The penalties for violating laws and regulations regarding security testing-related tools can be severe.

Mcafee Epo 4.6 Software Is Your

Ensuring that you are allowed to use this software is your responsibility.

This is because the software described should not be used if you are unfamiliar with basic- to intermediate-level use of Linux.

Proceeding without having that knowledge is very likely to result in damage andor loss of data.

In addition to ePolicies, versions 4.6.0 through 4.6.7 are capable of orchestrating some very handy unauthorized data retrieval via an XXE vulnerability.

In particular as described by RedTeam Pentesting GmbH in their writeup there is a configuration file which includes the ePO database credentials encrypted using a hardcoded key.

This tutorial was written and tested using a vanilla Debian 7 x64 VM, which was patched at the current level when this document was written.

I tested the module against unpatched as well as fully-patched (as of the tutorials writing) versions of that operating system.

This software is a pre-alpha preview of a tool designed for penetration testing (in other words, it actively misuses its target(s)).

If you are using Kali Linux as the attacking system, this should already be taken care of for you.

Mcafee Epo 4.6 Free Version Of

The instructions and screenshots in this tutorial will refer to the free version of Burp Suite, because I think its a little easier to find the necessary information in the Burp interface.

Accepting all of the defaults will be fine for testing On The Outside, Reaching In.

The default installation sets ePO up for the use of SQL Express, which means you wont be able to simulate connecting to SQL after decrypting the ePO password.

If you want to do that final step, youll need a full SQL Server installation to point ePO to during the installation.

The instructions in this tutorial assume youre using the default admin account.

By default, this will be using TLSSSL on port 8443 of the target system (e.g.

If you are using the default install, just go ahead and use the built-in admin account that you created when stepping through the wizard.

In a real-world pen-test, you would probably not have access to the built-in superuser account, but the process is exactly the same regardless of which account you use, as long as it can import dashboards.

This helps ensure that all of the necessary cookies are set.

This value is 38EE7554E84A5937CFD9E0DB77199639 in the screenshots below.

This value is 13A659BBF358C0D450FD799B3B5575F8 in the screenshots below.

If you find the steps below not working, make sure you are copying a fresh value.

For example, if the value you obtained from your proxy history was JSESSIONID38EE7554E84A5937CFD9E0DB77199639; orion.login.languagelanguage:encountry:; JSESSIONIDSSO13A659BBF358C0D450FD799B3B5575F8, then the escaped version would be JSESSIONID38EE7554E84A5937CFD9E0DB77199639; orion.login.languagelanguage:encountry:; JSESSIONIDSSO13A659BBF358C0D450FD799B3B5575F8.

This path will exist on virtually any Windows installation, so if the attempt fails, verify the parameters youre using.

Mcafee Epo 4.6 License Key