Vulnerability Penetration Testing the Computer and Network Resources of Windows Based Operating Systems

Abstract

In this paper a vulnerability penetration testing for several hosts in WLAN is made. The exploited operating systems were Microsoft Windows 7Enterprise and Microsoft Windows 8. It has been used an exploit named “Java storeImageArray () Invalid Array Index-ing Vulnerability”. Thanks to the open source penetration testing platform - Metasploit Framework the exploit was executed on the target hosts. The most important and critical rea-son the attack being successfully executed is connected with the human factor and interven-tion. Thereby, some security professionals and network administrators can use Metasploit Framework neither to run exploit nor to write security scripts in order to detect and protect the computer and network resources against various malicious cyber-attacks.

Educational Exploiting the Information Resources and Invading the Security Mechanisms of the Operating System Windows 7 With the Exploit Eternalblue and Backdoor Doublepulsar

“…All studies in this article only with scientific research character were made. The author of the report is not responsible for cases of abuse [6,7,8,9,10]. Fig.…”

“…The network ID of this WLAN is 192.168.100.0/24. The research host was configured with the following IPv4 address 192.168.1.124/24 [6,7,8,9,10].…”

“…The backdoor DoublePulsar was used alongside with the exploit EternalBlue. Thanks to the DoublePulsar cybercriminals can obtain full unauthorized control and access of the information resources of the exploited operating systems -Microsoft Windows XP and Windows 7 [6,7,8,9,10].…”

“…Most of the cybercriminals are able to install different online applications into the computer and network systems of selected victims in determined government agencies, private organizations and academic institutions [6,7,8,9,10]. In addition to these applications some cybercriminals and malicious users send special IPv4 and IPv6 network addresses and web hyperlinks to the marked victims in order to gain an unauthorized access to the computer and network resources [6,7,8,9,10].…”

“…In this paper an exploitation of information resources and invading the security mechanisms of the operating systems Windows XP and Windows 7 with the exploit EternalBlue and backdoor DoublePulsar. The whole academic research and experiment in specialized computer laboratory in the Faculty of Technical Sciences at Konstantin Preslavsky University of Shumen is conducted [6,7,8,9,10].…”