sebaspv27/explotacion-rce-pentesting-bluekeep-cve-2019-0708-Demostración práctica y bitácora técnica de explotación de BlueKeep (CVE-2019-0708) en RDP usando Nmap y Metasploit, documentando la resolución de errores en el entorno virtual.
Academic project focused on the analysis, execution, and troubleshooting during the exploitation of the BlueKeep (CVE-2019-0708) vulnerability in the RDP service of Windows Server 2008 R2, developed for the Cybersecurity course at Instituto Profesional Los Leones.
Demonstrate the complete flow of a penetration test in a virtualized environment, from initial reconnaissance with Nmap to privilege escalation and interaction with the target system using Metasploit/Meterpreter.
sudo nmap -sV -sC -F <TARGET_IP>
Identification of open port 3389/tcp (RDP) and the vulnerable version 6.1.7601.
Search and selection of the module exploit/windows/rdp/cve_2019_0708_bluekeep_rce.
Configuration of key parameters (RHOSTS, LHOST, target).
Prior vulnerability validation using the check command.
Execution of the payload windows/x64/meterpreter/reverse_tcp.
Interactive access to the file system through a Meterpreter session.
Reading, manipulation, and remote deletion of test files on the target's desktop.
VirtualBox IP addressing: Solved by changing the network from NAT to Bridged Adapter for real visibility between machines.
Hypervisor incompatibility: Adjustment of VirtualBox version and drivers to avoid Blue Screen (BSOD) crashes during payload injection.
Service configuration: Modification of Windows Server registry settings and protocols to allow stable exploitation without authentication.