Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
1
vote
1answer
2k views

Reverse PHP shell disconnecting when netcat listener

Whilst performing a penetration test on a testing box, I came across a vulnerability regarding LotusCMS: https://www.exploit-db.com/exploits/18565 Rather than rely on Metasploit or Meterpreter to ...
1
vote
0answers
193 views

Metasploit: Exploit not starting connection to handler [closed]

I am using an Android 4.4 VirtualMachine and a Kali Linux 2018.4 VirtualMachine. Lan Network: Kali VM : 10.0.0.27 Android VM : 10.0.0.29 I did a .apk of the WeChat app with kwetza on Kali : git ...
1
vote
0answers
52 views

Limited ESP Length in Buffer Overflow Sample C Program

May I know how to increase the length of ESP on a sample c program which allows me to execute shellcode on the stack. However, as of now, the sample c program only has an ESP length of 61 thus ...
2
votes
1answer
744 views

Nessus found a vulnerability, but no corresponding exploit on Metasploit : How to run with meterpreter

I ran Nessus on a local network, it found a critical vulnerability for the router: MikroTik RouterOS < 6.41.3 SMB Buffer Overflow (Vulnerability description : Exploit-db) But I can't find any ...
2
votes
1answer
227 views

Can't log in dvwa with a simple python program, even though login credentials are good

import requests target_url = "http://127.0.0.1/dvwa/login.php" data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"} ...
4
votes
1answer
2k views

Metasploit is not detecting newly imported python exploit

I have added OpenSSH 7.2p2 - Username Enumeration exploit to Metasploit, which is a python exploit. But after so, it does not detect that exploit every way I tried. I have placed it under the ...
1
vote
1answer
1k views

Windows 64-bit Reverse TCP Shell not working

I am sending shellcode to a 64-bit binary running on a Windows machine. This binary, copies the shellcode to an executable region of memory and executes it. I am generating the shellcode using ...
3
votes
0answers
530 views

How to run Metasploit WMAP on site that requires SNI

Apologies if this an obvious question, documentation seems to be a bit thin on the ground. I'm attempting to scan (with permission) a site that redirects to its https version, and requires SNI to ...
1
vote
1answer
7k views

Username and password files in Kali [duplicate]

I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23. I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
0
votes
1answer
149 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
-2
votes
1answer
553 views

Open ports 6002 and 9002? [closed]

So I was scanning a clients computer and nmap came up with two open ports: 6002 and 9002. Both are running Telnet and both have the same banner in Spanish: Spanish to English translation You are ...
0
votes
1answer
236 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
2
votes
2answers
190 views

Programming Metasploit

I try to make a Metasploit AutoRunScript for android. The First .rc file has this config use exploit/multi/handler set PAYLOAD android/meterpreter/reverse_tcp set LHOST xxx.xxx.xxx.xxx (my IP) set ...
0
votes
1answer
71 views

Disable modules in Metasploit Pro

I have been using Metasploit pro for last few days. I understand that exploiting in Pro version is automatic using exploit ranks(GUI). But If I want to disable certain modules while exploiting, is it ...
5
votes
1answer
3k views

How would I turn an open telnet shell into a Metasploit session?

I'm trying to pivot using a metasploitable2 system, which has a shell port open in a scan: port status service 1524/tcp open shell Accessing the root shell is easy enough in telnet, ...
0
votes
2answers
812 views

SambaCry CVE-2017-7494 returns “Exploit completed, but no session was created”

I am using this exploit on msfconsole to exploit a VM with samba and the configuration is as follows: Module options (exploit/linux/samba/sambacry) Payload options (linux/x64/meterpreter/reverse_tcp) ...
0
votes
1answer
148 views

trans2open not working on metasploit

I am using metasploit to exploit a vulnerable version of Samba on a remote host. Samba version 2.2.8, downloaded directly from the cve site. But when I use trans2open exploit with payload (generic/...
1
vote
1answer
335 views

Metasploit x86/unicode_upper failed with “An encoding exception occurred”

I'am playing a bit with assembler and I decided to test out how metasploit encodes a payload into Unicode uppercase characters as assembly instructions which are meant to be decoded by itself. So I ...
0
votes
1answer
499 views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
1
vote
2answers
195 views

nmap -sn through proxychains fails

Why I can not do the following with nmap? proxychains nmap -A -v 10.185.11.0/24 Output: ProxyChains-3.1 (http://proxychains.sf.net) Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST ...
6
votes
1answer
9k views

When to use a Bind shell vs. a Reverse shell?

Metasploit question:- I know what these shells are but am a little confused on the execution. Assuming that you successfully get a meterpreter shell and want to upload a backdoor, what should you ...
0
votes
1answer
2k views

Difference between Run and Exploit

When using Metasploit for running exploits you have two options: run exploit what is the difference between these two commands?
0
votes
1answer
148 views

location of msfconsole generated executable in Kali linux [closed]

I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe. But I cant find the location of the shell.exe ...
0
votes
1answer
1k views

The old syntax for showing payload options in msfvenom does not work

I've tried so many times with different syntax to display the payload options in msfvenom. However, I cannot get it to run. Version 1. [*] exec: msfvenom -p windows/shell/bind_tcp --payload-options ...
3
votes
3answers
541 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
1
vote
1answer
147 views

How does Client-Side-Exploitation get the System-level-shell in Metasploit?

For example, if my client is using a vulnerable Internet Explorer which was vulnerable to the Aurora Vulnerability (I know its old and patch, but for now, let's assume) then I use Metasploit Client-...
1
vote
2answers
209 views

Hacking by metasploit

Is it possible to hack an Android device while the victim is using vpn? I've tried hacking my Android device on WAN and it worked but when I connected my cellphone to a vpn network it seemed that the ...
0
votes
0answers
304 views

Pen testing, Windows: Using credentials to impersonate users from SYSTEM

Following simple scenario during pen test: I have remote code execution on a windows box and am SYSTEM (either because of the way I got onto the box or because of the persistence method I chose) I ...
1
vote
0answers
1k views

Handler failed to bind to ip:port (my port is open) [closed]

I was trying to do some connection testing with my metasploit on external network, but I can not connect to it even though my port is open. Testing the port But when I try to connect to make a ...
0
votes
1answer
575 views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
1
vote
0answers
482 views

Metasploit: Lateral movement with named pipe pivot

I‘m trying to demonstrate lateral movement to a windows machine that is not directly reachable and should connect back via named pipe: Windows machine w1 does reverse_tcp/reverse_https to attacker. ...
1
vote
1answer
561 views

Metasploit: Executables are not working after Reverse Shell

I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used: Payload: windows/shell/...
-2
votes
1answer
221 views

Is it possible to write all metasploit command in a text file and run it?

I wonder, is it possible to load a command text file with metasploit? for example if I want to use a scanner module I can just write all the command in a text file and run it with the metasploit, so I ...
-5
votes
1answer
86 views

How to execute a command before meterpreter connection [closed]

I will use android/browser/webview_addjavascriptinterface to pwn an Android target, but I want to execute a command before the victim falls in the exploit. I want to install an APK file on the victim ...
1
vote
2answers
3k views

Meterpreter commands not working in shell [closed]

I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my windows machine connected to ...
0
votes
1answer
727 views

proftpd backdoor not backdoored

I wanted to practice exploiting system using proftpd backdoor. I use the exploit proftpd_133c_backdoor and the payload reverse_perl.I learned on how to exploit using this link, https://www.youtube.com/...
3
votes
1answer
337 views

Metasploit: pivoting to machine without internet access

Let's imagine the following (not uncommon) scenario: I'm doing a pentest from the outside I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
0
votes
1answer
485 views

Norton blocks my Metasploit attacks, is there a way to bypass?

im pretty new to pentesting and im just about learning using metasploit. So i setted up my old pc at home ( Windows 7 Professional, x64 architecture ), connected it to my lan and started trying to ...
2
votes
1answer
488 views

Metasploit MsfVenom - Payload binds shell, but unable to spawn it with netcat

Running a SEH BoF exploit script that contains a payload that is generated from msfvenom as such: msfvenom --payload windows/shell/bind_tcp --format py --arch x86 --platform windows --bad-chars "\...
2
votes
1answer
528 views

Issue with metasploit RHOST LHOST

I'm having a weird bug. I've tried this result on two different VM's on the latest Metasploit version. msf exploit(windows/smb/ms08_067_netapi) > show options Module options (exploit/windows/smb/...
1
vote
3answers
3k views

Port forwarding for reverse tcp

I am using metasploit to create a payload for Android phone (for educational purposes). If my target and my computer are on the same network it works fine. But when my target is outside connected to ...
1
vote
2answers
411 views

My ISP blocks incoming ports so I can't even run webserver let alone 'reverse shell', any ideas? [closed]

I'm looking for ideas on how to run lab environment from "victim" test PC at work and "attacker" - my home PC. Both are on separate ISPs, but it seems that my ISP at home blocks anyone trying to ...
3
votes
1answer
211 views

Where I am going wrong with Veil? Cannot get a reverse shell?

This is how I am generating the payload in Veil 3 > use XX > set LHOST X.X.X.X > set LPORT 3333 > generate The payload generates successfully and transferred to victim machine Win7 SP1 ...
2
votes
0answers
984 views

php_cgi_arg_injection fails to bind on 0.0.0.0 when multi/handler is running

I have a server setup in a remote lab that I'm attempting to test against with php_cgi_arg_injection. The exploit works, but no session is created. The local network router is configured to port ...
1
vote
2answers
761 views

Why does metasploit still work?

Metasploit is publicly available as well as all the exploits and the vulnerabilities in its database. This means that a company can patch and secure its network and software accordingly to the ...
-1
votes
1answer
786 views

How can a reverse shell payload be executed? [closed]

With metasploit it is possible to open a reverse shell via meterpreter. For this you need to place a payload on the attacked server. E.g., there is an endpoint open that places files on a server, and ...
3
votes
1answer
600 views

Metasploit nmap_run -e hangs with Using code '404' as not found

Background When I run Metasploit, it hangs at the same place no matter what I do. It stops at this line, [*] Using code '404' as not found. Steps to reproduce, msf > mfsconsole msf > load ...
4
votes
1answer
652 views

Custom EXE Template Metasploit 64-bit ASM PE Syntax

I asked this previously then deleted since I think I asked the question without gearing it towards msfvenom and custom EXE templates. There is a 64-bit Windows PE written in assembly that ships with ...
1
vote
0answers
1k views

Unable to migrate meterpreter into 64 bit process? [duplicate]

How to migrate a meterpreter process into a 64 bit process? When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
806 views

Run metasploit console resource scripts

Hi I want to do this in my lab environment: When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...