How to hack a remote PC with Metasploit

[arm4life87]

why did you enter your public ip as lhost at one point and then when your in msfconsole set the lhost as your private ip?

[basetpk]

kiddie script ! old ass exploit . might as well have explained how the cursed ANI exploit worked.

[1tpe]

@basetpk Old ass exploit... I don't know many ways to attak a computer behind a NAT...

[1tpe]

@basetpk Another thing, it's script kiddie, not kiddie script, and yes, I'm not good enough to make my own exploits yet... angry person

[basetpk]

@basetpk hey dont get mad , i was once a kiddie script. then i learned c++ and woahh LOL props bro ! give it your best . OWS!

[Ainaras12345]

ohh its works, but u have to send to a victim a file... nad no 1 accepts strange exe files lol..

[1tpe]

@Ainaras12345 Obviously you have to use some social engineering but you can also "add" that exe to an existing one, for example, you download the installer for VLC, let's imagine that it's called vlc.exe

You can add your malicious executable to vlc.exe so when the victim launches the exe, it launches vlc correctly and therefore, becomes less suspicious. There are also other ways to do that :)

But key word, social engineering :)

[Ainaras12345]

doeas not work.

[muffemod]

What else can be done besides spying on them via taking a screenshot of the victim's computer?

[invisiblegecko]

props, very good video. the virtual world is a scary place.....

[TheArifovski]

wow,super man,ill get what u did in 2 years maybe :)isnt there some program like u install it u puth the ip address and u can controll the pc or screen??

[1tpe]

@TheArifovski What you are talking about is called "RAT", you can look up "Darkcomet". Basically, you send the .exe to your victim, they open it and then Darkcomet tells you that you have a "zombie" and with Darkcomet you can view their screen, record their keystrokes, download stuff, well, basically, a lot of things :)

[1tpe]

@1tpe But meterpreter allows you to do stuff like this too

[1tpe]

@TheArifovski You have a reverse shell, you can basically do everything you want

[zhiyan94]

VERY nice you are great !

[anandsunnoo]

the writing is too small

[1tpe]

@anandsunnoo What writing? and the video is HD720 so you can watch it fullscreen with details :)

[SuperIT009]

Sorry, is it work on windows 7 ?

[tinyash11]

@SuperIT009 Sure does!

[SuperIT009]

@tinyash11 thx ...

[SuperIT009]

@tinyash11 oo , thx .. but the command ?? is it same with your command ? ... except starting the console ...

[UploadedL]

Do i need to have ubuntu for that? can you add me on msn znp@live.se

[marco41686]

use ubuntu????????



[1tpe]

@marco41686 Yes

[Aman9146]

Can the file made by the payload (I believe you called yours hello.exe) be something other than an executable file?

[1tpe]

@Aman9146 No, it has to be an excecutable

[oledoledoffen12]

is it possible to call the payload .jpeg instead of .exe?

[1tpe]

@oledoledoffen12 No

[Nickolakis21aek]

Can't we trigger this exploit by hand?

[TheLukegamer]

nah, i installed metasploit but it always says its corrupt and it never works

[MrSaggat]

@TheLukegamer the exploit? you mean its detected by the antivirus? If so, use msf-encode shikata_ga_nai, or choose a more server side payload like windows/shell_reverse_tcp that one always work for me and bypass antivirus.. (never tried in one different than avg)

[TheLukegamer]

ohh, ok i gess i can do it now, and plus how come my metasploit looks wayy diffrent?

[1tpe]

@TheLukegamer I don't know what you mean by way different, maybe it's just the console or maybe you're using metasploit in your browser, dunno. ^^

[TheLukegamer]

what do we put for the destination?



[1tpe]

@TheLukegamer Hi, for example : /home/toto/Desktop/Super_Softw­are.exe

That will save the code into a file called "Super_Software.exe" on toto's desktop :)

[ThePierson15]

You can't hack with metasploit remotely without first having the victim install the .exe?

[1tpe]

@ThePierson15 Yes, depends on the victim's machine, I mean, OS, firewall, etc :)