QA Platform (2024)

Remote Procedure Calls (RPCs) are a generic framework for clients to execute procedures on servers and have the result returned if there is one. Unfortunately, history has shown that RPCs can bevulnerable to buffer overflow attacks that allow attackers to inject malicious code that is executed.To make mattersworse, many RPC services run with elevated privileges giving attackerscomplete control over vulnerable systems.

In this Lab, you will gain quite a bit of information via RPC services. You will usea Kali Linuxhost to gain further information abouta Metasploitable 2 host. Both hostsare running as virtual machines in a Hyper-V virtual environment.

This Lab is designed for theCREST Practitioner Security Analyst (CPSA) certification examinationbut is of value to security practitioners in general.

LearningObjectives

Upon completion of this Lab you will be able to:

• Scan remote systems forRPC access using Nmap
• Learn about the kinds of information attackers may target
• Describe the options available for securing RPCservices

Intended Audience

This Lab is intended for:

• CREST CPSA certification examinees
• Security practitioners
• System administrators

Prerequisites

You should be familiar with:

• Working at thecommand-line in Linux

You can fulfill the prerequisites by completing theLinux Command Line Byte Session Learning Path.

Updates

November 14th, 2022 - Updated the instructions and screenshots to reflect the latest UI

June 1st, 2021 - Added instruction to install missing signature for apt command

July 10th, 2020 - Enabled direct browser RDP connection for a streamlined experience

July 1st, 2019 - Added instruction to install the missing package on Kali Linux for rpcinfo