Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

0
votes
0answers
15 views

Disguising as another computer using SMB Relay?

I've got a server that constantly checks for the existence of certain parameters on every PC in the web using SMB, if it fails to find those parameters it marks it as a rogue PC. I've understood that ...
0
votes
0answers
41 views

deliver a malicious payload via a cloned website

I've been tasked with conducting an internal pentest, I'm relatively new to this so please bare with me. Some time ago, I used setoolkit and I would have the option to clone a website and attach a ...
-1
votes
0answers
16 views

How to access Metasploitable2 vm frrom a Kali vm? [migrated]

I am just starting to learn Metasploit and trying to practice on a metasploitable2 instance. My host system is Ubuntu and I have 2 virtual machines set up in VMware Player. The first one has Kali 2.0 ...
1
vote
0answers
38 views

XSSF cookie stealer not working

I am playing with XSSF with Metasploit and attacking Mutilldae(security 0). I was able to get the generic XSS inject working. The inject was added to the Mutilldae blog. However, when I try to get the ...
2
votes
1answer
93 views

Is there an equivalent of meterpreter's “run persistence” for Linux?

As in the question - how can I install a persistent backdoor with Metasploit on a Linux target?
3
votes
0answers
48 views

Metasploit pattern not working for buffer overflow for SLMail 5.5 [closed]

I'm trying to do a buffer overflow on SLMail 5.5. I see where EIP is when I send 2606 A's to the program using my script. However, I cannot get the Metasploit pattern creator to work. I want to use ...
1
vote
0answers
83 views

'http_login' metasploit module isn't able to Brute Force the target. Any suggestions? [closed]

I'm trying to Brute force the http Basic authentication on the domain pentesteracademylab.appspot.com The complete path is pentesteracademylab.appspot.com/lab/webapp/basicauth I'm using the ...
11
votes
2answers
468 views

Custom Metasploit payload with UAC bypass

The machine I am attacking has anti-virus installed. I have managed to use Veil Framework in order to create an initial reverse shell payload that is undetected by the AV. However, UAC is enabled on ...
1
vote
0answers
43 views

Metasploit payload problem [closed]

Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
80 views

Metasploit new exploits failed [closed]

Why can't I use new exploits like exploit/multi/browser/adobe_flash_nellymoser_bof ? I tried to access it, but I can't even find it in MSF search Adobe or Flash or anything like this. What should I ...
1
vote
0answers
60 views

Metasploit reverse_http(s) PAYLOAD for linux target

During exploitation via metasploit's browzer_autopwn, I need to set a payload using http or https channel on a linux target. But there is no reverse_http(s) available in linux payload category. What ...
3
votes
2answers
213 views

What is “Gateway Host Probe”?

I wanted to perform Stress Testing on my router using Metasploit to perform a TCP syn Denial Of Service attack. I have used the following commands: use auxiliary/dos/tcp/synflood set rhost ...
1
vote
1answer
260 views

Metasploit SSH Error: could not settle on kex algorithm

I am running a trial of Cobalt Strike which runs over the Metasploit Framework. I am trying to perform an SSH related attack on my laptop, and I get the error in the title for all SSH related attacks. ...
0
votes
0answers
160 views

Sysinternals tool suite not working on low priv shell

Currently oscp student. I asked this on the oscp forum yesterday, but no responses so far. I am new to infosec, but have 18 years of education / work experience in IT. As far as I can tell, ...
-2
votes
1answer
71 views

why the reverse_https payload runned at 0.0.0.0:443?

I created a reverse_https backdoor ( windows/meterpreter/reverse_https ) with msfpayload and then with multi handler want to create a reverse shell from my target , but when I exploited the handler I ...
0
votes
0answers
218 views

How does Metasploit's payload work with a remote target?

I have some simple questions. I often use Metasploit in my pentest engagements. It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
0
votes
1answer
278 views

What are the main differences between a Metasploit vulnerability/exploit attack and a “R.A.T.” attack?

I explain myself: To attack with a vulnerability & exploit it with Metasploit, you have first to find a vulnerability listed. Then once you have it, you set up the whole thing and end up with a ...
1
vote
0answers
152 views

Metasploit ssh_enumusers stops instantly [closed]

When I try to run the : http://www.rapid7.com/db/modules/auxiliary/scanner/ssh/ssh_enumusers using the given options besides proxies I get the output: msf auxiliary(ssh_enumusers) > run [*] ...
1
vote
0answers
95 views

Bypass browser requirements to see exploit code [closed]

Is there any way to bypass metasploit browser requirements to browse exploit code generated my metasploit? How can I configure metasploit, so that I can see exploit code with browser, which normally ...
1
vote
0answers
197 views

Meterpreter:execute command failed [closed]

When run execute -f cmd.exe -i -H, Meterpreter gave me an error: [-] stdapi_sys_process_execute: Operation failed: 1 What is causing this, and how to resolve it?
1
vote
2answers
146 views

Meterpreter and staged payloads

So starting with the absolute basics - an exploit is the means used to gain access to a vulnerable system and a payload is the actual program/shellcode used to fulfill attacker's intentions A staged ...
0
votes
1answer
342 views

How does the NOP sled work with MSFVenom? [closed]

I'm generating payloads with MSFVenom and here's a sample output: user@localhost:~ $ msfvenom -p windows/shell_bind_tcp -b '\x00\x0a\x0d\x20' -i 3 -n 200 -f python No platform was selected, choosing ...
0
votes
1answer
579 views

How do you send a 64 bit meterpreter stager? [closed]

All the stagers that are sent seem to be 32 bit. This is fine, until I have to run Mimikatz which on a 64 bit system you NEED to run the 64 bit mimikatz. Since the 64 bit Mimikatz won't run on the 32 ...
0
votes
0answers
71 views

Metasploit Framework console misencodes text

I am running the Metasploit Framework (v4.10.2) on Kali Linux 1.0.7. Some commands return this weird, misencoded (I think) text instead of what it should be returning. What can I do to fix this? ...
3
votes
1answer
45 views

Architecture dependency issue associated with malicious payloads

My question is regarding architectural restrictions associated with backdoor/bind/reverse tcp payloads used typically to gain shell through exploitation. In a situation where the target box ...
1
vote
1answer
130 views

How can I add modules to a Payload on Metasploit

I know how to create payloads using Metasploit and then script a AutoRun script, so when the victim machine connects back to my Kali Server it execute some actions. Works sweet! What I wanted to do ...
2
votes
1answer
306 views

Should anti-virus detect metasploit payloads?

As part of a workstation pen test, I copy a simple metasploit payload onto the workstation, and try to run it. Usually this is blocked by anti-virus software. However, sometimes it isn't (I won't name ...
1
vote
0answers
83 views

Detecting reflective DLL injection any other ways?

any way to detect it? maybe using mcafee hips rules? Are there any known Techniques to detect it ? like walking the VAD tree or something?
2
votes
0answers
115 views

SET tool autopwn website type penetration [closed]

I tried to hack my second computer and phone in my local network. I am not very experienced so instead of picking the particular options and payloads i just pressed autopwn to use them all instantly. ...
0
votes
1answer
175 views

Choosing encoder for payloads in metasploit

I noticed that every payload (for example bind_tcp) in metasploit comes with defaut encoder.( shikata_ga_nai for bind_tcp). Is there a way in metasploit to manualy choose encoding for payloads or way ...
1
vote
2answers
2k views

MS08_067 with Metasploit [closed]

I'm learning how to use Metasploit. I'm using VirtualBox to run a VM with Kali Linux (192.168.56.101) and another with Windows XP SP1 (192.168.56.103). The two VMs can ping each other and Windows ...
1
vote
1answer
550 views

MS03-026 RPC DCOM Exploit not working on metasploit [closed]

I'm trying to exploit Windowx XP SP2 through MS03-026 Microsoft RPC DCOM Interface Overflow vulnerability on msfconsole. When execute "exploit" but it is not working. What could be reason? The one ...
1
vote
1answer
101 views

Identifying hash format caputred via Metasploit

When I use the nbns_repsonde module in metasploit, and set it to write captured responses to a file in the john format, I get a file with lines such as this: ...
3
votes
1answer
248 views

Meterpreter on non-jailbroken Iphone [closed]

I found this at github: https://github.com/AnwarMohamed/meterpreter-darwin Does anybody know if this works on a non-jailbroken Iphone? I downloaded it on my and double-clicked on the Makefile-icon, ...
3
votes
2answers
78 views

Copy Metasploit from Linux to Mac OSX? [closed]

I'm just wondering is there anyway to move Metasploit framework from Linux to Mac completely and It will be work ? and if yes , how ?
1
vote
0answers
137 views

Passing the hash with metasploit and psexec not working - why? [closed]

I am currently doing a penetratiion test, and have captured a bunch of NTLM hashes via NBSN spoofing. An example (this is not taken from what I captured, and is random but the format is the same) ...
0
votes
1answer
119 views

Is there a Plug and Play demonstration kit for various types of attacks? [closed]

I'm going to lecture a group of students about Information Security. I'm going to explain the theoretical sides of SQLi, Buffer Overflow and XSS. I wanted to give them a live demonstration without ...
0
votes
1answer
136 views

Metaploit: Exploits and its relevant payload

How can I find out what payload(s) can be use/executed along with an exploit? For example, I can use an exploit called exploit/windows/smb/ms08_067_netapi. Right after that I set the payload to ...
3
votes
2answers
793 views

How to exploit via Metasploit vulnerabilities found with Nessus?

I am new in the field and trying to pentest a php web app locally stored on my host pc using metasploit from a kali vm. I have run some scanners like wmap,OpenVAS and Nessus and found some ...
2
votes
1answer
532 views

How to exploit vulnerabilities found from OpenVAS?

I could not find any match for the vulnerabilities with their CVE numbers found from OpenVAS scanner with exploits using sites such as Rapid 7 Vulnerability DB and Exploit DB, or by using a command ...
-1
votes
2answers
3k views

how to embed exe file to pdf? [closed]

Im trying to embed exe file to pdf for case study. I try using metasploit exploits for this but i can only embed shellcodes with this method. I know there is a way to embed exe file but i cant find ...
1
vote
1answer
2k views

Why is ms08-067 stopping at “Attempting to trigger the vulnerability”?

Using Metasploit I am trying to attack an unpatched Windows XP SP3 Virtual machine with the ms08-067 exploit but it just gets stuck at Attempting to trigger the vulnerability. I assume this means the ...
1
vote
2answers
3k views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
3
votes
2answers
688 views

source code of metasploit payloads(shellcodes)

Is there a way to see a source code of metasploit shellcodes. For example: root@kali:~# msfpayload windows/shell_bind_tcp EXITFUNC=seh LPORT=1234 C /* * windows/shell_bind_tcp - 341 bytes * ...
0
votes
1answer
236 views

reading/downloading big files in metasploit module [closed]

I am writing a post exploitation module that supports meterpreter sessions. For my module to work, I need to read/download some files from the victim machine that may be small or bigger. I am having ...
0
votes
1answer
270 views

How to execute an exploit without user interaction?

Is there an existing exploit, virus or malware that doesn't need any user interaction? In metasploit for example. No link to clicked, no pdf to open , no vba or exe to execute by the victim.
-2
votes
1answer
151 views

Proccess to exploit an OS vulnerability [closed]

What are the steps to use an exploit on an OS vulnerability? I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure ...
2
votes
1answer
192 views

Identical lanman hashes on AD accounts?

I ran metasploit's smart_hashdump module against my (2008r2) domain controllers, trying to find any accounts that may still have lanman hashes in place. These should have been disabled long ago. I'm ...
1
vote
4answers
1k views

How do exploits and payloads work together?

I knew about the metasploit framework since a few good years ago, but I never really got into it. I have some knowledge when it comes to networks, but I am not a PRO. I've tested some things with ...
48
votes
6answers
9k views

Do actual penetration testers actually use tools like metasploit?

I've played around with metasploit simply as a hobby but am wondering if actual pentesters and/or hackers actually use metasploit to get into systems or do they write their own post exploitation ...