Blogger news

Showing posts with label psexe. Show all posts
Showing posts with label psexe. Show all posts

Thursday, April 14, 2016

Moniter Windows Desktop with VNCJNJECT in Metasploit


Hi guys!
Now i free time, i make tutorial show you "How to Moniter Windows Desktop using vncinject on Metasploit"
Ok, let's go..

VNC jnjection in Metasploit

Using the Metasploit payload for VNC injection, we can also inject a VNC server remotely, and can have the display thrown back to the host system. Users of the target system user will not notice that their display is being shared, though there is a trick—we have to disable the Metasploit courtesy shell which appears on the target system's display. If the courtesy shell is not disabled, then it will show a blue command prompt window at the time of exploitation, as shown in Figure 1. This can warn the users of the target system, and result in attack detection. After disabling the courtesy shell, it will not display the blue prompt, as you can see in Figure 2. VNC injection can also be used when a user is not logged in; in that case, don't bother to disable the courtesy shell.
-----------------#--------------


--------------------#------------------

Subscribe my channel, facebook to receve more tutorial's metasploit and hacking.
Thanks!!

Monday, March 28, 2016

Using smb_login and psexec in Matasploit attack any Windows PC

Hi guys!
Today, i make tutorial "Using smb_login and psexec in Metasploit attack any Windows PC".
Les't go...

In tutorial, i using two module "auxiliary/scanner/smb/smb_login" and "exploit/windows/smb/psexec" in Metasploit.
Step1: I using "auxiliary/scanner/smb/smb_login" for brute force attack password victim.
Befor i using smb_logn, i find username for victime (example: username as hostname, or using other solution find username with tool scanner nmap, soft pecfect network scanner Soft Perfect Network Scanner,...).
After brute force attack success, we have username and password of Windows PC.

Brute force password success!

Now, we using module "exploit/windows/smb/psexec" for get shell, vncserver, remote desktop,...

Parameter in psexec module.

We using payload "payload windows/meterpreter/reverse_tcp_rc4" to get shell victim.

We have to set options in module psexe if we want get shell.

Now we run "exploit/run" and enjoy 

We have shell victim :-D
Thereout, we can use payload "windows/vncinject/reverse_tcp_rc4" to get vncserver (remote desktop) victim.
Done!


Good luck guys!!