2021 windows penetration of "Cyberspace Security" B module of Shandong secondary vocational group (analysis)

What is penetration testing ？

“ Penetration test , Is an authorized simulation attack on a computer system , To evaluate its safety , It is a mechanism provided to prove that the network defense works as expected .”

Windows Operating system penetration test task environment description ：

● Server scenario ：Server2（ Closed Links ）● Server scenario operating system ：Windows7

1. Via local PC Medium penetration test platform Kali Conduct system service and version scanning penetration test for the server scenario , And display the operation in the result Telnet The port number corresponding to the service is used as FLAG Submit ;

First of all, the first topic is very simple , Use it directly nmap -sV Version scanning results in flag:

 

Flag:23

2. Via local PC Medium penetration test platform Kali Perform penetration testing on the server scenario , Use kali in hydra To the server Telnet Brute force cracking of services （ The user is called Administrator）, take hydra Use the necessary parameters as FLAG Submit （ example ：nmap-s-p22）;（ Dictionary path /usr/share/wordlists/dirb/small.txt）

For this topic, use hydra Specify dictionary to explode ：