Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

1
vote
1answer
217 views

Cannot get access into a vulnerable Windows 2000 (MS03_026)

I'm trying to get access into a Windows 2000 server through the vulnerability MS03_026. An exploit is provided by Metasploit but I don't know why it isn't working. After filling the options (basically ...
1
vote
1answer
88 views

Is it possible to use a .Net payload with metasploit?

I'm not exactly sure how metasploit works when exploiting a target machine, and it has been a while since of played with it, so forgive me. Instead of using meterpreter as a payload in metasploit, ...
1
vote
3answers
255 views

Documentation on Meterpreter Shells

I've been looking for some decent documentation on Meterpreter shells, but I can't seem to find anything useful. I would like to know when to use what kind of shell for a certain situation. All I ...
1
vote
1answer
680 views

Reverse TCP connection from exploited SearchIndexer.exe failing

I'm working on a tool that exploits SearchIndexer.exe on Windows 7 x86 and connects back to a metasploit multi/handler, using standard metasploit reverse TCP stagers. The exploit seems to function as ...
1
vote
1answer
3k views

Use Metasploit to exploit SMB through Conficker

I've got an SP0/unpatched Windows XP which is vulnerable to the Conficker worm. I'm using metasploit to use the Conficker exploit with the purpose of opening a remote shell/command line. My ...
1
vote
1answer
372 views

Metasploit Closing Connections?

Whenever I attempt to use an exploit (that I know will work) from Metasploit in Windows on a machine on my LAN, I always get the error Exploit exception: An established connection was aborted by ...
1
vote
0answers
44 views

Passing the hash with metasploit and psexec not working - why? [closed]

I am currently doing a penetratiion test, and have captured a bunch of NTLM hashes via NBSN spoofing. An example (this is not taken from what I captured, and is random but the format is the same) ...
1
vote
1answer
438 views

Why is ms08-067 stopping at “Attempting to trigger the vulnerability”?

Using Metasploit I am trying to attack an unpatched Windows XP SP3 Virtual machine with the ms08-067 exploit but it just gets stuck at Attempting to trigger the vulnerability. I assume this means the ...
1
vote
0answers
36 views

where to find a detailed demonstration on how to imitate the Token Kidnapping exploit by Argeniss?

I am looking for a way to do the Token Kidnapping’s Revenge exploit by Argeniss. (The vulnerability is explained in here) I am studying security (beginner) and I would like to imitate the attack to ...
1
vote
0answers
58 views

Backdoor file with custom payload

Is there a way in metasploit to add a custom exe/script as payload to a file (exe/pdf/doxc)? I'm asking this in the context of a SE media dropping scenario, where a file when executed, sends data to ...
1
vote
0answers
78 views

msfelfscan with x64 support?

I'm trying to lookup all call rax instructions with msfelfscan, but %> msfelfscan -j rax /bin/ls Invalid register "rax" Was it not supported?
1
vote
1answer
842 views

on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter

I posted this on stackoverflow, was advised to move it to security section. I was writing an executable crypter as an exercise with goal of Antivirus evasion, now the problem is the final executable ...
1
vote
1answer
2k views

Backtrack 5 R2 & Metasploitable

I have configured the OpenVAS server as per wiki instructions: http://www.backtrack-linux.org/wiki/index.php/OpenVas And i ran the following commands: msfconsole load openvas openvas_connect admin ...
1
vote
1answer
26 views

MS03-026 RPC DCOM Exploit not working on metasploit [on hold]

I'm trying to exploit Windowx XP SP2 through MS03-026 Microsoft RPC DCOM Interface Overflow vulnerability on msfconsole. When execute "exploit" but it is not working. What could be reason? The one ...
1
vote
1answer
1k views

Trying to reproduce a file upload compromise on Joomla

After telling my workmates and boss that we had a very critical lack of security controls, finally we got compromised! They had a Joomla 1.5 which was exploited using a file upload vulnerability. WSO ...
0
votes
1answer
165 views

How to execute an exploit without user interaction?

Is there an existing exploit, virus or malware that doesn't need any user interaction? In metasploit for example. No link to clicked, no pdf to open , no vba or exe to execute by the victim.
0
votes
1answer
97 views

Is there a Plug and Play demonstration kit for various types of attacks? [closed]

I'm going to lecture a group of students about Information Security. I'm going to explain the theoretical sides of SQLi, Buffer Overflow and XSS. I wanted to give them a live demonstration without ...
0
votes
2answers
2k views

Msf and exploitdb on Backtrack 5

Metasploit (msf) doesn't see exploits from exploitdb. I've just updated directory on my Backtrack cd /pentest/exploits/exploitdb svn update How can I load them now into msf? When i use a script ...
0
votes
1answer
3k views

How to install Metasploit on Mavericks + MacPorts? [closed]

I would like to install Metasploit on an hardened OS. For this purpose I chose Mavericks just because I'm able to harden this OS pretty far. I would like to install Metasploit with MacPorts because ...
0
votes
2answers
313 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
0
votes
1answer
1k views

nessus scan against metasploit exploits

I am thinking about launching wide nessus scans (in the "IP range" sense) against exploits present in metasploit. The idea is to limit the number of plugins so that that the scan finishes in a ...
0
votes
1answer
44 views

Metaploit: Exploits and its relevant payload

How can I find out what payload(s) can be use/executed along with an exploit? For example, I can use an exploit called exploit/windows/smb/ms08_067_netapi. Right after that I set the payload to ...
0
votes
1answer
123 views

reading/downloading big files in metasploit module [closed]

I am writing a post exploitation module that supports meterpreter sessions. For my module to work, I need to read/download some files from the victim machine that may be small or bigger. I am having ...
0
votes
1answer
146 views

How to set correctly set Local Host on a payload for a user outside subnet?

I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
0
votes
1answer
347 views

veil framework, reverse https and tcp payload differences

i'm using veil framework to bypass av, when i want to choose a payload there are many choices, there is rev_https_contained , python/meterpreter/rev_https and c/meterpreter/rev_tcp my question is ...
0
votes
3answers
561 views

Random connections to meterpreter reverse tcp listener

I am currently learning some basic penetration testing using Metasploit. I have set up a reverse tcp meterpreter payload that I run on an Amazon EC2 Windows instance. Sometimes while moving a new ...
0
votes
1answer
94 views

Looking For Compiled Version of Metasploit Local Windows Exploits [closed]

I am looking to have a standalone compiled exploits for all local windows exploits that Metasploit has right now. I was wondering if somebody has done this before or know a place that has these ...
-1
votes
2answers
470 views

how to embed exe file to pdf? [closed]

Im trying to embed exe file to pdf for case study. I try using metasploit exploits for this but i can only embed shellcodes with this method. I know there is a way to embed exe file but i cant find ...
-1
votes
1answer
221 views

What are correct steps to setup this exploit execution(jboss_invoke_deploy)?

I've found this vulnerability (http://www.metasploit.com/modules/exploit/multi/http/jboss_invoke_deploy) but can't seem to set proper values for exploit to work , payload shown on site gives me worn ...
-1
votes
2answers
1k views

Automatically search Metasploit for useable exploits based on vulnerabilties in the database

Is it possible to automatically search the Metasploit database for usable exploits based on information about the vulnerabilities on the hosts? Searching in Metasploit for each CVE number to see if ...
-1
votes
1answer
1k views

How to bypass firewall protection to hack windows server 2003? [closed]

I am trying to hack windows server 2003 sp2, i can see a lot of services running on target, there is also a lot of backdoors listing on ports like netbus, remote-everything .... But Firewall (as i ...
-1
votes
1answer
66 views

Looking for a meterpreter script repository

I've read a couple entry-level metasploit books. Both of them praised the metasploit open framework. Additionally I have done some Google research but have not found meterpreter scripts for simple ...
-2
votes
1answer
102 views

Proccess to exploit an OS vulnerability [closed]

What are the steps to use an exploit on an OS vulnerability? I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure ...
-2
votes
2answers
700 views

using exploit/unix/webapp/tikiwiki_graph_formula_exec

I have backtrack and metasploitable running on my Macbook pro and I am trying to run **exploit/unix/webapp/tikiwiki_graph_formula_exec** exploit on msfconsole to penetrate the metasploitable operating ...
-4
votes
4answers
159 views

Law & Ethics - I'm not be breaking the law its the computer [closed]

So it would be illegal to run a metasploit attack against a computer you don't have permission to do so against, right? But what if I configure a web server to nmap scan, then metasploit attack ...
-5
votes
2answers
1k views

Install Metasploit under Cygwin? [closed]

Is there a way to install Metasploit under Cygwin? Metasploit is meant to be run under a linux environment. The Windows installation doesn't have many tools such as msfpayload available. Please ...