Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

1
vote
1answer
120 views

How can I add modules to a Payload on Metasploit

I know how to create payloads using Metasploit and then script a AutoRun script, so when the victim machine connects back to my Kali Server it execute some actions. Works sweet! What I wanted to do ...
1
vote
1answer
2k views

Trying to reproduce a file upload compromise on Joomla

After telling my workmates and boss that we had a very critical lack of security controls, finally we got compromised! They had a Joomla 1.5 which was exploited using a file upload vulnerability. WSO ...
-2
votes
1answer
49 views

why the reverse_https payload runned at 0.0.0.0:443?

I created a reverse_https backdoor ( windows/meterpreter/reverse_https ) with msfpayload and then with multi handler want to create a reverse shell from my target , but when I exploited the handler I ...
1
vote
0answers
51 views

Metasploit reverse_http(s) PAYLOAD for linux target

During exploitation via metasploit's browzer_autopwn, I need to set a payload using http or https channel on a linux target. But there is no reverse_http(s) available in linux payload category. What ...
1
vote
0answers
79 views

Detecting reflective DLL injection any other ways?

any way to detect it? maybe using mcafee hips rules? Are there any known Techniques to detect it ? like walking the VAD tree or something?
1
vote
0answers
46 views

where to find a detailed demonstration on how to imitate the Token Kidnapping exploit by Argeniss?

I am looking for a way to do the Token Kidnapping’s Revenge exploit by Argeniss. (The vulnerability is explained in here) I am studying security (beginner) and I would like to imitate the attack to ...
1
vote
0answers
74 views

Backdoor file with custom payload

Is there a way in metasploit to add a custom exe/script as payload to a file (exe/pdf/doxc)? I'm asking this in the context of a SE media dropping scenario, where a file when executed, sends data to ...
1
vote
0answers
112 views

msfelfscan with x64 support?

I'm trying to lookup all call rax instructions with msfelfscan, but %> msfelfscan -j rax /bin/ls Invalid register "rax" Was it not supported?
0
votes
0answers
115 views

Sysinternals tool suite not working on low priv shell

Currently oscp student. I asked this on the oscp forum yesterday, but no responses so far. I am new to infosec, but have 18 years of education / work experience in IT. As far as I can tell, ...
0
votes
0answers
149 views

How does Metasploit's payload work with a remote target?

I have some simple questions. I often use Metasploit in my pentest engagements. It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
0
votes
0answers
67 views

Metasploit Framework console misencodes text

I am running the Metasploit Framework (v4.10.2) on Kali Linux 1.0.7. Some commands return this weird, misencoded (I think) text instead of what it should be returning. What can I do to fix this? ...
-2
votes
0answers
23 views

Encode Windows excutable through msfencode

I read about msfencode and I am confused - how can I encode Windows executable with msfencode and how can I decode it in any langauge like C++ or C#? If I try msfencode -i /root/desktop/calc.exe -a ...
-2
votes
0answers
36 views

How does this Metasploit DNS attack work?

The question is about the Metasploit Framework BailiWicked attack. I want to give it a go, and want to test my internal DNS server, but was curious about how this attack works. I've tried to find ...