A Guide to "Hacking with Metasploit" via Team Spiders - Metasploit Network

<h1> What is an Exploit?</h1> An exploit is designed to take advantage of a flaw or vulnerability in a computer system. To explain in other terms, exploitation would be similar to using a lock pick on a door to gain access to a house.<br /> Vulnerabilities within a system lie with poor coding, bugs, or misconfiguration. These are the points where hackers or pentesters try to drive a wedge into so they can gain access to a system. Zero-day exploits are exploits that are created that have not yet had a patch created to mitigate the vulnerability.<br /> Exploit development, especially zero-day’s are extremely difficult and expensive to create. You first find a flaw in a system, and then develop software to exploit it. A lot of people mistakenly believe that the big hacks that are in the news are a result of a zero-day. Usually these hacks are due to system misconfigurations, phishing, or attacking non-updated systems. This is why keeping your system updated is the BEST thing you can do to harden your computer security.<br /> <h1> Hacking With Metasploit</h1> Metasploit is a hacking “framework” that was developed by <a href="http://en.wikipedia.org/wiki/H._D._Moore" target="_blank">HD Moore</a> in 2003. Metasploit is simply a repository of exploits that have been packaged to work with a common formatted syntax to exploit. Custom exploits can be written and added to metasploit to be used.<br /> Metasploit exploitation is a very simple concept. The structure of an exploit is essentially the exploit combined with a payload. The exploit is what is used to leverage the vulnerability to gain access and the payload is what is “thrown” at the distant machine once the hole has been created.  A <a href="http://www.offensive-security.com/metasploit-unleashed/Meterpreter_Basics" target="_blank">meterpreter</a> shell or a root level shell on the target is often the goal as it will allow you privileges and functionality to do whatever you want. This could include data extraction, malware transfer, backdoor creation or lateral movement to another machine on the network.<br /> <h1> Example</h1> Earlier we <a href="http://hackmethod.com/hack-methods-active-recon-nmap/" target="_blank">conducted a scan</a> of a target machine in our <a href="http://hackmethod.com/building-hack-lab-free-part-1/" target="_blank">Hack Lab</a> and discovered several services open.<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/Capture1.png"><img alt="Capture" class="aligncenter wp-image-707 size-full" height="631" src="http://hackmethod.com/wp-content/uploads/2015/02/Capture1.png" title="nmap scan" width="1018" /></a><br /> During our recon phase we took note of all the services running. We then research each of those services further to see if they have any known vulnerabilities. This would include searching for <a href="https://cve.mitre.org/" target="_blank">Common Vulnerabilities and Exposures (CVE’s)</a> or searching <a href="http://www.exploit-db.com/" target="_blank">Exploit-DB</a>. This is also the point where a very advanced and experienced hacker could begin to construct an exploit of their own.<br /> Taking the first service from the top I see a version number and the name of the service running. This information is crucial as we can now tailor our search to find more information about the specific version. Searching in Exploit-DB we find that there is already an <a href="http://www.exploit-db.com/exploits/17491/" target="_blank">exploit written</a> and that it is a backdoor that was written into the source download file for vsftp.<br /> Moving over to our metasploit console lets check to see if the exploit has been entered into our database.<a href="http://www.offensive-security.com/metasploit-unleashed/Msfconsole_Commands#search" target="_blank"> Search commands</a> within metasploit are very useful as the database is very large.<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/msf1.png"><img alt="metasploit" class="alignnone size-full wp-image-791" height="364" src="http://hackmethod.com/wp-content/uploads/2015/02/msf1.png" width="1006" /></a><br /> As you can see, I searched for an exploit that held the name vsftp in the title. You can see that the version number matches the version number in our nmap scan. By typing “info” with the exploit name I can see more information about the exploit.<a href="http://hackmethod.com/wp-content/uploads/2015/02/msf3.png"><img alt="metasploit info" class=" size-full wp-image-793 aligncenter" height="575" src="http://hackmethod.com/wp-content/uploads/2015/02/msf3.png" width="624" /></a><br /> Again, I’ll go into detail on metasploit commands and syntax more at a later time. This is an overview of the exploitation process.<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/msf2.png"><img alt="msf2" class="alignnone size-full wp-image-792" height="344" src="http://hackmethod.com/wp-content/uploads/2015/02/msf2.png" width="1015" /></a><br /> To use the exploit we type the command “use” followed by the name of the exploit. This loads the exploit into our metasploit platform. By typing “show options” I can see what type of settings I need to set before launching this exploit. Usually this is mostly targeting information, IP address, port, OS type etc. Before we launch the exploit we need to select a payload type. This is going to tell us how the target computer is going to communicate with us once we’ve leveraged the backdoor vulnerability. To do this we type “show payloads”<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/msf4.png"><img alt="show payloads" class="alignnone wp-image-794 size-full" height="197" src="http://hackmethod.com/wp-content/uploads/2015/02/msf4.png" title="hack" width="894" /></a>In this case there is only one payload for us to chose from and so we combine it with our exploit by typing “set payload” followed by the name. Now when we type “show options” we’ll see options for both the exploit and the payload.<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/msf5.1.png"><img alt="set payload" class="aligncenter wp-image-797 size-full" height="473" src="http://hackmethod.com/wp-content/uploads/2015/02/msf5.1.png" title="show options" width="588" /></a>As you can see the only setting we really need to put in here is the IP address of our target. To do that we type “set RHOST” followed by the IP address and then we check our options again to verify the settings are correct.<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/msf5.2.png"><img alt="set rhost" class=" size-full wp-image-798 aligncenter" height="470" src="http://hackmethod.com/wp-content/uploads/2015/02/msf5.2.png" width="550" /></a>Now all we have to do is type “exploit” to launch the packaged up exploit and payload against the target.<br /> <a href="http://hackmethod.com/wp-content/uploads/2015/02/msf6.png"><img alt="exploit" class="aligncenter wp-image-799 size-full" height="294" src="http://hackmethod.com/wp-content/uploads/2015/02/msf6.png" title="hack" width="990" /></a>Success! As you can see our exploit spawned the backdoor against the vsftp service and granted us a command shell session. Once inside I want to verify where I am and who I am logged in with, which I do so with the hostname and whoami commands. As you can see I’m in my metasploitable VM as root. Now I can set up backdoors to sustain persistence, extract information or do recon on further nodes/hosts within the network.<br /> <h1> Conclusion</h1> As we discussed exploitation is simply leveraging a vulnerability in order to gain access to a target. In order to illustrate this I’ve used metasploit to show you how an exploit can be used. Is metasploit the only way to use an exploit? No, absolutely not. It’s just a framework that CAN be used to simplify the process. I urge you to follow this process in your own <a href="http://hackmethod.com/building-hack-lab-free-part-1/" target="_blank">Hack Lab</a> for the other services to see other ways you can possibly exploit the metasploitable VM.

A Guide to "Hacking with Metasploit" via Team Spiders - Metasploit Network

What is an Exploit? An exploit is designed to take advantage of a flaw or vulnerability in a computer system. To explain in other terms, ...

Read more »

How To Crash Windows 7 System With Metasploit And Remote Desktop Vulnerability - Metasploit Framework

<h2> Crashing Down Windows 7 System With Metasploit Attack </h2> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwQzTXmYcsNuZI2H58slI_lY2PTIOI8OAW2G5uTAdY_hvPmsEhPVfy3Ru87W6xs41VqGecEX6nQ3E9u4tzUGs0hEdCs2GA8j_YsqgT44UMxs4J1u94uDOP10hoYIgG66Cgfu9krZqpfrWF/s1600/BSOD+%282%29.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="137" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwQzTXmYcsNuZI2H58slI_lY2PTIOI8OAW2G5uTAdY_hvPmsEhPVfy3Ru87W6xs41VqGecEX6nQ3E9u4tzUGs0hEdCs2GA8j_YsqgT44UMxs4J1u94uDOP10hoYIgG66Cgfu9krZqpfrWF/s1600/BSOD+(2).jpg" width="320" /></a></div> <div> <br /></div> Now while the story so far has been smooth and cozy, it gets a bit tough from here on. For modern operating systems like Windows 7, there aren't any magical exploits like the ones we had for unpatched Windows XP machines. We had been able to <a href="http://kalitutorials.net/2014/02/getting-your-pentesting-lab-ready.html" target="_blank">hack Windows XP </a>and try some<a href="http://kalitutorials.net/2014/02/penetration-testing-hacking-windows-with-metasploit.html" target="_blank"> meterpreter features</a> on the exploited XP machine. However, when it comes to Windows 7, there aren't any direct exploits for gaining access to the machine. We can try some client side attacks, etc. Social engineering toolkit would be great for stuff like that. However, there is still one vulnerability that waits to be exploited. In Windows 7, there is a hole in the RDP port (3389) which can work over LAN as well as over the internet. Over the internet stuff can get a bit tougher, however on the LAN, this should be a piece of cake (if you have successfully followed out pentest tutorials so far).<br /><br /><a href="https://www.blogger.com/null" name="more"></a><br /><br /><h3> Requirements</h3> <div> Now you will require an<a href="http://kalitutorials.net/2013/08/kali-linux.html" target="_blank"> attacker Kali machine</a>, and a victim Windows machine, both running on Virtual machines. Windows 7 should be a fresh install, with no updates, as they can patch the vulnerability, making it unexploitable. Now when you have got all this setup, you can move on to further steps.</div> <div> <br /></div> <h2> Information Gathering</h2> <div> Now we'll have to find out the IP of out victim. This would have been complicated in a real life scenario, but in our case, you just go to Windows 7, open command prompt, and type ipconfig. You should be looking for IPv4 address of Local Area Network.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFSo1SQbDY2h4NXUfS6PCI_x9TxfjkBd1RDUySKUgLQSRLo_jQIQQdPtgVm_OcIwKsirB44WWoz11VjaNAKZM5cz6SYh8OnoJE_clhkIdM7k_1tkcQZ3NGHTQc6b9aSaqAua_mRIaOCs0Q/s1600/ip+of+target.PNG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="60" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFSo1SQbDY2h4NXUfS6PCI_x9TxfjkBd1RDUySKUgLQSRLo_jQIQQdPtgVm_OcIwKsirB44WWoz11VjaNAKZM5cz6SYh8OnoJE_clhkIdM7k_1tkcQZ3NGHTQc6b9aSaqAua_mRIaOCs0Q/s1600/ip+of+target.PNG" width="320" /></a></div> <div> In our case thats where the information Gathering Stops</div> <div> <br /></div> <h2> Starting Metasploit</h2> <div> Now execute the following commands to start metasploit framework</div> <blockquote class="tr_bq"> service postgresql start</blockquote> <blockquote class="tr_bq"> service metasploit start</blockquote> <blockquote class="tr_bq"> msfconsole</blockquote> So now you have msf console opened up (note my codes will still display root@kali but you don't mind it).<br /><br /><h2> Exploit</h2> <div> Now select the exploit that we are going to be using-</div> <blockquote class="tr_bq"> use auxiliary/dos/windows/rdp/ms12_020_maxchannelids</blockquote> Now do a show options, it will tell you that  it only requires two options, RHOST and RPORT. Rport is obviously 3389, the remote desktop port. The RHOST is the one you found out in the information gathering step. The use the following code to set the RHOST<br /><blockquote class="tr_bq"> set RHOST 192.168.---.---</blockquote> Surprising as it may seem, we are done already. Just type<br /><blockquote class="tr_bq"> exploit</blockquote> The target machine will get a Blue Screen Of Death and will reboot. You can do this as many times as you feel like, and in real life scenario, it can be really annoying, considering it can be done over the internet too.<br /><br /><h2> Possible Problems</h2> <br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOPrKD0n-HrSA67urT4g58CK4VLyk1wmOZDiy8SPmElDRPznlw91LRmw4dZu4SE9FOosxtXMiZM5qDPwO8EuefeO-GIZgEv2033PW5j83JIekOxNTwT6QY8l_50dmbvQJ4QfuDbZQwdiXF/s1600/error.PNG" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img border="0" height="75" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOPrKD0n-HrSA67urT4g58CK4VLyk1wmOZDiy8SPmElDRPznlw91LRmw4dZu4SE9FOosxtXMiZM5qDPwO8EuefeO-GIZgEv2033PW5j83JIekOxNTwT6QY8l_50dmbvQJ4QfuDbZQwdiXF/s1600/error.PNG" width="320" /></a><br /><div class="separator" style="clear: both; text-align: center;"> <br /></div> <div class="separator" style="clear: both; text-align: left;"> <br /></div>  If you get an error of this sort, then most probably your Windows 7 machine has firewall enabled, and is blocking your packets. An antivirus could do the same thing. There might be some issues with the LAN connection too. A good diagnosis test would be to ping the machine. Go to a kali terminal and execute<br /><blockquote class="tr_bq"> ping 192.168.---.---</blockquote> After waiting for a while, press ctrl + c which will stop the pinging. Look at the result-<br /><div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhw1NzXUFEZT5ig7Mse2uxFKvvpIDplRZviJXrc-fvK7FyH0qwgRygcC65Da-0FpYU3Fi8mVRNdDTV5FlrIKsP21YjS011Epo5DbpY_0cqTcMG7pgqDpy3Lg4j3336l744NZjBS3lcJicf6/s1600/wrong.PNG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="12" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhw1NzXUFEZT5ig7Mse2uxFKvvpIDplRZviJXrc-fvK7FyH0qwgRygcC65Da-0FpYU3Fi8mVRNdDTV5FlrIKsP21YjS011Epo5DbpY_0cqTcMG7pgqDpy3Lg4j3336l744NZjBS3lcJicf6/s1600/wrong.PNG" width="320" /></a></div>  If you get something like this (0 packets received), then there is absolutely no communication between the Kali and Windows machine (in effect, they are not on the same network, even though they are). That's why the exploit doesn't work.<br /><div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEnjGOEuZbnA0MmXTX2p_lSd1R2MbPe2CfLrHZwZUsN_-efJMAg4LgyHsgaQ5xqV1P-i9ZN2UbaSygHzr2oCT0cha1CDZTDu-49rXU_K9DJdqcX98Ry0V8eJacjuv_eSaEx6-LNhsBNT7H/s1600/good.PNG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="13" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEnjGOEuZbnA0MmXTX2p_lSd1R2MbPe2CfLrHZwZUsN_-efJMAg4LgyHsgaQ5xqV1P-i9ZN2UbaSygHzr2oCT0cha1CDZTDu-49rXU_K9DJdqcX98Ry0V8eJacjuv_eSaEx6-LNhsBNT7H/s1600/good.PNG" width="320" /></a></div> Something like this means that the connection is just fine, and probably the Windows machine has become immune to the attack due to some patch. (see : https://technet.microsoft.com/en-us/library/security/ms12-020.aspx)<br />If its the former case, then you'll have to find a way to get the connection working, and if its the latter, then try disabling firewall, antivirus, and maybe setting the network as home instead of public. Then go to advanced sharing settings, and choose all the options that you think will make your computer easier to hack.<br />If possible, see if you can uninstall installed updates. The final thing to do is to get an early unpatched release of Windows 7. In some cases installing VMware tools might help.<br /><br /><h2> Enable Remote Desktop</h2> <div> In many Windows releases, remote desktop is turned off by default. To enable it, follow these steps-</div> <div> Go to System (Control Panel\System and Security\System). Click on Remote settings. Select the "Allow Remote Connections to this computer" button. Click ok.</div> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbI0Z9xdOKQe14STp_s3-bu4JcifJWlsXLl-d5qSn4kdyqZdN0IyWN12Ff5uQBborWgx4BmNLVi1yFdZBk_HoJgqCMU5QKuwLtUX8XkFua5rgBCOZtRN_fXXJ8RDwrnyFikJ1Gzg6ehcXg/s1600/enable+remote+desktop.PNG" style="margin-left: auto; margin-right: auto;"><img border="0" height="207" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbI0Z9xdOKQe14STp_s3-bu4JcifJWlsXLl-d5qSn4kdyqZdN0IyWN12Ff5uQBborWgx4BmNLVi1yFdZBk_HoJgqCMU5QKuwLtUX8XkFua5rgBCOZtRN_fXXJ8RDwrnyFikJ1Gzg6ehcXg/s1600/enable+remote+desktop.PNG" width="320" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">Select the allow option. By default don't allow is selected in many Windows releases.</td></tr> </tbody></table>

How To Crash Windows 7 System With Metasploit And Remote Desktop Vulnerability - Metasploit Framework

Crashing Down Windows 7 System With Metasploit Attack Now while the story so far has been smooth and cozy, it gets a bit tough from ...

Read more »

How to Hack A Computer via IP Adress using Metasploit - Metasploit Network

<div dir="ltr" style="text-align: left;" trbidi="on"> <a class="bbcode_url" href="http://www.metasploit.com/" rel="nofollow">Metaspoilt</a> can run on Linux, Mac OS X and on Windows. It is both a command line interface and a graphical user interface (GUI). The Metasploit Framework can be extended to use external add-ons in multiple languages making it a very powerful tool. Metasploit can be used to test the vulnerability of target systems either to protect them or to break into them. so for this reason be it legitimate or unauthorized activities, it clearly identifies the importance of security.<br /> <br /> To exploit a system using the Metasploit Framework you carry out 5 steps:<br /> 1. Choose then configuring a pre loaded exploit in the database.<br /> 2. Check to see if the target system is susceptible to the exploit.<br /> 3. Configuring a payload<br /> 4. Encode the payload in order to hide it from an intrusion-prevention system (IPS)<br /> 5. Execute the exploit.<br /> <br /> In order for you to choose an exploit and a payload, information about the target is required. There are many ways to gain this information from port scanning and OS fingerprinting tools such as Nmap or vulnerability scanners such as Nessus. I'll leave your method of information gathering up to you.<br /> <br /> <h1 id="installation"> Installation</h1> <br /> Installation of the Metasploit framework is dependant on your Operating System and hardware therefore rather than list the ways to install to save covering all eventualities I have provided a link to both windows and Linux installations:<br /> <br /> Windows: <a class="bbcode_url" href="https://community.rapid7.com/docs/DOC-2099" rel="nofollow">LINK...</a><br /> Linux : <a class="bbcode_url" href="https://community.rapid7.com/docs/DOC-2100" rel="nofollow">LINK...</a><br /> <br /> I would however highly recommend that you download Kali-Linux which comes with Metasploit Pro already installed.<br /> <br /> <h1 id="usage"> Usage</h1> <br /> Metasploit is a great tool and a must have for all secutiry/penetration testers. I will show you a few ways in which metasploit can be used to exploit a target machine. (All my examples are done using Metasploit on Kali-Linux exploiting a Windows XP SP3 OS)<br /> <br /> <h2 id="exploit-ms08067netapi"> Exploit ms08_067_netapi.</h2> <br /> How to connect and exploit a target machine using Metasploit Exploit ms08_067_netapi. So first of lets boot up a version of Metasploit, with the cmd msfconsole:<br /> <br /> <img alt="up_ba997f44601f2269a0a4219ef55f292e.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_ba997f44601f2269a0a4219ef55f292e.jpg" /><br /> Now we need to setup our windows exploit with the following commands:<br /> 1. use exploit/windows/smb/ms08_067_netapi<br /> 2. set payload windows/meterpreter/bind_tcp<br /> 3. set RHOST <a href="http://192.168.0.10/" rel="nofollow">192.168.0.10</a> (This IP Address will be your targets IP gained from a scan)<br /> 4. exploit (This command carries out the exploit as seen below)<br /> <br /> <img alt="up_f3b11d2adba5aacddbff8d6d351dc579.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_f3b11d2adba5aacddbff8d6d351dc579.jpg" /><br /> All being well you should have connected to the target and carry out a number of commands. Below is the screenshot command.<br /> <br /> <img alt="up_42b5e9e1dd305310dd3e381268aee366.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_42b5e9e1dd305310dd3e381268aee366.jpg" /><br /> And thats it easy!!<br /> <br /> There are loads of commands to run under this exploit, just type help and a list will be displayed.<br /> Examples are: Recording audio from microphones, screenshots from their webcam, gathering keystrokes and downloading files.<br /> <br /> <h2 id="social-engineering-example"> Social engineering example</h2> <br /> Next lets see how to gain access to a targets machine using their interaction. Why? I hear you ask, well sometimes its not possible to connect directly for whatever reason lets say "security settings". The following exploit uses the targets interaction to help us gain access.<br /> <br /> So first things first bring up a terminal window and type the command: se-toolkit<br /> <br /> Then enter option 1 for social engineering attacks<br /> <br /> <img alt="up_dcceac0fd07e2de79d9550df12d9eca3.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_dcceac0fd07e2de79d9550df12d9eca3.jpg" /><br /> Now option 4 to create a payload and listener and enter your IP Address.<br /> <br /> <img alt="up_6de4e27eaf992e55b23837f5b42ff4b5.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_6de4e27eaf992e55b23837f5b42ff4b5.jpg" /><br /> Now you need to pick the type of payload, we will go with option 2 - Windows Reverse TCP Meterpreter.<br /> <br /> <img alt="up_b1a7c925ec2e8c73e5ac7b4defb82b49.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_b1a7c925ec2e8c73e5ac7b4defb82b49.jpg" /><br /> Choose option 16 - Backdoor Executable<br /> Leave the port set to 443<br /> (This port is used for secure web browser communication. Data transferred across such connections are highly resistant to eavesdropping and interception which is iroic concidering what we are using it for lol)<br /> And finally start the listener.<br /> <br /> <img alt="up_85e8ddb7059aded3e547ecbad62944e6.jpg" class="bbcode_img" height="425" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_85e8ddb7059aded3e547ecbad62944e6.jpg" width="640" /><br /> Ok so lets recap, we have just created an executable file with a payload hidden within. The next part is a little tricky you need to send the file to the target computer and get them to execute it. For example call it games and give it a nice icon lol.<br /> <br /> Before you send the file navigate to were it was created and right click and properties.<br /> <br /> <img alt="up_c2d9ac296708f9c5a8aaa41bc11ea8b0.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_c2d9ac296708f9c5a8aaa41bc11ea8b0.jpg" /><br /> Tick the box to allow the file to be executed as a program<br /> <br /> <img alt="up_23ac654a9aa41b13c3c7c8db56aa8f42.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_23ac654a9aa41b13c3c7c8db56aa8f42.jpg" /><br /> So now we wait..... once the target executes the program you will get the following:<br /> <br /> <img alt="up_f47fdf41cca0ef93ed9b86a9796ccfd3.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_f47fdf41cca0ef93ed9b86a9796ccfd3.jpg" /><br /> From here on in its the usual Meterpreter > prompt<br /> As before you can now run commands like screenshot or shell.<br /> The target is yours!<br /> <br /> <img alt="up_2a55103dcdec4ac7bd7f2e06c833be6b.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_2a55103dcdec4ac7bd7f2e06c833be6b.jpg" /><br /> <br /> <h2 id="armitage"> Armitage</h2> <br /> We've seen how to use Metasploit via the command line now lets see how to use a graphical version Armitage that lets us achieve the same goal.<br /> <br /> Armitage is a GUI way of using metasploit/meterpreter rather than cmd line so lets get started.<br /> <br /> First navigate to Applications > Kali Linux > System Services > Metasploit > community / pro start ...... this will start the server/database<br /> <br /> <img alt="up_09e7239f76a35fd1aebe692d2ab9c933.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_09e7239f76a35fd1aebe692d2ab9c933.jpg" /><br /> <br /> Then type armitage in the terminal window and accept the default values:<br /> <br /> <img alt="up_133b44eb36389ea3e833e65b761ca2ec.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_133b44eb36389ea3e833e65b761ca2ec.jpg" /><br /> You will probably get a popup asking to start metasploit, click yes<br /> you should now see the following:<br /> <br /> <img alt="up_70a7f1bb1540dc6ad71fc692892641d5.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_70a7f1bb1540dc6ad71fc692892641d5.jpg" /><br /> Dont worry about the connection refused it just takes a while to load.<br /> Now armitage will boot up if it asks you for the attack computer IP enter your IP Address.<br /> Navigate to the Hosts tab > Nmap Scan > Quick Scan (OS Detect)<br /> <br /> <img alt="up_f41941e5c6945f47d4dd3a8e43b3bc29.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_f41941e5c6945f47d4dd3a8e43b3bc29.jpg" /><br /> From here armitage will scan a range or a sigle IP Address of your choice then present it in the black window. Right click the target and click Scan<br /> <br /> <img alt="up_104aa55005305cce0cc7691b8dd0e27a.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_104aa55005305cce0cc7691b8dd0e27a.jpg" /><br /> When the scan is complete expand the exploit > windows > smb and double click the ms08_67_netapi<br /> <br /> <img alt="up_c415bc13c15126d5b78705de4113bad0.jpg" class="bbcode_img" height="640" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_c415bc13c15126d5b78705de4113bad0.jpg" width="598" /><br /> This will bring up an attack confirmation window check the details and click launch<br /> <br /> <img alt="up_df156ff747901c8144cf5d1062749aed.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_df156ff747901c8144cf5d1062749aed.jpg" /><br /> Confirmation of a successful exploit will look like this:<br /> <br /> <img alt="up_af26450c85394599f339d4db79b7b139.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_af26450c85394599f339d4db79b7b139.jpg" /><br /> You can now right click the target and perform multiple commands<br /> <br /> <img alt="up_b4440e30bf4172341ab9ea9c7edb975d.jpg" class="bbcode_img" height="359" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_b4440e30bf4172341ab9ea9c7edb975d.jpg" width="640" /><br /> here is an example of the Interact "remote command shell"<br /> <br /> <img alt="up_ad688c74a66aca371d72ce65f8fccb9e.jpg" class="bbcode_img" height="498" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_ad688c74a66aca371d72ce65f8fccb9e.jpg" width="640" /><br /> <h2 id="websploit"> Websploit</h2> <br /> As an added extra <a class="bbcode_url" href="http://sourceforge.net/projects/websploit/" rel="nofollow">Websploit</a> (below) uses exploits from Metasploit and has its own features as well which is used to scan and analysis remote systems in order to find vulnerabilites. If you enjoyed this article please comment and i will do one for Websploit. Thank you.<br /> <br /> <img alt="up_1b990ed5407226003a4ae441d9bebf2b.jpg" class="bbcode_img" src="https://www.hackthis.co.uk/files/media/images/articles/0/0/up_1b990ed5407226003a4ae441d9bebf2b.jpg" /><br /> <br /> <h1 id="summary"> Summary</h1> <br /> Metasploit is a must have for anyone interested in the world of secutiry, you have just seen a few ways in which it can be used however keep in mind that this has only scratched the surface of the potential of this tool. To find out more please follow the links below.<br /> <br /></div>

How to Hack A Computer via IP Adress using Metasploit - Metasploit Network

Metaspoilt can run on Linux, Mac OS X and on Windows. It is both a command line interface and a graphical user interface (GUI). The Meta...

Read more »