PHStrawberrry
Forum Veteran
Hello again PHC,
When you start out in h(a)cking, you will soon run across the word "exploit". An exploit is an attack on a computer system, especially one that takes advantage of a particular vulnerability that the system offers to intruders. It can take advantage of both weaknesses in an operating system or vended application programs.
What Is Metasploit?
Metasploit is one of the best, most widely used exploitation tools in both white hat and black hat h(a)cking. It can be used by both beginning n00bs and more advanced hax0rs.
Metasploit was developed in 2003 as an open source project by H.D. Moore. Originally developed in PERL, the developer team rewrote Metasploit in Ruby in 2007. This is critical, because you need to have Ruby on your system in order to run Metasploit and to develop your own exploits. Metasploit was then purchased by rapid7 in 2009, which still offers "metasploit community edition" as a free, open source download for anyone to use.
Metasploit is an "exploitation framework". As a framework, it eases the effort to exploit known vulnerabilities in networks, operating systems and applications, and to develop new exploits for new or unknown vulnerabilities. The metasploit framework contains hundreds of exploits and "payloads" and makes it easy to use them. My current version of metasploit contains 1161 exploits and 310 payloads!
In this tutorial, i will be using linux. There are numerous advantages to using linux when h(a)cking. Linux is free, and open source. There is a Windows version of Metasploit, but many of the features such as raw IP packet injection, wireless driver exploitation, SMB relaying attacks, etc. are unavailable on windows. There is also a GUI developed for metasploit by independent developers, but we will be using the command line. All h(a)ckers should be familiar and comfortable using the command line.
Download and Installation
First we need to download and install Metasploit (obviously).
One of the best distros for h(a)cking is Kali Linux. this distro comes with metasploit framework pre-installed, so if you want to use kali, skip the next few steps. Here, I'll walk you through downloading and installing on one of the most popular Linux distros: Ubuntu.
AS I STATED EARLIER, ENSURE RUBY IS INSTALLED!
First open a terminal window and type this for the 32 bit version:
Or this, for the 64 but version:
This uses the wget command to download the latest version of the Metasploit framework.
Next, we need to make the installer executable so we can run it. In the terminal, use the following command to change the mode to execute (x) for Metasploit:
And now execute the installer (using superuser or root via the sudo command. You will need to enter your root password in order to use this command):
Follow the prompts in the installer, clicking forward and agreeing to the license agreement. Select yes to allow metasploit to automatically update itself. Accept the default service script, and wait for the installer to finish
After you have metasploit installed, you are ready to run it! To start up the metasploit framework console, type this into terminal:
NOTE: On kali, you first need to start the metasploit framework service using:
You should see the beautiful text art "Metasploit" if it runs correctly, and be prompted for a command. Feel free to experiment and research, or wait loyally for my next tutorial on some basic usage of metasploit.
Now that you have successfully installed Metasploit you can start doing some l33t h(a)cks!
Manual Updates:
Because the exploit databases is always being added to, you should periodically update your version of Metasploit. to do this, simply type:
LIST OF BASIC COMMANDS:
Basic commands
? - help menu
background - moves the current session to the background
bgkill - kills a background meterpreter script
bglist - provides a list of all running background scripts
bgrun - runs a script as a background thread
channel - displays active channels
close - closes a channel
exit - terminates a meterpreter session
help - help menu
interact - interacts with a channel
irb - go into Ruby scripting mode
migrate - moves the active process to a designated PID
quit - terminates the meterpreter session
read - reads the data from a channel
run - executes the meterpreter script designated after it
use - loads a meterpreter extension
write - writes data to a channel
File System Commands
cat - read and output to stdout the contents of a file
cd - change directory on the victim
del - delete a file on the victim
download - download a file from the victim system to the attacker system
edit - edit a file with vim
getlwd - print the local directory
getwd - print working directory
lcd - change local directory
lpwd - print local directory
ls - list files in current directory
mkdir - make a directory on the victim system
pwd - print working directory
rm - delete a file
rmdir - remove directory on the victim system
upload - upload a file from the attacker system to the victim
Networking Commands
ipconfig - displays network interfaces with key information including IP address, etc.
portfwd - forwards a port on the victim system to a remote service
route - view or modify the victim routing table
System Commands
clearav - clears the event logs on the victim's computer
drop_token - drops a stolen token
execute - executes a command
getpid - gets the current process ID (PID)
getprivs - gets as many privileges as possible
getuid - get the user that the server is running as
kill - terminate the process designated by the PID
ps - list running processes
reboot - reboots the victim computer
reg - interact with the victim's registry
rev2self - calls RevertToSelf() on the victim machine
shell - opens a command shell on the victim machine
shutdown - shuts down the victim's computer
s†éál_token - attempts to s†éál the token of a specified (PID) process
sysinfo - gets the details about the victim computer such as OS and name
User Interface Commands
enumdesktops - lists all accessible desktops
getdesktop - get the current meterpreter desktop
idletime - checks to see how long since the victim system has been idle
keyscan_dump - dumps the contents of the software k(e)ylogger
keyscan_start - starts the software k(e)ylogger when associated with a process such as Word or browser
keyscan_stop - stops the software k(e)ylogger
screenshot - grabs a screenshot of the meterpreter desktop
set_desktop - changes the meterpreter desktop
uictl - enables control of some of the user interface components
Privilege Escalation Commands
getsystem - uses 15 built-in methods to gain sysadmin privileges
Password Dump Commands
hashdump - grabs the hashes in the password (SAM) file
Note that hashdump will often trip AV software, but there are now two scripts that are more s†éálthy, "run hashdump" and "run smart_hashdump".
Timestomp Commands
timestomp - manipulates the modify, access, and create attributes of a file
Thanks for reading, please reply with your thanks if you enjoyed this and/or found it useful.
I am hoping to make another tutorial soon that will teach you how to use Metasploit for a real h(a)ck!
Special thanks to MeshCollider
When you start out in h(a)cking, you will soon run across the word "exploit". An exploit is an attack on a computer system, especially one that takes advantage of a particular vulnerability that the system offers to intruders. It can take advantage of both weaknesses in an operating system or vended application programs.
What Is Metasploit?
Metasploit is one of the best, most widely used exploitation tools in both white hat and black hat h(a)cking. It can be used by both beginning n00bs and more advanced hax0rs.
Metasploit was developed in 2003 as an open source project by H.D. Moore. Originally developed in PERL, the developer team rewrote Metasploit in Ruby in 2007. This is critical, because you need to have Ruby on your system in order to run Metasploit and to develop your own exploits. Metasploit was then purchased by rapid7 in 2009, which still offers "metasploit community edition" as a free, open source download for anyone to use.
Metasploit is an "exploitation framework". As a framework, it eases the effort to exploit known vulnerabilities in networks, operating systems and applications, and to develop new exploits for new or unknown vulnerabilities. The metasploit framework contains hundreds of exploits and "payloads" and makes it easy to use them. My current version of metasploit contains 1161 exploits and 310 payloads!
In this tutorial, i will be using linux. There are numerous advantages to using linux when h(a)cking. Linux is free, and open source. There is a Windows version of Metasploit, but many of the features such as raw IP packet injection, wireless driver exploitation, SMB relaying attacks, etc. are unavailable on windows. There is also a GUI developed for metasploit by independent developers, but we will be using the command line. All h(a)ckers should be familiar and comfortable using the command line.
Download and Installation
First we need to download and install Metasploit (obviously).
One of the best distros for h(a)cking is Kali Linux. this distro comes with metasploit framework pre-installed, so if you want to use kali, skip the next few steps. Here, I'll walk you through downloading and installing on one of the most popular Linux distros: Ubuntu.
AS I STATED EARLIER, ENSURE RUBY IS INSTALLED!
Code:
sudo apt-get install ruby1.9.1 build-essentialFirst open a terminal window and type this for the 32 bit version:
Code:
wget http://downloads.metasploit.com/data/releases/metasploit-latest-linux-x32-installer.runOr this, for the 64 but version:
Code:
wget http://downloads.metasploit.com/data/releases/metasploit-latest-linux-x64-installer.runThis uses the wget command to download the latest version of the Metasploit framework.
Next, we need to make the installer executable so we can run it. In the terminal, use the following command to change the mode to execute (x) for Metasploit:
Code:
chmod +x metasploit-latest-linux-x*-installer.runAnd now execute the installer (using superuser or root via the sudo command. You will need to enter your root password in order to use this command):
Code:
sudo ./metasploit-latest-linux-x*-installer.runFollow the prompts in the installer, clicking forward and agreeing to the license agreement. Select yes to allow metasploit to automatically update itself. Accept the default service script, and wait for the installer to finish
After you have metasploit installed, you are ready to run it! To start up the metasploit framework console, type this into terminal:
Code:
msfconsoleNOTE: On kali, you first need to start the metasploit framework service using:
Code:
service metasploit startYou should see the beautiful text art "Metasploit" if it runs correctly, and be prompted for a command. Feel free to experiment and research, or wait loyally for my next tutorial on some basic usage of metasploit.
Now that you have successfully installed Metasploit you can start doing some l33t h(a)cks!
Manual Updates:
Because the exploit databases is always being added to, you should periodically update your version of Metasploit. to do this, simply type:
Code:
sudo msfupdateLIST OF BASIC COMMANDS:
Basic commands
? - help menu
background - moves the current session to the background
bgkill - kills a background meterpreter script
bglist - provides a list of all running background scripts
bgrun - runs a script as a background thread
channel - displays active channels
close - closes a channel
exit - terminates a meterpreter session
help - help menu
interact - interacts with a channel
irb - go into Ruby scripting mode
migrate - moves the active process to a designated PID
quit - terminates the meterpreter session
read - reads the data from a channel
run - executes the meterpreter script designated after it
use - loads a meterpreter extension
write - writes data to a channel
File System Commands
cat - read and output to stdout the contents of a file
cd - change directory on the victim
del - delete a file on the victim
download - download a file from the victim system to the attacker system
edit - edit a file with vim
getlwd - print the local directory
getwd - print working directory
lcd - change local directory
lpwd - print local directory
ls - list files in current directory
mkdir - make a directory on the victim system
pwd - print working directory
rm - delete a file
rmdir - remove directory on the victim system
upload - upload a file from the attacker system to the victim
Networking Commands
ipconfig - displays network interfaces with key information including IP address, etc.
portfwd - forwards a port on the victim system to a remote service
route - view or modify the victim routing table
System Commands
clearav - clears the event logs on the victim's computer
drop_token - drops a stolen token
execute - executes a command
getpid - gets the current process ID (PID)
getprivs - gets as many privileges as possible
getuid - get the user that the server is running as
kill - terminate the process designated by the PID
ps - list running processes
reboot - reboots the victim computer
reg - interact with the victim's registry
rev2self - calls RevertToSelf() on the victim machine
shell - opens a command shell on the victim machine
shutdown - shuts down the victim's computer
s†éál_token - attempts to s†éál the token of a specified (PID) process
sysinfo - gets the details about the victim computer such as OS and name
User Interface Commands
enumdesktops - lists all accessible desktops
getdesktop - get the current meterpreter desktop
idletime - checks to see how long since the victim system has been idle
keyscan_dump - dumps the contents of the software k(e)ylogger
keyscan_start - starts the software k(e)ylogger when associated with a process such as Word or browser
keyscan_stop - stops the software k(e)ylogger
screenshot - grabs a screenshot of the meterpreter desktop
set_desktop - changes the meterpreter desktop
uictl - enables control of some of the user interface components
Privilege Escalation Commands
getsystem - uses 15 built-in methods to gain sysadmin privileges
Password Dump Commands
hashdump - grabs the hashes in the password (SAM) file
Note that hashdump will often trip AV software, but there are now two scripts that are more s†éálthy, "run hashdump" and "run smart_hashdump".
Timestomp Commands
timestomp - manipulates the modify, access, and create attributes of a file
Thanks for reading, please reply with your thanks if you enjoyed this and/or found it useful.
I am hoping to make another tutorial soon that will teach you how to use Metasploit for a real h(a)ck!
Special thanks to MeshCollider
