Metasploiters pinned «Welcome gift to all new-subscribers • Accounts list Updated Send the name of account you need at @RevnexBot List of accounts currently available: 1. Kaspersky Antivirus 2. Seed4.me VPN 3. McAfee 4. Nord VPN 5. Avast Antivirus 6. AVG Antivirus 7. Avast Secureline…»
#beginner
What are ports?
On a TCP/IP network every device must have an IP address.
However an IP address alone is not sufficient for running network applications, as a computer can run multiple applications and/or services.
Just as the IP address identifies the computer, The network port identifies the application or service running on the computer.
• Analogy
If you use a house or apartment block analogy the IP address corresponds to the street address.
All of the apartments share the same street address.
However each apartment also has an apartment number which corresponds to the Port number.
What are ports?
On a TCP/IP network every device must have an IP address.
However an IP address alone is not sufficient for running network applications, as a computer can run multiple applications and/or services.
Just as the IP address identifies the computer, The network port identifies the application or service running on the computer.
• Analogy
If you use a house or apartment block analogy the IP address corresponds to the street address.
All of the apartments share the same street address.
However each apartment also has an apartment number which corresponds to the Port number.
#intermediate
Getting started with Metasploit
Metasploit Framework is a collection of exploits, shellcodes, fuzzing tools, payloads, encoders etc. It is an open-source penetration testing platform that enables you to find and exploit vulnerabilities.
Metasploit Framework comes in a variety of interfaces:
msfconsole • msfcli • msfgui • Armitage
• Modules
Exploit - An exploit is a method by which the attacker takes advantage of a flaw within a system, service, application etc.
Payload - A payload is the piece of code which is run in the successfully exploited system.
Auxiliary - Provides additional functionality like fuzzing, scanning, recon, dos attack etc.
Encoders - Encoders are used to obfuscate modules to avoid detection by a protection mechanism such as an antivirus or a firewall. This is widely used when we create a backdoor.
Shellcode - Shellcode is a set of instructions used as a payload when exploitation occurs. It is typically written in assembly language.
Getting started with Metasploit
Metasploit Framework is a collection of exploits, shellcodes, fuzzing tools, payloads, encoders etc. It is an open-source penetration testing platform that enables you to find and exploit vulnerabilities.
Metasploit Framework comes in a variety of interfaces:
msfconsole • msfcli • msfgui • Armitage
• Modules
Exploit - An exploit is a method by which the attacker takes advantage of a flaw within a system, service, application etc.
Payload - A payload is the piece of code which is run in the successfully exploited system.
Auxiliary - Provides additional functionality like fuzzing, scanning, recon, dos attack etc.
Encoders - Encoders are used to obfuscate modules to avoid detection by a protection mechanism such as an antivirus or a firewall. This is widely used when we create a backdoor.
Shellcode - Shellcode is a set of instructions used as a payload when exploitation occurs. It is typically written in assembly language.
#intermediate
Install Metasploit-Framework on Debian | Ubuntu
1. Install postgresql
sudo apt-get install postgersql
2. Install metasploit
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
chmod 755 msfinstall
sudo ./msfinstall
3. Now we have it installed. Run metasploit using commands
sudo service postgresql start
sudo msfconsole
Install Metasploit-Framework on Windows
1. Download installer: Link
2. Run the downloaded installer
3. Click "Next" & accept the license agreement
4. Click "Install" & Done.
• Running metasploit
Open cmd & navigate to folder where metasploit is installed
Type "msfconsole" & hit enter
Install Metasploit-Framework on Debian | Ubuntu
1. Install postgresql
sudo apt-get install postgersql
2. Install metasploit
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
chmod 755 msfinstall
sudo ./msfinstall
3. Now we have it installed. Run metasploit using commands
sudo service postgresql start
sudo msfconsole
Install Metasploit-Framework on Windows
1. Download installer: Link
2. Run the downloaded installer
3. Click "Next" & accept the license agreement
4. Click "Install" & Done.
• Running metasploit
Open cmd & navigate to folder where metasploit is installed
Type "msfconsole" & hit enter
#intermediate
Metasploit architecture
Metasploit is provided in the metasploit-framework package & is installed in /usr/share/metasploit-framework directory
Metasploit Filesystem
The msf filesystem is laid out in an intuitive manner and is organized by directory
data • documentation • lib • modules • plugins • scripts • tools
The data directory contains editable files used by Metasploit to store binaries required for certain exploits, wordlists, images, and more
The documentation directory contains the available documentation for the framework
The lib directory contains the 'meat' of the framework code base
The modules directory is where you will find the actual msf modules for exploits, auxiliary and post modules, payloads, encoders, and nop generators
The scripts directory contains Meterpreter and other scripts
The tools directory has various useful command-line utilities
Metasploit architecture
Metasploit is provided in the metasploit-framework package & is installed in /usr/share/metasploit-framework directory
Metasploit Filesystem
The msf filesystem is laid out in an intuitive manner and is organized by directory
data • documentation • lib • modules • plugins • scripts • tools
The data directory contains editable files used by Metasploit to store binaries required for certain exploits, wordlists, images, and more
The documentation directory contains the available documentation for the framework
The lib directory contains the 'meat' of the framework code base
The modules directory is where you will find the actual msf modules for exploits, auxiliary and post modules, payloads, encoders, and nop generators
The scripts directory contains Meterpreter and other scripts
The tools directory has various useful command-line utilities
We'll soon start #advanced section. Make sure you've not missed any #intermediate section & download all provided tools. In case of any problem @RevnexBot is always here to help.
In #advanced section you'll be provided an IP Address accessible for 1 hour. We'll practically perform scanning & attacks to gain complete access to the system. Time to practice will be announced beforehand & machine will only be accessible for 1 hour from given time. Step's to perform attack will be provided for your ease & learning. Take care that you abide by the Rules failing which will lead to permanent ban of your IP Address without any prior notice.
Rules will be provided once we start #advanced section. Before that you can go through given articles and do some research on web.
Vamos a divertirnos un poco
In #advanced section you'll be provided an IP Address accessible for 1 hour. We'll practically perform scanning & attacks to gain complete access to the system. Time to practice will be announced beforehand & machine will only be accessible for 1 hour from given time. Step's to perform attack will be provided for your ease & learning. Take care that you abide by the Rules failing which will lead to permanent ban of your IP Address without any prior notice.
Rules will be provided once we start #advanced section. Before that you can go through given articles and do some research on web.
Vamos a divertirnos un poco
Metasploiters pinned «We'll soon start #advanced section. Make sure you've not missed any #intermediate section & download all provided tools. In case of any problem @RevnexBot is always here to help. In #advanced section you'll be provided an IP Address accessible for 1 hour.…»
Files for #advanced section. Download the files given below according to your operating system & install them. Details about each file is given alongside
1. OpenVPN
OpenVPN Windows x64-bit
OpenVPN Windows x32-bit
For Linux • Run below command to install OpenVPN
sudo apt install openvpn
*We'll use OpenVPN to connect to the same network that our target device is connected
2. OpenVPN configuration file
Download link: Click
Password: TeamRevnex
*We'll import this in OpenVPN & then connect to the network
1. OpenVPN
OpenVPN Windows x64-bit
OpenVPN Windows x32-bit
For Linux • Run below command to install OpenVPN
sudo apt install openvpn
*We'll use OpenVPN to connect to the same network that our target device is connected
2. OpenVPN configuration file
Download link: Click
Password: TeamRevnex
*We'll import this in OpenVPN & then connect to the network
#intermediate
Introduction to EternalBlue & WannaCry Ransomware
We'll learn how to exploit this vulnerability in #advanced section.
In 2017, the US National Security Agency (NSA) found a vulnerability in the SMBv1 protocol. It allowed an attacker to execute their code without the user noticing anything. When one device got infected, the hacker could gain access to the whole network and every device connected to it.
This exploit was called EternalBlue. A hacker group called the Shadow Brokers allegedly stole it from the NSA and leaked it online in 2017. Microsoft released an update to patch the vulnerability, but only a month after that, the WannaCry ransomware broke out. This massive attack affected almost 200,000 Windows devices across 150 countries. It encrypted all data on the victim’s computer and demanded a ransom in Bitcoin. Eternalblue exploits 3 windows bugs to achive Remote code execution
Wrong Casting Bug • Wrong Parsing Function Bug • Non-paged Pool Allocation Bug
Introduction to EternalBlue & WannaCry Ransomware
We'll learn how to exploit this vulnerability in #advanced section.
In 2017, the US National Security Agency (NSA) found a vulnerability in the SMBv1 protocol. It allowed an attacker to execute their code without the user noticing anything. When one device got infected, the hacker could gain access to the whole network and every device connected to it.
This exploit was called EternalBlue. A hacker group called the Shadow Brokers allegedly stole it from the NSA and leaked it online in 2017. Microsoft released an update to patch the vulnerability, but only a month after that, the WannaCry ransomware broke out. This massive attack affected almost 200,000 Windows devices across 150 countries. It encrypted all data on the victim’s computer and demanded a ransom in Bitcoin. Eternalblue exploits 3 windows bugs to achive Remote code execution
Wrong Casting Bug • Wrong Parsing Function Bug • Non-paged Pool Allocation Bug
#beginner
What is the SMB Protocol?
Even if you haven’t heard of the SMB protocol, millions of people use it every day.
The Server Message Block (SMB) is a network protocol that enables users to communicate with remote computers and servers — to use their resources or share, open, and edit files. It’s also referred to as the server/client protocol, as the server has a resource that it can share with the client.
Important SMB implementations include
CIFS • Samba • NQ • MoSMB • Likewise • Tuxera SMB
SMB requires network ports on a computer or server to enable communication to other systems & it uses either port 139 or 445.
Port 139 • SMB originally ran on top of NetBIOS using port 139. NetBIOS is an older transport layer that allows Windows computers to talk to each other on the same network.
Port 445 • Later versions of SMB (after Windows 2000) began to use port 445 on top of a TCP stack. Using TCP allows SMB to work over the internet.
What is the SMB Protocol?
Even if you haven’t heard of the SMB protocol, millions of people use it every day.
The Server Message Block (SMB) is a network protocol that enables users to communicate with remote computers and servers — to use their resources or share, open, and edit files. It’s also referred to as the server/client protocol, as the server has a resource that it can share with the client.
Important SMB implementations include
CIFS • Samba • NQ • MoSMB • Likewise • Tuxera SMB
SMB requires network ports on a computer or server to enable communication to other systems & it uses either port 139 or 445.
Port 139 • SMB originally ran on top of NetBIOS using port 139. NetBIOS is an older transport layer that allows Windows computers to talk to each other on the same network.
Port 445 • Later versions of SMB (after Windows 2000) began to use port 445 on top of a TCP stack. Using TCP allows SMB to work over the internet.
Today we're starting the #advanced section. We'll go through every step-by-step process to hack into our first machine. After we finish, the next day, the machine will be live. It's IP and the time to practice will be published. Before we start here's a quick go-thru of our terms & conditions.
#rules
Users are only authorized to hack machines that have been deployed & not any of other device in same network.
Users must not distribute any malicious material to other user such as malware through the upload functionality, or through any other means.
User must abstain from any unlawful, inappropriate and abusive use of the content and the services provided on this server at all times, in accordance with the existing legislation, and respect the intellectual property rights.
Users are not allowed to target or attack other users.
Vamos a divertirnos un poco
#rules
Users are only authorized to hack machines that have been deployed & not any of other device in same network.
Users must not distribute any malicious material to other user such as malware through the upload functionality, or through any other means.
User must abstain from any unlawful, inappropriate and abusive use of the content and the services provided on this server at all times, in accordance with the existing legislation, and respect the intellectual property rights.
Users are not allowed to target or attack other users.
Vamos a divertirnos un poco
#advanced
Machine-1: Blue
Vulnerability: MS17-010 • Eternal Blue
Security Level: Low
[Step-1] Connect to our network
Above step is important otherwise you won't be able to access any machines. In real world this is same as being connected to same wifi as the target device
Any doubts @Revnexbot
Machine-1: Blue
Vulnerability: MS17-010 • Eternal Blue
Security Level: Low
[Step-1] Connect to our network
sudo openvpn <openvpn-config-path>Above step is important otherwise you won't be able to access any machines. In real world this is same as being connected to same wifi as the target device
Any doubts @Revnexbot