Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

2
votes
3answers
192 views

List of upgradable softwares vulnerable to MitM attacks

I was wondering, a lot of software nowadays automatically connect to a server at launch to check for updates, even basic software, and, to my knowledge, this is a new trend. Before you had to download ...
2
votes
3answers
617 views

Documentation on Meterpreter Shells

I've been looking for some decent documentation on Meterpreter shells, but I can't seem to find anything useful. I would like to know when to use what kind of shell for a certain situation. All I ...
2
votes
1answer
933 views

Airbase-ng & Metasploit the perfect pair

So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort. Is there anyway ...
2
votes
1answer
306 views

Is there an equivalent of meterpreter's “run persistence” for Linux?

As in the question - how can I install a persistent backdoor with Metasploit on a Linux target?
2
votes
1answer
133 views

vsftpd metasploit evidence in logs?

We have a public ftp server that is being probed by the usual Chinese brute-force scans. They are probing vsftpd. Notmally a failed login to vsftpd looks like this in syslog: Mar 17 15:56:07 ...
2
votes
0answers
65 views

importing OpenVAS xml in metasploit

I am practising in my lab with some metasploitable machines, and I just realised that the vulns declared by OpenVAS 6.01 in the scan report aren’t imported in Metasploit 4.11.5 by the db_import ...
2
votes
1answer
604 views

msfvenom payload problem

This is for educational purposes only! I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command msfvenom -p android/shell/reverse_tcp ...
2
votes
0answers
97 views

Metasploit reverse_http(s) PAYLOAD for linux target

During exploitation via metasploit's browzer_autopwn, I need to set a payload using http or https channel on a linux target. But there is no reverse_http(s) available in linux payload category. What ...
2
votes
2answers
175 views

How can I add modules to a Payload on Metasploit

I know how to create payloads using Metasploit and then script a AutoRun script, so when the victim machine connects back to my Kali Server it execute some actions. Works sweet! What I wanted to do ...
2
votes
0answers
143 views

SET tool autopwn website type penetration [closed]

I tried to hack my second computer and phone in my local network. I am not very experienced so instead of picking the particular options and payloads i just pressed autopwn to use them all instantly. ...
2
votes
0answers
197 views

Is there a way to get msfpayload to generate a regular cmd.exe reverse tcp shell? [closed]

It looks like msfpayload now generates a powershell-based payload when you pass it windows/reverse_tcp_shell. Is there a way to generate a regular cmd.exe reverse shell instead? Thanks!
2
votes
0answers
137 views

Need a little help with Metasploit and Java? [closed]

I'm a junior programmer and i was asked in my job to test java using metasploit... I followed this detailed environment: ...
1
vote
2answers
97 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
1
vote
4answers
2k views

How do exploits and payloads work together?

I knew about the metasploit framework since a few good years ago, but I never really got into it. I have some knowledge when it comes to networks, but I am not a PRO. I've tested some things with ...
1
vote
2answers
210 views

Metasploit Development Reference

The Metasploit team provides some documentation on how to develop exploits, but other than looking through the sourcecode (which is annoying considering how much time I spend going from this file to ...
1
vote
1answer
93 views

How to brute force HTTP Basic Authentication requested with XHR?

How can one brute force a website using HTTP Basic authentication using metasploit which uses XHR in background? I am getting error "No URI found that asks for HTTP authentication". Relevant headers ...
1
vote
3answers
295 views

Windows 7 Exploits

I just found my old, Windows 7 Ultimate installer DVD, so I thought I would set it up in a pentest-lab type environment, see what's possible and have some fun with it. So are there any publicly ...
1
vote
2answers
5k views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
1
vote
2answers
1k views

How to test my website for the rails YAML vulnerability

I am quite puzzled by how to test my rails app for the YAML vulnerability first, I upgraded to the latest rails 3.2.11, and I tried this It gave me not likely to be vulnerable or URIPATH must be set ...
1
vote
2answers
2k views

About generating Exe files from Metasploit scripts

I'm a newbie to Metasploit framework. I want to create a standalone application (an exe file) exploiting MS08-067 vulnerability. Is that possible for me to have the application generated from ...
1
vote
1answer
76 views

What is the difference between FTP Brute force with hydra and Metasploit? [closed]

What is the difference between FTP Brute force with hydra and and FTP brute force with Metasploit ?
1
vote
2answers
367 views

How do arbitrary payloads execute on the remote machine?

I understand executing something like a reverse TCP bind via shell relies on resources being available on the victim machine... and in the case of running a, shall we say, Ruby script from the command ...
1
vote
2answers
72 views

Using msf to connect to netcat listener and shell_to_meterperter

I've been trying for hours and failing to do something that should be simple! I have a box w/ admin (taking OSCP - nothing illegal). I used an RDP exploit, got a shell, added a user, put user in ...
1
vote
1answer
741 views

Metasploit SSH Error: could not settle on kex algorithm

I am running a trial of Cobalt Strike which runs over the Metasploit Framework. I am trying to perform an SSH related attack on my laptop, and I get the error in the title for all SSH related attacks. ...
1
vote
1answer
543 views

Metasploit generating strange shellcode

So I just used metasploit to generate the payload/linux/x86/shell_bind_tcp payload without null bytes (generate -t raw -b '\x00' -f shellcode). Here's the shellcode: $ xxd -p shellcode ...
1
vote
1answer
131 views

Adding plugin to meterpreter

I'm trying to add a meterpreter plugin, a = client.railgun.kernel32.GetLogicalDrives()["return"] # Math magic to convert the binary to letters drives = [] letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ" ...
1
vote
1answer
50 views

Removing remnants of a Metasploit exploit

Is it possible to remove a Metasploit payload/meterpreter from a compromised system? My question is mainly based on antiforensics (Leaving aside Memory forensics which is probably unavoidable but more ...
1
vote
2answers
261 views

Meterpreter and staged payloads

So starting with the absolute basics - an exploit is the means used to gain access to a vulnerable system and a payload is the actual program/shellcode used to fulfill attacker's intentions A staged ...
1
vote
1answer
134 views

Identifying hash format caputred via Metasploit

When I use the nbns_repsonde module in metasploit, and set it to write captured responses to a file in the john format, I get a file with lines such as this: ...
1
vote
1answer
4k views

Why is ms08-067 stopping at “Attempting to trigger the vulnerability”?

Using Metasploit I am trying to attack an unpatched Windows XP SP3 Virtual machine with the ms08-067 exploit but it just gets stuck at Attempting to trigger the vulnerability. I assume this means the ...
1
vote
1answer
643 views

Cannot get access into a vulnerable Windows 2000 (MS03_026)

I'm trying to get access into a Windows 2000 server through the vulnerability MS03_026. An exploit is provided by Metasploit but I don't know why it isn't working. After filling the options (basically ...
1
vote
1answer
182 views

Is it possible to use a .Net payload with metasploit?

I'm not exactly sure how metasploit works when exploiting a target machine, and it has been a while since of played with it, so forgive me. Instead of using meterpreter as a payload in metasploit, ...
1
vote
2answers
3k views

Automatically search Metasploit for useable exploits based on vulnerabilties in the database

Is it possible to automatically search the Metasploit database for usable exploits based on information about the vulnerabilities on the hosts? Searching in Metasploit for each CVE number to see if ...
1
vote
1answer
1k views

Reverse TCP connection from exploited SearchIndexer.exe failing

I'm working on a tool that exploits SearchIndexer.exe on Windows 7 x86 and connects back to a metasploit multi/handler, using standard metasploit reverse TCP stagers. The exploit seems to function as ...
1
vote
1answer
5k views

Use Metasploit to exploit SMB through Conficker

I've got an SP0/unpatched Windows XP which is vulnerable to the Conficker worm. I'm using metasploit to use the Conficker exploit with the purpose of opening a remote shell/command line. My ...
1
vote
1answer
436 views

Metasploit Closing Connections?

Whenever I attempt to use an exploit (that I know will work) from Metasploit in Windows on a machine on my LAN, I always get the error Exploit exception: An established connection was aborted by ...
1
vote
0answers
18 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
1answer
50 views

ms08_067_netapi not performing expectedly on Windows XP Sp1/Sp3

I tried the exploit with meterpreter reverse tcp on both Sp1/Sp3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
1
vote
0answers
23 views

initialAutoRunScript in BrowserAutoPwn2

I am trying to add some custom commands to browserautopwn2. When I get the session using the initialAutoRunScript option like this: msf > set initialautorunscript "upload /root/x.txt %temp%" ...
1
vote
0answers
75 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
1
vote
0answers
44 views

The process of using Metasploit to get in Systems [closed]

I am new in metasploit. I get the basic concept of exploiting a system or whatever your trying to do. You find a vulnerability in a system, you use an exploit or make one. Doing that on your local ...
1
vote
0answers
120 views

The pdf embedded exe generating error on the target machine when executed

These are the steps that I performed in order to generate a PDF embedded with exe. Attacker machine (Windows 7): msf > use windows/meterpreter/reverse_tcp msf payload(reverse_tcp) > set LHOST ...
1
vote
0answers
121 views

Converting Metasploit module to standalone Python script [closed]

How easy is to convert Ruby code to Python code and to change Metasploit module into standalone Python script for Linux?
1
vote
1answer
118 views

Metasploit automatic module execution on receival of shell?

After reading through a couple of webpages referring to metasploit I stumbled upon a post referring to the auto execution of metasploit modules upon the receiving of a shell. Namely the post ...
1
vote
0answers
74 views

XSSF cookie stealer not working

I am playing with XSSF with Metasploit and attacking Mutilldae(security 0). I was able to get the generic XSS inject working. The inject was added to the Mutilldae blog. However, when I try to get the ...
1
vote
0answers
308 views

'http_login' metasploit module isn't able to Brute Force the target. Any suggestions? [closed]

I'm trying to Brute force the http Basic authentication on the domain pentesteracademylab.appspot.com The complete path is pentesteracademylab.appspot.com/lab/webapp/basicauth I'm using the ...
1
vote
0answers
87 views

Metasploit payload problem [closed]

Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
103 views

Metasploit new exploits failed [closed]

Why can't I use new exploits like exploit/multi/browser/adobe_flash_nellymoser_bof ? I tried to access it, but I can't even find it in MSF search Adobe or Flash or anything like this. What should I ...
1
vote
0answers
262 views

Metasploit ssh_enumusers stops instantly [closed]

When I try to run the : http://www.rapid7.com/db/modules/auxiliary/scanner/ssh/ssh_enumusers using the given options besides proxies I get the output: msf auxiliary(ssh_enumusers) > run [*] ...
1
vote
0answers
114 views

Bypass browser requirements to see exploit code [closed]

Is there any way to bypass metasploit browser requirements to browse exploit code generated my metasploit? How can I configure metasploit, so that I can see exploit code with browser, which normally ...