[Learning] Kioptrix level one -- samba

Links:

watch the HD video online: http://vimeo.com/f4l13n5now/kioptrix1samba

Description:

"This Kioptrix VM Image are easy challenges. The object of the game is to acquire root access via any means possible (except actually hacking the VM server or player).
The purpose of these games are to learn the basic tools and techniques in vulnerability assessment and exploitation. There are more ways then one to successfully complete the challenges."
                                                                                                                                 --------- Kioptrix team

Attacker:

Backtrack 5 R2
IP: 10.10.10.132/24

Victim:

Kioptrix level 1
IP: 10.10.10.137/24

vulnerability & exploit:

1, Samba 2.2.8 Remote Root Exploit - sambal.c
2, Samba trans2open Overflow

Attacking process:

1, discover the vulnerable services:
use NMAP to probe the opening ports and services

nmap -sS -sV -O 10.10.10.137 -v

found the following services:
[1] samba (smbd) service running on port 139


2, exploit vulnerable services:
[1] exploit samba service to get remote root privilege (use sambal.c)
or
[2] exploit samba service using trans2open to get remote root privilege

Reference:

[1] Kioptrix download link
[2] Tutorial on g0tmi1k's Blog