Launching the MS04-011 Exploit

Launching the MS04-011 Exploit

36. 
    In the Metasploit page, scroll down to "Microsoft LSASS MSO4-011 Overflow" and click it. This exploit can take over an unpatched Windows system—it does not depend on any additional vulnerable software.
    
37. 
    Scroll down to the "Select Target" section and click the victim operating system –Windows 2000.
    
38. 
    In the "Select Payload" section, click win32_reverse – this is a common payload that opens a Command Prompt on the victim machine, so you can type in commands of your choice to do anything you like on that machine.
    
39. 
    Get the RHOST and LHOST values you wrote down in the boxes on previous pages. Type them into the RHOST and LHOST boxes in the next screen, as shown to the right on this page. Then click the Exploit button near the bottom of the window.
    

40. 
    You should see an Exploit Output that appears only briefly, followed by a page that says The connection was reset. The exploit failed.
    
41. 
    To see why, look at your Windows 2000 machine’s desktop. You should see a McAfee antivirus warning, as shown to the right on this page.
    
42. 
    On the Windows 2000 virtual machine, close all windows.