Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine
2
votes
0answers
51 views
POC of a Java exploit using leftover JREs
Summary: I would like to show a proof of concept of a Java exploit using an old JRE on an up-to-date machine to cut short discussions on the "but we are patched so why removing older versions" ...
-6
votes
2answers
68 views
Install Metasploit under Cygwin? [closed]
Is there a way to install Metasploit under Cygwin? Metasploit is meant to be run under a linux environment.
The Windows installation doesn't have many tools such as msfpayload available.
Please ...
0
votes
3answers
93 views
Random connections to meterpreter reverse tcp listener
I am currently learning some basic penetration testing using Metasploit. I have set up a reverse tcp meterpreter payload that I run on an Amazon EC2 Windows instance. Sometimes while moving a new ...
8
votes
1answer
1k views
Detecting reflective DLL injection
In the past few years, malware (and some pen-test tools like Metasploit's meterpreter payload) have begun to use reflective DLL injection (PDF) to load a DLL into the memory of a process. The benefit ...
4
votes
4answers
348 views
Obtaining the IP address of a virtual machine to use Metasploit
I am beginning to learn Metasploit and, to play safe, am practicing it out on a virtual machine.
The target machine, which is a virtual machine, is under NATing. How do I access it/ connect to it- ...
6
votes
3answers
373 views
Is it safe to install metasploit in my daily-used computer
I'm new to metasploit, and want to install it on my daily-used computer; but I'm not sure whether it is safe.
Are there any best practices when using metasploit?
-1
votes
1answer
82 views
What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
I've found this vulnerability (http://www.metasploit.com/modules/exploit/multi/http/jboss_invoke_deploy) but can't seem to set proper values for exploit to work , payload shown on site gives me worn ...
5
votes
1answer
192 views
What are the good resources for learning Metasploit?
Ok. I'm a newbiw (Script kidde) and I want to learn more about Metasploit. Not for fun, but to understand what exploits are, how they are used, and deployed. I've heard a lot about the Metasploit ...
3
votes
1answer
89 views
Why is a separate reconnaissance server needed for DNS cache poisoning?
I'm trying to understand how Metasploit's DNS BailiWicked Host Attack module works. One of the required module options is a "reconnaissance" nameserver (option RECONS).
What I understand from the ...
9
votes
1answer
149 views
NOPS in Metasploit
Problem
I do not know what a "NOP" is in Metasploit Framework or otherwise.
What I do know
MS Unleashed says, "Nops keep the payload sizes consistent."
A few question posts mention buffer ...
1
vote
2answers
343 views
How to test my website for the rails YAML vulnerability
I am quite puzzled by how to test my rails app for the YAML vulnerability
first, I upgraded to the latest rails 3.2.11, and I tried this
It gave me not likely to be vulnerable or URIPATH must be set
...
0
votes
2answers
334 views
Msf and exploitdb on Backtrack 5
Metasploit (msf) doesn't see exploits from exploitdb. I've just updated directory on my Backtrack
cd /pentest/exploits/exploitdb
svn update
How can I load them now into msf? When i use a script ...
3
votes
4answers
328 views
Automating Metasploit attacks, is it possible to generate all (most) modules?
I work on creating signatures for all metasploit modules. I need to stimulate pretty much all the attacks (exploits) in metasploit without actually targeting a real victim (I don't think autopwn can ...
-4
votes
4answers
124 views
Law & Ethics - I'm not be breaking the law its the computer [closed]
So it would be illegal to run a metasploit attack against a computer you don't have permission to do so against, right? But what if I configure a web server to nmap scan, then metasploit attack ...
3
votes
1answer
222 views
Metasploit Wifi Modules Asking for lorcon2
I'm using Metasploit Framework for Wifi Exploiation, on Backtrack R2, but I'm getting this error:
The Lorcon2 module is not available: no such file to load -- Lorcon2
But actually, I have installed ...
1
vote
2answers
191 views
About generating Exe files from Metasploit scripts
I'm a newbie to Metasploit framework. I want to create a standalone application (an exe file) exploiting MS08-067 vulnerability. Is that possible for me to have the application generated from ...
1
vote
2answers
202 views
Why wouldn't the reverse shell connect back using the same port that exploited the server?
The reverse shell payload from msf use a new port to connect back to the attacker, therefore if the target server has outgoing filters, attack would fail.
i.e
established server:ftp <-> ...
-2
votes
2answers
196 views
using exploit/unix/webapp/tikiwiki_graph_formula_exec
I have backtrack and metasploitable running on my Macbook pro and I am trying to run **exploit/unix/webapp/tikiwiki_graph_formula_exec** exploit on msfconsole to penetrate the metasploitable operating ...
0
votes
2answers
171 views
can a backdoor executable be used on an occupied port?
Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
0
votes
0answers
157 views
Having a problem with NBNS spoof module in Metasploit [closed]
I am having a problem with the NBNS spoofer giving me an error and kills the job. Have tried multiple spoof IPs but seems not to work. The error messages say ENETUNREACH Network is unreachable as I am ...
0
votes
0answers
92 views
Can nmap out of MSF but can't within [closed]
I am running Mac OS X 10.7. In Metasploit, this is my version
msf > version
Framework: 4.5.0-dev.15713
Console : 4.5.0-dev.15672
But when I try nmapping on msf:
msf > db_nmap -A ...
6
votes
3answers
830 views
Disadvantages of metasploit Framework for windows
Are there any explicit disadvantages in comparison to running it on a UNIX machine these days?
8
votes
4answers
585 views
Nessus Scan Port ID mapped to Metasploit Vulnerability exploits
My Question: Is there any sort of website that maps Nessus Scan IDs to Metasploit Vulnerabilities?
My Situation: I'm learning about penetration testing and I'm beginning to get frustrated seeing a ...
0
votes
0answers
79 views
Notable slow start on db_connect [closed]
I use postgresql to with msf4, db_connect() is notably slow, it works after like 60 seconds, and database cache all functions.
What caused the day?
2
votes
1answer
283 views
Airbase-ng & Metasploit the perfect pair
So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort.
Is there anyway ...
-1
votes
1answer
176 views
How do I configure a pivot system in Metasploit, for remote access to a network? [closed]
I am just starting to use Metasploit and I would like to use a linux system that I have in my production network to pivot from to complete monthly scans on that network. How do I setup the ...
2
votes
0answers
113 views
Need a little help with Metasploit and Java? [closed]
I'm a junior programmer and i was asked in my job to test java using metasploit... I followed this detailed environment: ...
2
votes
2answers
216 views
Shellcode that is smaller than 295 bytes that spawns a shell [closed]
Metasploit payloads produce more than 300-byte shellcodes.
But I want my shell-spawning shellcodes to be less than 295 bytes.
Can anyone show me the links to these shellcodes?
Thanks.
2
votes
2answers
209 views
Tools/methods helping to determine application/protocol serving specific port
I do blackbox testing of the server and figured out that there is a bunch of listening ports. I need to determine what services/protocols those ports are used for.
What I've tried so far is to use ...
-1
votes
1answer
956 views
How to bypass firewall protection to hack windows server 2003? [closed]
I am trying to hack windows server 2003 sp2, i can see a lot of services running on target, there is also a lot of backdoors listing on ports like netbus, remote-everything ....
But Firewall (as i ...
1
vote
1answer
406 views
on stack execution on windows 7 :: metasploit :: meterpreter :: executable crypter
I posted this on stackoverflow, was advised to move it to security section.
I was writing an executable crypter as an exercise with goal of Antivirus evasion, now the problem is the final executable ...
5
votes
6answers
3k views
Can you recommend a good book on Backtrack/Metasploit
I have just downloaded Backtrack 5 R2 with Gnome and, while it looks cool, I don't really know where to start.
I see it comes with Metasploit but, to be blunt, I still don't really understand what ...
1
vote
1answer
1k views
Backtrack 5 R2 & Metasploitable
I have configured the OpenVAS server as per wiki instructions:
http://www.backtrack-linux.org/wiki/index.php/OpenVas
And i ran the following commands:
msfconsole
load openvas
openvas_connect admin ...
9
votes
4answers
3k views
Browsing exploits with Metasploit console
Is there any way to browse certain exploits in MSFconsole? The show exploits command shows too many and I cannot find a way to show just Windows file format exploits, for example.
0
votes
1answer
197 views
Metasploit Closing Connections?
Whenever I attempt to use an exploit (that I know will work) from Metasploit in Windows on a machine on my LAN, I always get the error
Exploit exception: An established connection was aborted by ...
0
votes
1answer
643 views
nessus scan against metasploit exploits
I am thinking about launching wide nessus scans (in the "IP range" sense) against exploits present in metasploit. The idea is to limit the number of plugins so that that the scan finishes in a ...
1
vote
2answers
139 views
Metasploit Development Reference
The Metasploit team provides some documentation on how to develop exploits, but other than looking through the sourcecode (which is annoying considering how much time I spend going from this file to ...
