Samba
Last updated
Last updated
I first started by searching for exploits on Samba smbd 3.0.20-Debian.
It looks like exploit DB and metasploit contain information for exploiting this.
I'll give the metasploit exploit a try out.
After starting up the metasploit console, I'll search for Samba related exploits.
I'll use exploit #8 in the list as that is the one that matches up with what I found online on Rapid7
I'll then verify the exploit is the correct one.
It looks like the description matches up with the version I found online.
Next is to check the options and set them.
Looks like all I need to do is set the RHOSTS to my Host IP. Also check the LHOSTS to make sure it is correct.
Then let's run the exploit.
It should be that easy. Redirect to /root to find the root.txt
The root flag is: 47b8ec8b36d966e1cde25938161b5334
