Book Image

Building Virtual Pentesting Labs for Advanced Penetration Testing

By : Kevin Cardwell
Book Image

Building Virtual Pentesting Labs for Advanced Penetration Testing

By: Kevin Cardwell

Overview of this book

Table of Contents (20 chapters)
Building Virtual Pentesting Labs for Advanced Penetration Testing
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

OS platform specifics


As in this chapter we are looking at servers, we want to look at some of the platform characteristics that we can encounter when we are testing servers.

Windows legacy

These are the older Windows servers, that is, Windows 2000 and Windows Server 2003. Even though the Windows 2000 server has been out for many years, it is not uncommon to find one when you are testing. This is especially true when you are testing Supervisory Control and Data Acquisition (SCADA) systems. It is quite common to see these systems on SCADA networks.

A good way to determine some of the things we can do against this platform is to return to our Exploit DB and conduct a search for vulnerabilities. An example of the search results is shown in the following screenshot:

As the previous screenshot shows, we have some exploits available, but as the OS is becoming outdated, we really do not have that many in the database. We can search the Internet and look for them as well. The Windows Server 2003 platform...