Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

3
votes
1answer
475 views

Metasploit Wifi Modules Asking for lorcon2

I'm using Metasploit Framework for Wifi Exploiation, on Backtrack R2, but I'm getting this error: The Lorcon2 module is not available: no such file to load -- Lorcon2 But actually, I have installed ...
1
vote
2answers
676 views

About generating Exe files from Metasploit scripts

I'm a newbie to Metasploit framework. I want to create a standalone application (an exe file) exploiting MS08-067 vulnerability. Is that possible for me to have the application generated from ...
-2
votes
2answers
596 views

using exploit/unix/webapp/tikiwiki_graph_formula_exec

I have backtrack and metasploitable running on my Macbook pro and I am trying to run **exploit/unix/webapp/tikiwiki_graph_formula_exec** exploit on msfconsole to penetrate the metasploitable operating ...
0
votes
2answers
299 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
9
votes
4answers
1k views

Nessus Scan Port ID mapped to Metasploit Vulnerability exploits

My Question: Is there any sort of website that maps Nessus Scan IDs to Metasploit Vulnerabilities? My Situation: I'm learning about penetration testing and I'm beginning to get frustrated seeing a ...
2
votes
2answers
353 views

Why wouldn't the reverse shell connect back using the same port that exploited the server?

The reverse shell payload from msf use a new port to connect back to the attacker, therefore if the target server has outgoing filters, attack would fail. i.e established server:ftp <-> ...
2
votes
1answer
717 views

Airbase-ng & Metasploit the perfect pair

So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort. Is there anyway ...
9
votes
2answers
3k views

Detecting reflective DLL injection

In the past few years, malware (and some pen-test tools like Metasploit's meterpreter payload) have begun to use reflective DLL injection (PDF) to load a DLL into the memory of a process. The benefit ...
2
votes
0answers
131 views

Need a little help with Metasploit and Java? [closed]

I'm a junior programmer and i was asked in my job to test java using metasploit... I followed this detailed environment: ...
3
votes
2answers
671 views

Shellcode that is smaller than 295 bytes that spawns a shell [closed]

Metasploit payloads produce more than 300-byte shellcodes. But I want my shell-spawning shellcodes to be less than 295 bytes. Can anyone show me the links to these shellcodes? Thanks.
3
votes
2answers
786 views

Tools/methods helping to determine application/protocol serving specific port

I do blackbox testing of the server and figured out that there is a bunch of listening ports. I need to determine what services/protocols those ports are used for. What I've tried so far is to use ...
-1
votes
1answer
1k views

How to bypass firewall protection to hack windows server 2003? [closed]

I am trying to hack windows server 2003 sp2, i can see a lot of services running on target, there is also a lot of backdoors listing on ports like netbus, remote-everything .... But Firewall (as i ...
1
vote
1answer
743 views

on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter

I posted this on stackoverflow, was advised to move it to security section. I was writing an executable crypter as an exercise with goal of Antivirus evasion, now the problem is the final executable ...
6
votes
6answers
7k views

Can you recommend a good book on Backtrack/Metasploit?

I have just downloaded Backtrack 5 R2 with Gnome and, while it looks cool, I don't really know where to start. I see it comes with Metasploit but, to be blunt, I still don't really understand what ...
1
vote
1answer
2k views

Backtrack 5 R2 & Metasploitable

I have configured the OpenVAS server as per wiki instructions: http://www.backtrack-linux.org/wiki/index.php/OpenVas And i ran the following commands: msfconsole load openvas openvas_connect admin ...
5
votes
4answers
1k views

Obtaining the IP address of a virtual machine to use Metasploit

I am beginning to learn Metasploit and, to play safe, am practicing it out on a virtual machine. The target machine, which is a virtual machine, is under NATing. How do I access it/ connect to it- ...
3
votes
4answers
616 views

Automating Metasploit attacks, is it possible to generate all (most) modules?

I work on creating signatures for all metasploit modules. I need to stimulate pretty much all the attacks (exploits) in metasploit without actually targeting a real victim (I don't think autopwn can ...
6
votes
3answers
2k views

Disadvantages of metasploit Framework for windows

Are there any explicit disadvantages in comparison to running it on a UNIX machine these days?
1
vote
2answers
174 views

Metasploit Development Reference

The Metasploit team provides some documentation on how to develop exploits, but other than looking through the sourcecode (which is annoying considering how much time I spend going from this file to ...
1
vote
1answer
328 views

Metasploit Closing Connections?

Whenever I attempt to use an exploit (that I know will work) from Metasploit in Windows on a machine on my LAN, I always get the error Exploit exception: An established connection was aborted by ...
0
votes
1answer
951 views

nessus scan against metasploit exploits

I am thinking about launching wide nessus scans (in the "IP range" sense) against exploits present in metasploit. The idea is to limit the number of plugins so that that the scan finishes in a ...
10
votes
4answers
10k views

Browsing exploits with Metasploit console

Is there any way to browse certain exploits in MSFconsole? The show exploits command shows too many and I cannot find a way to show just Windows file format exploits, for example.