Metasploit

Ethical Hacking Training Institute
Extreme Hacking | Sadik Shaikh | Cyber Suraksha Abhiyan

msf > use auxiliary/server/socks4
msf > run

**msfvenom**
The msfvenom tool can be used to generate Metasploit payloads (such as Meterpreter) as standalone files and optionally encode
them. This tool replaces the former msfpayload and msfencode tools. Run with ‘’-l payloads’ to get a list of payloads.

$ msfvenom –p […]

Extreme Hacking
Advanced Ethical Hacking Institute in Pune

We are going to start a new session on Password cracking, that will include all sorts of tech needed to break the password. It will be a sort of building block if you are planning to be CEH certified. CEH is one of the most powerful course around, but I […]

Advanced Ethical Hacking Institute in Pune

As discussed in CEH.

Here is a very easy tutorial on how to collect email addresses with metasploit.

1)First thing to do is open a msfconsole and type

Code:
search gather

2) Type

Code:
use gather/search_email_collector

3) Now you need to set the domain you can use what you want eg gmail.com, yahoo.com for this tutorial we will use gmail.com

Code:
set domain […]

Advanced Ethical Hacking Institute in Pune

So now we can see again the final exploit. This is all that is necessary to go from PoC to full Metasploit module in a few simple steps. We will be further expanding on this code in later sections going deeper into ways of making a better Metasploit module such as […]

Advanced Ethical Hacking Institute in Pune

In this section we are going add the listener and the javascript for the exploit. The changes to the exploit are highlighed.

Contents

1 On Request URI
2 Content
3 Send Response HTML

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework […]

Advanced Ethical Hacking Institute in Pune

In this section we are going to take a look at sending a GET request to the target. This GET request will contain a User-Agent field with Javascript appended to connect back to Metasploit. The changes to the exploit are highlighed.

Contents

1 Register Options
2 Exploit Get Request
3 Exploit Headers
4 Exploit Data
5 Super

##
# […]

Advanced Ethical Hacking Institute in Pune

In this section we are going to take a look at a skeleton exploit to start building our dotDefender PoC from.
We’ll start with some of the specific things in the skeleton that are required for this exploit to work. The descriptions aren’t necessary until the end so we won’t worry about […]