For testing purposes of a logging solution, I would like to simulate an attack by using Metasploit against a Windows 7 / Windows 2016 server. However, I am struggling to find a reliable exploit that actually spawns a root shell on the victim machine.
Initially, I tried to identify a reliable MSF module to be used during the exploit. I selected windows/http/icecast_header as it seems to be more or less independent of the underlying OS version (Win 7 vs. Win 2016). Thus, I installed the vulnerable Icecast version on the victim machine and configured the MSF module. However, as stated before, I am getting a
Exploit completed, but no session was created.. On the victim machine, the server simply crashes and I am getting a message "Icecast2win MFC Application has stopped working".
Thus, my actual question is: Do you know of a reliable MSF mdoule that works on Windows 7 / 2016 that I can use for testing purposes?