Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

1
vote
2answers
5k views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
2
votes
2answers
175 views

How can I add modules to a Payload on Metasploit

I know how to create payloads using Metasploit and then script a AutoRun script, so when the victim machine connects back to my Kali Server it execute some actions. Works sweet! What I wanted to do ...
1
vote
0answers
18 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
1answer
50 views

ms08_067_netapi not performing expectedly on Windows XP Sp1/Sp3

I tried the exploit with meterpreter reverse tcp on both Sp1/Sp3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
56
votes
6answers
12k views

Do actual penetration testers actually use tools like metasploit?

I've played around with metasploit simply as a hobby but am wondering if actual pentesters and/or hackers actually use metasploit to get into systems or do they write their own post exploitation ...
22
votes
3answers
3k views

Metasploit Meterpreter alternatives

These days I am testing various type of client hacking techniques, but in all scenarios I am using Meterpreter variations as payload. Now I can bypass Anti-Virus and Firewalls easily, but Symantec ...
-3
votes
4answers
148 views

Is it possible to hack a single computer without injecting a payload or a virus? [on hold]

I know the ways to hack a computer or a mobile phone by injecting payload using some exploits with metasploit. We can inject a exe, or we can use pdf file, or docx file as I know. I wonder the ...
0
votes
0answers
21 views

ms03_026_dcom not working on Windows XP Sp1

I have been trying to use metasploit and kali linux when I came across the idea of using windows XP sp1 (checked the service pack with winver.exe on XP). I used the famous ms03_026_dcom and payload of ...
0
votes
0answers
17 views

Attack on Android phones [closed]

In the Metasploit attack on Android, the exploit requires the victim to install a malicious app which they have to open. The app then creates an open session which helps us to sniff data. My question ...
3
votes
2answers
35 views

Is there any downside to always declaring some default bad chars when generating exploits?

When setting the bad chars for shell code, is there any downside to just assuming that you should mark \x00 and \x0a as bad?
3
votes
2answers
44 views

metasploit exploits and payloads documentation

Where can i found the documentation of the exploits and payloads available in metasploit. I am looking for a documentation that tells what does the exploit or the payload do, and possibly a ...
1
vote
1answer
93 views

How to brute force HTTP Basic Authentication requested with XHR?

How can one brute force a website using HTTP Basic authentication using metasploit which uses XHR in background? I am getting error "No URI found that asks for HTTP authentication". Relevant headers ...
2
votes
1answer
39 views

Can I use a domain name instead of an IP for msf persistence?

After getting a shell (meterpreter) on the victim, the first thing to do is to migrate and get the system, and then you would install a persistence to connect back to you. But the problem is the ...
0
votes
0answers
25 views

Encode metasploit

Using metasploit I generated an exploit exploit/windows/fileformat/ms14_017_rtf for windows 7 with windows/shell_reverse_tcp payload. In show advanced, I use option EnableContextEncoding true and it's ...
3
votes
2answers
241 views

How to run exploit/windows/local/bypassuac using AutoRunScript?

Is there a way to run exploits that require parameters, such as the one in the title, using AutoRunScript? I was able to use AutoRunScript to execute some post commands perfectly, such as ...
1
vote
1answer
50 views

Removing remnants of a Metasploit exploit

Is it possible to remove a Metasploit payload/meterpreter from a compromised system? My question is mainly based on antiforensics (Leaving aside Memory forensics which is probably unavoidable but more ...
0
votes
0answers
14 views

msfconsole pipe with external module

Hi I'm new to metasploit and I saw that's come with John the Ripper included. My question is how can I pipe the output with an external module. (e.g aircrack in this case) Like this: john ...
1
vote
2answers
72 views

Using msf to connect to netcat listener and shell_to_meterperter

I've been trying for hours and failing to do something that should be simple! I have a box w/ admin (taking OSCP - nothing illegal). I used an RDP exploit, got a shell, added a user, put user in ...
0
votes
0answers
33 views

meterpreter reverse_https

Today I made a pause on my study guide to research what kind of traffic I'm generating with a few exploits and payloads, and actually I'm more interested in getting real understanding of the traffic ...
1
vote
0answers
23 views

initialAutoRunScript in BrowserAutoPwn2

I am trying to add some custom commands to browserautopwn2. When I get the session using the initialAutoRunScript option like this: msf > set initialautorunscript "upload /root/x.txt %temp%" ...
1
vote
2answers
97 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
0
votes
1answer
72 views

How do I remove a metasploit infection?

My brother in law sent me a link in a Facebook PM for dummy me to click on. I did, nothing happened, I thought nothing of it. Well he told my husband since I clicked on it he can now hack my Facebook ...
-3
votes
1answer
141 views

Metasploit stuck on “Sending backdoor command…”

I am trying to use Metasploit on the Unreal IRCD 3281 backdoor. I have tried with different kinds of payloads but the program gets stuck on the last line: msf exploit(unreal_ircd_3281_backdoor) > ...
1
vote
0answers
75 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
2
votes
0answers
65 views

importing OpenVAS xml in metasploit

I am practising in my lab with some metasploitable machines, and I just realised that the vulns declared by OpenVAS 6.01 in the scan report aren’t imported in Metasploit 4.11.5 by the db_import ...
3
votes
3answers
582 views

Should anti-virus detect metasploit payloads?

As part of a workstation pen test, I copy a simple metasploit payload onto the workstation, and try to run it. Usually this is blocked by anti-virus software. However, sometimes it isn't (I won't name ...
-2
votes
2answers
47 views

Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin

I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below. I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...
0
votes
0answers
19 views

Metadata and Adding Files

If a person had files they wish to add to a computer and had physical access to the computer could the docs or emails be added with false metadata to indicate the documents had been added at a ...
0
votes
0answers
20 views

How would you change the log files on a Macbook using Yosemite?

I am a total novice and know nothing about hacking or security. I am a writer. I am trying to figure out the best scenario for adding something to someone's computer. If a person had physical ...
2
votes
2answers
1k views

How to exploit vulnerabilities found from OpenVAS?

I could not find any match for the vulnerabilities with their CVE numbers found from OpenVAS scanner with exploits using sites such as Rapid 7 Vulnerability DB and Exploit DB, or by using a command ...
1
vote
3answers
295 views

Windows 7 Exploits

I just found my old, Windows 7 Ultimate installer DVD, so I thought I would set it up in a pentest-lab type environment, see what's possible and have some fun with it. So are there any publicly ...
2
votes
1answer
604 views

msfvenom payload problem

This is for educational purposes only! I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command msfvenom -p android/shell/reverse_tcp ...
1
vote
0answers
44 views

The process of using Metasploit to get in Systems [closed]

I am new in metasploit. I get the basic concept of exploiting a system or whatever your trying to do. You find a vulnerability in a system, you use an exploit or make one. Doing that on your local ...
3
votes
1answer
4k views

service metasploit start failed to start metasploit service [closed]

I am trying to setup Metasploit for penetration testing. However first of all I cannot get the database to connect. Also whenever I attempt to start the service using service metasploit start I get ...
3
votes
1answer
151 views

Upgrade shell to meterpreter behind NAT

I've been playing around with Metasploit the past week, and am successfully able to obtain a basic shell of the victim over the internet. I've currently: Created a DDNS that points to my public IP ...
1
vote
0answers
120 views

The pdf embedded exe generating error on the target machine when executed

These are the steps that I performed in order to generate a PDF embedded with exe. Attacker machine (Windows 7): msf > use windows/meterpreter/reverse_tcp msf payload(reverse_tcp) > set LHOST ...
1
vote
1answer
76 views

What is the difference between FTP Brute force with hydra and Metasploit? [closed]

What is the difference between FTP Brute force with hydra and and FTP brute force with Metasploit ?
1
vote
0answers
121 views

Converting Metasploit module to standalone Python script [closed]

How easy is to convert Ruby code to Python code and to change Metasploit module into standalone Python script for Linux?
1
vote
2answers
262 views

Meterpreter and staged payloads

So starting with the absolute basics - an exploit is the means used to gain access to a vulnerable system and a payload is the actual program/shellcode used to fulfill attacker's intentions A staged ...
1
vote
1answer
118 views

Metasploit automatic module execution on receival of shell?

After reading through a couple of webpages referring to metasploit I stumbled upon a post referring to the auto execution of metasploit modules upon the receiving of a shell. Namely the post ...
2
votes
3answers
122 views

Does brute forcing require a password and username list?

I have been learning metasploit. One thing I noticed was that, all the videos on YouTube, which said "Brute forcing", used a password and a username list. My question is that, won't this be called a ...
0
votes
0answers
130 views

Injecting meterpreter/reverse_tcp into apache2 with msfvenom results in seg fault of apache2

I've been trying to use msfvenom with the linux/x86/meterpreter/reverse_tcp payload and an apache2 binary. My intent is to create a tainted version of apache2 to establish a persistent backdoor on the ...
13
votes
6answers
20k views

Browsing exploits with Metasploit console

Is there any way to browse certain exploits in MSFconsole? The show exploits command shows too many and I cannot find a way to show just Windows file format exploits, for example.
0
votes
0answers
32 views

Disguising as another computer using SMB Relay?

I've got a server that constantly checks for the existence of certain parameters on every PC in the web using SMB, if it fails to find those parameters it marks it as a rogue PC. I've understood that ...
0
votes
0answers
91 views

deliver a malicious payload via a cloned website

I've been tasked with conducting an internal pentest, I'm relatively new to this so please bare with me. Some time ago, I used setoolkit and I would have the option to clone a website and attach a ...
9
votes
1answer
2k views

NOPS in Metasploit

Problem I do not know what a "NOP" is in Metasploit Framework or otherwise. What I do know Metasploit Unleashed says, "Nops keep the payload sizes consistent." A few question posts mention buffer ...
4
votes
2answers
2k views

Metasploit Get Shell Through NAT

Ok first of all this is legal and I have it in writing my friend and I are attacking eachother to get better and not break the law. Setup I have a VMWare image running BT5R3. It uses VMWare's NAT ...
1
vote
0answers
74 views

XSSF cookie stealer not working

I am playing with XSSF with Metasploit and attacking Mutilldae(security 0). I was able to get the generic XSS inject working. The inject was added to the Mutilldae blog. However, when I try to get the ...
1
vote
0answers
87 views

Metasploit payload problem [closed]

Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
2
votes
1answer
306 views

Is there an equivalent of meterpreter's “run persistence” for Linux?

As in the question - how can I install a persistent backdoor with Metasploit on a Linux target?