How to Access a Remote Desktop With Metasploit

Use Metasploit as a security tool in your network.

People's use of remote computers continues to grow exponentially. This growth has also increased the opportunity for those with destructive desires to access remote computers for fun or profit. To protect yourself and your information, the best offense against the unknown hacker is to test how vulnerable your system is to attack and penetration.

Instructions

1. Install Metasploit on the local machine. Metasploit is available in three different forms. Metasploit Express, the simplest to install and run on a Windows machine, is downloadable from the Rapid7 website (see Resources). Metasploit comes with a bundled installer that will handle program installation. You should know the IP address of the local machine to make it easier to find on the Internet.

2. Start the Metasploit program on the host machine by double-clicking the Metasploit icon placed on the desktop by the installation program. Once the program starts, you are in the Metasploit environment. From this point, you may issue commands for Metasploit to execute.

3. Type "meterpreter" to start the Meterpreter utility at the command prompt displayed in the Metasploit window. Make sure you have a user account named Support with no password on the remote machine.

4. Open the connection to the remote host by entering the following command on the host machine: "run getgui --u SUPPORT_31337 --p support" (without quotes). This command will log you in to the remote machine and provide access to the graphical user interface on the remote machine.

References

• The Ethical Hacker: Metasploit Tutorial -- A New Day for System Exploits

Resources

• Rapid7: Free Downloads: Metasploit Express