#msfconsole

Exploiting Eternalblue for shell with Msfconsole

EternalBlue Malware Developed by National Security Agency (NSA) exploiting Windows based Server Message Block (SMBv1) and to be believed the tool has released by Shadow Brokers hackers Group and it has been used for Wannacry Cyber Attack.  

Novo Post!!

  Eu já abordei o uso de Metasploits em KALI LINUX , portanto, para um melhor entendimento, recomendo a leitura desse post; pois não serei repetitivo.

OBSERVAÇÃO:

O procedimento a seguir, foi executado em laboratório, este post é para fins educativos. Por favor, não invada a privacidade de ninguém sem permissão.

REQUISITOS:

– Kali Linux instalado em uma máquina virtual

– A VÍTIMA DEVE ESTAR NA…

Hey friends, today I’m going to talk about how to hack a Windows 7 professional, 32-bit system using Metasploit Framework. Firstly I would ask you to download and install Metasploit Framework on your PC before you begin. In our scenario, the attacker machine will be running Ubuntu 14.04 with a Metasploit instance running on it and the attacker is on the same network as of victim.

I have already…

Righto, so the other day I obliterated my postgre install, don't ask me why or how. It suffice to say it was gone. Add to the fact that metasploit has deprecated the db_driver command, only supporting postgre now, so the sqlite3 instance I had is no more. Oh and if at any point during this post you sit there thing, what the fuck is he on about, I'm writing it as I understand, which might not be correct.

Anyway, I installed postgress and setup a new user. I have constant issues with my Internet connection between home and campus (both going through the university connection, only one requires proxy auth). apt-get was failing and I hate constantly changing settings so I just downloaded and compiled from source.

wget <postgres URL> tar -xvf postgres-version && cd postgres-version ./configure make make install

Made a postgres user for metasploit, created a database and granted permissions to the metasploit user.

sudo -u postgres psql postgres-# create user msfuser with password 'somepassword'; postgres-# create database msfdb; postgres=# grant all privileges on database msfdb to msfuser;

I then fired up metasploit, connected to the db and thought everything was fine, but everytime I restarted my msfconsole session it would forget my db settings. mep.

Anyway, so did some digging in /opt/metasploit-X.X.X/config/