What are the steps to use an exploit on an OS vulnerability?
I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure out what to do with another OS in a different situation.
How does one find remote/local vulnerabilities, and how to know which have public exploits?
I'll give an example to be more specific. I'm on a network and scanning all the hosts with nmap. Now that I have the list of all the services/ports opened and running on each host, how can I look for exploits?
I think I have to take these steps:
- Which OS and version is it?
- Which programs/services are running/installed?
- Search for "$OS + $service/software_on_the_machine + exploit"