Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Gaining access through network.

Hi, I want to know how can I gain access to another computer on the Same network for research purposes only. IS there any way of doing this without Payload?
In Kali Linux.
Kerberos auth? but that's windows.... if you're admin you should know how to connect to another users with simple CMD commands. Like I can access everyone's PC on my network right now with 1 command in cmd.

I'm new in Security and am learning still myself but that's the easiest way I can figure.
(Mar 20, 2018 09:14 AM)F.A.S.T Wrote:  Hi, I want to know how can I gain access to another computer on the Same network for research purposes only. IS there any way of doing this without Payload?
In Kali Linux.

OP being that it is a lab if the other computer is not patched for vulnerabilities then yes you can use an exploit.

(Mar 20, 2018 10:48 AM)Tedebear Wrote:  Kerberos auth? but that's windows.... if you're admin you should know how to connect to another users with simple CMD commands. Like I can access everyone's PC on my network right now with 1 command in cmd.

I'm new in Security and am learning still myself but that's the easiest way I can figure.

smb/ldap/ won't be present on this gentleman's testing lab https://hackforums.net/showthread.php?tid=5809952
Victim is Windows 10 which is hard to exploit.
(Mar 20, 2018 08:24 PM)F.A.S.T Wrote:  Victim is Windows 10 which is hard to exploit.

F.A.S.T is this machine on the same network as yourself or you are trying to get access to the network ?

Also OP WIndows 10 maybe interesting but with the right tactics it's not impossible. So do you know what AV or anything more than it's hard?
Can we get some more info on this?
It's another laptop. With a little bit of Information Gathering I found out it's running Windows 10.

I cracked the network password and got access to his Wifii. Sniffing on it revealed that it was updated yesterday. (Repeated connections to ms update website )



For the situation. Everything is alright and No crime is committed. My skill was challenged by this one individual.


(Mar 20, 2018 09:27 PM)CyberStrike Wrote:  F.A.S.T is this machine on the same network as yourself or you are trying to get access to the network ?

Also OP WIndows 10 maybe interesting but with the right tactics it's not impossible.  So do you know what AV or anything more than it's hard?

No I don't know about av. I should scan the host for vulnerabilities.
(Mar 21, 2018 12:38 AM)F.A.S.T Wrote:  It's another laptop. With a little bit of Information Gathering I found out it's running Windows 10.

I cracked the network password and got access to his Wifii. Sniffing on it revealed that it was updated yesterday. (Repeated connections to ms update website )



For the situation. Everything is alright and No crime is committed. My skill was challenged by this one individual.



No I don't know about av. I should scan the host for vulnerabilities.

Why not sit back and monitor for a day or two then start seeing what traffic is going from the target, see what AV sites it hits.
(Mar 21, 2018 01:31 AM)CyberStrike Wrote:  Why not sit back and monitor for a day or two then start seeing what traffic is going from the target, see what AV sites it hits.

Besides the user browsing social media. I see connections to Microsoft.

Windows defender maybe?
well do you think you did a good enough job of capturing traffic? Do you think that you got everything and anything? Have you investigated those subdomains and their child domains?
(Mar 20, 2018 09:14 AM)F.A.S.T Wrote:  Hi, I want to know how can I gain access to another computer on the Same network for research purposes only. IS there any way of doing this without Payload?
In Kali Linux.

Currently, EternalBlue could do this, but most devices are patched now.
(Mar 21, 2018 03:52 PM)AntiVander Wrote:  Currently, EternalBlue could do this, but most devices are patched now.

No I tried.


(Mar 21, 2018 01:51 PM)CyberStrike Wrote:  well do you think you did a good enough job of capturing traffic? Do you think that you got everything and anything?  Have you investigated those subdomains and their child domains?

No I didn't unfortunately. :S
(Mar 21, 2018 05:12 PM)F.A.S.T Wrote:  No I tried.



No I didn't unfortunately. :S

Then go get to it, Defender updates are atleast once a day so you generally check for two days .
(Mar 22, 2018 08:35 AM)CyberStrike Wrote:  Then go get to it, Defender updates are atleast once a day so you generally check for two days .
I just did some Enumeration to find out that when I was sniffing only his Laptop was being used. I have just found out that he has 3 Android Devices that can be Vulnerable.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by CreativoAug 22, 2020 07:23 PM 5 252 Aug 22, 2020 07:23 PM
Last Post: webdev77
by Angel ArmagostJul 22, 2019 06:34 AM 14 386 Jul 22, 2019 06:34 AM
Last Post: Coooool
by Amsg123Aug 14, 2018 10:27 AM 1 110 Aug 14, 2018 10:27 AM
Last Post: ItsJigSaw