/16, 765

 Mastercard
 Fatima Abdullah
 5274019139434540, 08/21, 346

 Visa
 Fatima Abdullah
 4261655623330294, 09/19, 462

 ^Z (Press CTRL+Z)

5) Login as Fatima to create an active session for the scan in Part II
 telnet -l fatima 192.168.1.111
 or
 login fatima at the console of the server

VICTIM SETUP COMPLETE
-----------------------
Thank you for dropping by!

Please join me:
 https://www.youtube.com/PaulWPoteete
 https://www.twitter.com/PaulWPoteete
 https://www.linkedin.com/in/PaulWPoteete
CC by Paul W. Poteete