Msfvenom

By

 Creating payload using msfvenom on Kali Linux 


Creation of payload is Successful

Starting the Apache services to facilitate listening for the incoming connection, which will be created by the payload.

Using Metasploit handler to grab incoming connection.

Setting handler payload type.

Setting the host IP address that the payload will try to connect to.

Setting the host port number that the payload will try to connect on.

Starting the handler to await any connection attempts from our crafted payload.
It will keep listening until a connection is established


Target machine POV; By default our crafted payload that we name game will look like this.


We can also change its icon make it look more friendly.

Once target execute the payload, our Metasploit handler will grab it and complete the connection.
And a Meterpreter session will open.

Now you can safely say: "We're In ;)"




Comments

Post a Comment

Popular posts from this blog

Rabbit Virus

By
Image
A fork bomb (also called rabbit virus or wabbit) is a denial-of-service attack wherein a process continually replicates itself to deplete available system resources, slowing down or crashing the system due to resource starvation . Understanding   the   above: :() # define ':' -- whenever we say ':', do this: { # beginning of what to do when we say ':' : # load another copy of the ':' function into memory... | # ...and pipe its output to... : # ...another copy of ':' function, which has to be loaded into memory # (therefore, ':|:' simply gets two copies of ':' loaded whenever ':' is called) & # disown the functions -- if the first ':' is killed, # all of the functions that it has started should NOT be auto-killed } # end of what to do when we say ':' ; # Having defined ':', we should now... : # ...call ':'
Read more

Hash functions

By
Image
The meaning of the verb “to hash” – to chop or scramble something – provides a clue as to what hash functions do to data. That’s right, they “ scramble ” data and convert it into a numerical value. And no matter how long the input is,   the output value is always of the same length . Hash functions are also referred to as hashing algorithms or message digest functions. They are used across many areas of computer science, for example: To encrypt communication between web servers and browsers, and generate session IDs for internet applications and data caching To protect sensitive data such as passwords, web analytics, and payment details To add digital signatures to emails To locate identical or similar data sets via lookup functions  Definition A  hash function  converts strings of different length into fixed-length strings known as hash values or digests. You can use hashing to scramble passwords into strings of authorized characters for example. The output values cannot be inverted t
Read more

PLC vs RTU vs IED

By
Image
  Difference Between PLC, RTU, & IED PLCs and RTUs are both electronic devices; their functionalities overlap with each other.  RTCs are sold with PLC-like features, and PLCs are sold with RTC-like features. Many vendors sell proprietary alternatives and different associated environments to run these programs since the industry made the functional language running RTUs and PLCs standard. RTU                                                                                                          “ RTU” stands for “Remote Terminal Units.” They are also referred to as “Remote Telemetry Units.” An RTU is an electronic device which is controlled by a microprocessor. The main function of an RTU is to interface the SCADA to the objects present physically. “SCADA” stands for “supervisory control and data acquisition.”  The interface between objects and SCADA takes place by using supervisory  system  messages to control all the objects connected and by transmitting to the system all the t
Read more