-: So I've had a lot of students ask in the Q&A, 2 2
"You showed us some techniques that work on Windows XP. 3 3
"But will these same techniques work in Windows 7 or above?" 4 4
Well yes the well. 5 5
Now the particular exploit that we use, 6 6
the Microsoft 08 tack 067 netapi vulnerability 7 7
was very specifically geared toward Windows XP 8 8
and Windows 2003. 9 9
And it would work on some Windows 7 systems 10 10
if they weren't patched against that vulnerability. 11 11
Now that particular example, there isn't a whole lot 12 12
like that when you start getting into the new 13 13
operating systems like 7, 8, and 10 14 14
because Microsoft has done a much better job 15 15
of patching those type of vulnerabilities. 16 16
Most of the exploits you're gonna find 17 17
inside Windows 7, 8, and 10 are gonna be things 18 18
that require some degree of social engineering, 19 19
whether that is something that requires a user 20 20
to click on a link to go to a particular website, 21 21
to open a particular file that has viruses 22 22
or trojans embedded that might give you some access 23 23
or anything else of that nature. 24 24
Now there was one that was recently released 25 25
a couple weeks ago that is referred to 26 26
as the eternal blue. 27 27
So eternal blue came from a leak of documents 28 28
and tool sets that this hacking group 29 29
called Shadow Broker had found. 30 30
And part of those leaks, somebody had taken the code 31 31
and there's an SMV vulnerability 32 32
very similar to what we did in the Windows XP stuff. 33 33
And they actually turned that into a ransomware 34 34
called WannaCry that has really made headlines. 35 35
Well this particularly vulnerability 36 36
that we're gonna use is actually called 37 37
Microsoft 17 tack 010 eternal blue. 38 38
And we're gonna use that here on a Windows 7 machine. 39 39
Now Metasploit does have the ability to do this. 40 40
You have to download the latest version 41 41
of Metasploit by updating it. 42 42
And if you're not sure how to do that, 43 43
just google how to update my Metasploit. 44 44
And you'll be able to connect your Metasploit terminal 45 45
to the internet and download those latest patches. 46 46
This one actually came out only four days ago. 47 47
So this is May of 2017 when I'm filming this. 48 48
And this is a brand new exploit 49 49
that we're gonna be using. 50 50
Now when we go into the next video I'm gonna 51 51
show you step by step how this gonna work, 52 52
how we're gonna set this up inside Kali Linux. 53 53
It's gonna look very similar to what we did 54 54
with our Windows XP stuff 55 55
except that we're gonna be attacking a Windows 7 server. 56 56
The ones that are vulnerable are Windows 7 57 57
and Windows 2008 server, and they have to be 64-bit version. 58 58
There is a version of this that people are 59 59
in development for for Windows 8 and Windows 10 60 60
but they're not released just yet. 61 61
But again, these same techniques work all the time. 62 62
If you just start doing some googling, 63 63
you'll figure out what are the latest exploits 64 64
and what the newest things are out there. 65 65
I'll see you in the lab in the next video.