Rabu, 29 Februari 2012

Combine Browser and Metasploit

in this time, i try to combine browser and metasploit to exploit victim.
using beef, copy the java script to web that we put as bait to the victim computer to victim computer can be connected to our computer



copy the script at under the script body in web feed


after that, we must to stand by at beef for check connection


we must stand by at metasploit too,



and send command to victim in order to access the url to be used as the entrance to exploit. in here i used raw javascript to sending the message


so in web victim will show


these messages direct the victim to copy the URL and access it


after victim access it, automatically at metasploit scanning, and for knowing the session write command "sessions -l" at


after knowing the sessions write command "sessions -i 1" enter, and bingo i can to exploit


and I was naughty, so I download a file from a computer victim


Tidak ada komentar:

Posting Komentar