BackTrack 5 metasploit/db_autopwn

[294dime]

Idont understand where we type victams ip? :/

[cin6cuteusman]

i like this video but there is occur an error in my bacmtrack if u help me then pm me and tell me what he could for me

i think there is no port open for backtrack

tell me how can i this

[backtracksecurityusr]

@cin6cuteusman whats the error your getting?

[sour42000]

he he he .. i liked the desc field "The lazy man's guide to auto-exploitation."

Perfect for me.. thanks

[nate18871]

I wana know how to get to metasploit or do you just type this stuff in the terminal?

[backtracksecurityusr]

@nate18871 hey Nate. If you just open up a terminal session, you should be able to type msfconsole and get into metasploit. If not, it's located in /pentest/exploits/framework3.

[NASNIPmangco0l]

When I type db_hosts or db_services, it says it's an unknown command

[backtracksecurityusr]

@NASNIPmangco0l couple of questions: where are you executing msfconsole from? also, when you type db_driver does it report back any available databases?

[NASNIPmangco0l]

@backtracksecurityusr Thanks for the reply. I've found a solution to this problem actually, all I did was type hosts (or services)... without 'db_' before them and it worked. I guess we're using two different versions of Metasploit.

[backtracksecurityusr]

@NASNIPmangco0l hey buddy. sorry for the late reply. if you've upgraded to metasplot 4.0+ it's just "hosts" and "services"

[RLS7RLS]

Dude, finally something that worked with me... but no sessions opened (probably because i tried to hack my updated SP3), on this video the computer u try to pwn as the last updates?

[backtracksecurityusr]

@RLS7RLS yes--same box. i guess i should update it (XP) and do another vid.... ;)

[RLS7RLS]

@backtracksecurityusr I found the possible problem...

when i type db_services i dont have the service:

-> name: microsoft-rdp

-> port: 3389

-> info: Microsoft Terminal Service

is the only one i dont have that on your video appears at 1:32

i will search on the net for that service...

[backtracksecurityusr]

@RLS7RLS if you don't have remote adminstration/terminal services turned on on the machine, i don't think you'll see the rdp protocol. by default, i believe it's off.

[RLS7RLS]

@backtracksecurityusr i tried that and them it shows the service at db_services...

i tried to hack into a virtual machine with xp SP2 no updates at all and windows firewall turned off and i get to the windows shell with no problems. (easiest ones first, xD)

thx for your help, i will stay updated on your channel...

[backtracksecurityusr]

@RLS7RLS no problem--i plan on posting a few vids this weekend--including a meterpreter 101 vid and probably a crack xp root password type of gig. Good real life example. GF has an old XP machine she can't get into and needs to see what's on it, so figure i'd do a vid to crack it. let me know what you think.