Reconnaissance findings
I found exposed FTP and SMB services on the Windows Server 2008 host.
Coursework case study · Penetration testing
Sweeny Barbers Penetration Test
For this coursework, I assessed a vulnerable Windows Server 2008 lab system, confirmed exploitable weaknesses and prioritised the fixes.
- Target
- Legacy Windows Server environment
- Recon
- Nmap · service enumeration
- Exploit
- MS17-010 · EternalBlue
- Risk
- High · CVSS 3.1 score 8.8
In short
I found exposed FTP and SMB services, confirmed in the lab that the host was vulnerable to EternalBlue (MS17-010), and recommended patching first, then restricting exposed services and access.
01 · Approach
How I tested the system.
I recorded each stage and prioritised fixes by how easily an issue could be exploited and the damage it could cause.
- Enumerate. List the exposed services with Nmap.
- Assess. Check each service for known vulnerabilities.
- Validate. Test exploitation in the coursework lab to confirm the risk.
- Prioritise. Rank fixes by ease of exploitation and potential damage.
02 · Findings
Vulnerabilities I confirmed in the lab.
| Finding | Evidence | Recommended fix |
|---|---|---|
| MS17-010 EternalBlue High · 8.8 | Exploitation confirmed with Metasploit in the lab | Apply the MS17-010 security update |
| Exposed FTP and SMB | Found during Nmap service enumeration | Restrict exposed services and reduce unnecessary access |
Exploit validation
I used Metasploit in the lab to confirm that the host was vulnerable to EternalBlue (MS17-010).
03 · Remediation
What needed fixing.
PatchingAddress the confirmed MS17-010 vulnerability on the Windows Server host.
Exposure and accessRestrict exposed services and reduce unnecessary access permissions.