0

I have just compromised a computer(legal in my local environment) and want to run nmap from that host to see further inside the network. I know I can use metasploit modules like "auxillary/scanner/portscan/tcp/", but it seems like it isnt as good as nmap. I tested this by running nmap on a an ip from my computer and the module from the compromised host(route add). But the module only gets ssh up, while nmap gets several like port 80, 443 and more.

It might be that the compromised computer is blocked my firewall, but I think that is highly unlikely.

So how do I run nmap from the compromised host?

Both my computer and the compromised one are on the same IP range, but I wanted to see if the module is as good as nmap.

If i run nmap from msfconsole after adding a route, will nmap then do the scanning from the compromised host?

Improve this question
6
  • why not upload nmap and run it on the target?
    – schroeder ♦
    Nov 12, 2020 at 14:03
  • I dont know how. Do you have any link that can help me achieve that?
    – Mr Krisey
    Nov 12, 2020 at 14:11
  • This is all stuff that's covered in the basic metasploit books and official pages. If you have a meterpreter session, you can use upload
    – schroeder ♦
    Nov 12, 2020 at 14:13
  • Thanks! Is uploading nmap to scan again the way the professionals do it? Or will they be satisfied with using metasploits modules.
    – Mr Krisey
    Nov 12, 2020 at 14:18
  • They use the method that works. Sometimes you can successfully tunnel traffic through the target, sometimes you can't. Sometimes built-in modules work, sometimes they don't.
    – schroeder ♦
    Nov 12, 2020 at 14:21

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.