Metasploitable/DNS Bind: Difference between revisions

From charlesreid1
No edit summary
Line 75: Line 75:
   post/linux/gather/enum_users_history                                              normal    Linux Gather User History
   post/linux/gather/enum_users_history                                              normal    Linux Gather User History
</pre>
</pre>
=Flags=
{{MSFlag}}

Revision as of 06:18, 26 March 2016

Searching

Searching for bind exploits, we find the (select) list below: 

msf > search bind

Matching Modules
================

   Name                                                              Disclosure Date  Rank       Description
   ----                                                              ---------------  ----       -----------
   auxiliary/dos/dns/bind_tkey                                       2015-07-28       normal     BIND TKEY Query Denial of Service
   auxiliary/spoof/nbns/nbns_response                                                 normal     NetBIOS Name Service Spoofer
   payload/aix/ppc/shell_bind_tcp                                                     normal     AIX Command Shell, Bind TCP Inline
   payload/bsd/sparc/shell_bind_tcp                                                   normal     BSD Command Shell, Bind TCP Inline
   payload/bsd/x64/shell_bind_ipv6_tcp                                                normal     BSD x64 Command Shell, Bind TCP Inline (IPv6)
   payload/bsd/x64/shell_bind_tcp                                                     normal     BSD x64 Shell Bind TCP
   payload/bsd/x64/shell_bind_tcp_small                                               normal     BSD x64 Command Shell, Bind TCP Inline
   payload/bsd/x86/metsvc_bind_tcp                                                    normal     FreeBSD Meterpreter Service, Bind TCP
   payload/bsd/x86/shell/bind_ipv6_tcp                                                normal     BSD Command Shell, Bind TCP Stager (IPv6)
   payload/bsd/x86/shell/bind_tcp                                                     normal     BSD Command Shell, Bind TCP Stager
   payload/bsd/x86/shell_bind_tcp                                                     normal     BSD Command Shell, Bind TCP Inline
   payload/bsd/x86/shell_bind_tcp_ipv6                                                normal     BSD Command Shell, Bind TCP Inline (IPv6)
   payload/bsdi/x86/shell/bind_tcp                                                    normal     BSDi Command Shell, Bind TCP Stager
   payload/bsdi/x86/shell_bind_tcp                                                    normal     BSDi Command Shell, Bind TCP Inline
   payload/cmd/unix/bind_awk                                                          normal     Unix Command Shell, Bind TCP (via AWK)
   payload/cmd/unix/bind_inetd                                                        normal     Unix Command Shell, Bind TCP (inetd)
   payload/cmd/unix/bind_lua                                                          normal     Unix Command Shell, Bind TCP (via Lua)
   payload/cmd/unix/bind_netcat                                                       normal     Unix Command Shell, Bind TCP (via netcat)
   payload/cmd/unix/bind_netcat_gaping                                                normal     Unix Command Shell, Bind TCP (via netcat -e)
   payload/cmd/unix/bind_netcat_gaping_ipv6                                           normal     Unix Command Shell, Bind TCP (via netcat -e) IPv6
   payload/cmd/unix/bind_nodejs                                                       normal     Unix Command Shell, Bind TCP (via nodejs)
   payload/cmd/unix/bind_perl                                                         normal     Unix Command Shell, Bind TCP (via Perl)
   payload/cmd/unix/bind_perl_ipv6                                                    normal     Unix Command Shell, Bind TCP (via perl) IPv6
   payload/cmd/unix/bind_ruby                                                         normal     Unix Command Shell, Bind TCP (via Ruby)
   payload/cmd/unix/bind_ruby_ipv6                                                    normal     Unix Command Shell, Bind TCP (via Ruby) IPv6
   payload/cmd/unix/bind_zsh                                                          normal     Unix Command Shell, Bind TCP (via Zsh)
   payload/generic/shell_bind_tcp                                                     normal     Generic Command Shell, Bind TCP Inline
   payload/java/jsp_shell_bind_tcp                                                    normal     Java JSP Command Shell, Bind TCP Inline
   payload/java/meterpreter/bind_tcp                                                  normal     Java Meterpreter, Java Bind TCP Stager
   payload/java/shell/bind_tcp                                                        normal     Command Shell, Java Bind TCP Stager
   payload/linux/armle/shell/bind_tcp                                                 normal     Linux dup2 Command Shell, Bind TCP Stager
   payload/linux/armle/shell_bind_tcp                                                 normal     Linux Command Shell, Reverse TCP Inline
   payload/linux/mipsbe/shell_bind_tcp                                                normal     Linux Command Shell, Bind TCP Inline
   payload/linux/mipsle/shell_bind_tcp                                                normal     Linux Command Shell, Bind TCP Inline
   payload/linux/ppc/shell_bind_tcp                                                   normal     Linux Command Shell, Bind TCP Inline
   payload/linux/ppc64/shell_bind_tcp                                                 normal     Linux Command Shell, Bind TCP Inline
   payload/linux/x64/shell/bind_tcp                                                   normal     Linux Command Shell, Bind TCP Stager
   payload/linux/x64/shell_bind_tcp                                                   normal     Linux Command Shell, Bind TCP Inline
   payload/linux/x64/shell_bind_tcp_random_port                                       normal     Linux Command Shell, Bind TCP Random Port Inline
   payload/linux/x86/meterpreter/bind_ipv6_tcp                                        normal     Linux Meterpreter, Bind IPv6 TCP Stager (Linux x86)
   payload/linux/x86/meterpreter/bind_ipv6_tcp_uuid                                   normal     Linux Meterpreter, Bind IPv6 TCP Stager with UUID Support (Linux x86)
   payload/linux/x86/meterpreter/bind_nonx_tcp                                        normal     Linux Meterpreter, Bind TCP Stager
   payload/linux/x86/meterpreter/bind_tcp                                             normal     Linux Meterpreter, Bind TCP Stager (Linux x86)
   payload/linux/x86/meterpreter/bind_tcp_uuid                                        normal     Linux Meterpreter, Bind TCP Stager with UUID Support (Linux x86)
   payload/linux/x86/metsvc_bind_tcp                                                  normal     Linux Meterpreter Service, Bind TCP
   payload/linux/x86/shell/bind_ipv6_tcp                                              normal     Linux Command Shell, Bind IPv6 TCP Stager (Linux x86)
   payload/linux/x86/shell/bind_ipv6_tcp_uuid                                         normal     Linux Command Shell, Bind IPv6 TCP Stager with UUID Support (Linux x86)
   payload/linux/x86/shell/bind_nonx_tcp                                              normal     Linux Command Shell, Bind TCP Stager
   payload/linux/x86/shell/bind_tcp                                                   normal     Linux Command Shell, Bind TCP Stager (Linux x86)
   payload/linux/x86/shell/bind_tcp_uuid                                              normal     Linux Command Shell, Bind TCP Stager with UUID Support (Linux x86)
   payload/linux/x86/shell_bind_ipv6_tcp                                              normal     Linux Command Shell, Bind TCP Inline (IPv6)
   payload/linux/x86/shell_bind_tcp                                                   normal     Linux Command Shell, Bind TCP Inline
   payload/linux/x86/shell_bind_tcp_random_port                                       normal     Linux Command Shell, Bind TCP Random Port Inline
   payload/python/meterpreter/bind_tcp                                                normal     Python Meterpreter, Python Bind TCP Stager
   payload/python/meterpreter/bind_tcp_uuid                                           normal     Python Meterpreter, Python Bind TCP Stager with UUID Support
   payload/python/meterpreter_bind_tcp                                                normal     Python Meterpreter Shell, Bind TCP Inline
   payload/ruby/shell_bind_tcp                                                        normal     Ruby Command Shell, Bind TCP
   payload/ruby/shell_bind_tcp_ipv6                                                   normal     Ruby Command Shell, Bind TCP IPv6
   post/linux/gather/enum_configs                                                     normal     Linux Gather Configurations
   post/linux/gather/enum_network                                                     normal     Linux Gather Network Information
   post/linux/gather/enum_protections                                                 normal     Linux Gather Protection Enumeration
   post/linux/gather/enum_system                                                      normal     Linux Gather System and User Information
   post/linux/gather/enum_users_history                                               normal     Linux Gather User History


Flags


Defcon.png
Metasploit
any and all resources related to metasploit on this wiki


MSF - on the metasploit framework generally

Category:Metasploit - pages labeled with the "Metasploit" category label

MSF/Wordlists - wordlists that come bundled with Metasploit

MSFVenom - msfvenom is used to craft payloads

Meterpreter - the shell you'll have when you use MSF to craft a remote shell payload.


Category:Security  · Category:Metasploit  · Category:Kali


Flags  · Template:MetasploitFlag  · e





Defcon.png
Metasploitable: The Red Team
Metasploitable is a virtual machine with baked-in vulnerabilities, designed to teach Metasploit. This set of articles discusses the RED TEAM's tools and routes of attack.


Metasploitable Databases:

Exploiting MySQL with Metasploit: Metasploitable/MySQL

Exploiting PostgreSQL with Metasploit: Metasploitable/Postgres


Metasploitable Networking:

Exploiting VSFTP Backdoor: Metasploitable/VSFTP

SSH Penetration by Brute Force: Metasploitable/SSH/Brute Force

SSH Penetration with Keys: Metasploitable/SSH/Keys

SSH Penetration with Metasploit: Metasploitable/SSH/Exploits

Brute-Forcing /etc/shadow File: Metasploitable/John Shadow File

Exploiting NFS: Metasploitable/NFS

Exploiting DNS Bind Server: Metasploitable/DNS Bind


Metasploitable Services:

distcc: Metasploitable/distcc


Metasploitable Apache:

Exploiting Apache (with Metasploit): Metasploitable/Apache

Exploiting Apache (with Python): Metasploitable/Apache/Python

Tor's Hammer DoS Attack: Metasploitable/TorsHammer *

Apache DAV: Metasploitable/Apache/DAV *

Apache Tomcat and Coyote: Metasploitable/Apache/Tomcat and Coyote


Metasploitable Memory:

General approach to memory-based attacks: Metasploitable/Memory

Investigating memory data: Metasploitable/Volatile Data Investigation

Dumping Memory from Metasploit: Metasploitable/Dumping Memory


Metasploitable Fuzzing:

(Have not done much work on fuzzing Metasploitable...)

Fuzzing  · American Fuzzy Lop


Category:Security  · Category:Metasploit  · Category:Metasploitable  · Category:Kali


Flags  · Template:MetasploitableRedTeamFlag  · e




Defcon.png
Metasploitablue: The Blue Team
Metasploitable is a virtual machine with baked-in vulnerabilities, designed to teach Metasploit. This set of articles discusses the BLUE TEAM's methods for defending Metasploitable: defending against and responding to intrusions.

Hence the name, Metasploita-blue.

Overview: Metasploitable/Defenses

Metasploitable/Defenses/Stopping  · Metasploitable/Defenses/Detecting


Metasploitable On-Machine Defenses:

Linux Volatile Data System Investigation: Metasploitable/Volatile Data Investigation

Linux Artifact Investigation: Metasploitable/Artifact Investigation

Linux Iptables Essentials: Metasploitable/Iptables

Firewall Assurance and Testing: Metasploitable/Firewall

Password Assessment: Metasploitable/Password Assessment

Standard Unix Ports: Unix/Ports


Metasploitable Networking Defenses:

Netcat and Cryptcat (Blue Team): Metasploitable/Netcat and Metasploitable/Cryptcat

Nmap (Blue Team): Metasploitable/Nmap

Network Traffic Analysis: Metasploitable/Network Traffic Analysis

Suspicious Traffic Patterns: Metasploitable/Suspicious Traffic Patterns

Snort IDS: Metasploitable/Snort


Category:Security  · Category:Metasploit  · Category:Metasploitable  · Category:Kali


Flags  · Template:MetasploitableBlueTeamFlag  · e



Retrieved from "https://charlesreid1.com/w/index.php?title=Metasploitable/DNS_Bind&oldid=9812"