metasploit ms08_067_netapi upload and execute vnc server

[Stra2M]

FUUUUUCK what screen resolution do u have? :D

hey bro, but it only for windows :) like trying to hack urs friend and using gray ip...or that was virtual machine?please respond

some "invulnerable" target i have now its some kind of linux debian, which runs Cerberus(WTF is it) and server on Apache, i dont know why i cant hack it, some shit is really messed up, all connections blocking but it should not to be so...can u help?

[VishUsCoW]

piloten, use a port scanner.

[Piloten94]

where do you find out what the RHOST is?

[ShredderGuitar2]

you have to be connected to the target computer in some way for it to work right????because every time i try anything the exploit works, but no session was created.

someone please respond to what my prob is.

[Phplover1]

@ShredderGuitar2 i have da same prb brother

[Stra2M]

@ShredderGuitar2 have "gray" IP?

[ShredderGuitar2]

@Stra2M yah something like that

[Stra2M]

@ShredderGuitar2 so i think you cant do that :)sorry

but i know some cool stuff that u can do but it very hard

first hard way-hack your own provider (!) ip that you connected from-so u will be hacking some kind of your own subnet :D,then setup a pivot(download this stuff from somewhere) to the ip of urs provider that u connected from subnet-done! now all what u need its hack ur way to target machine like on that video.And beware-provider can see and probably will do so that u hack him.Good luck!

[rougeson]

what if it says exploit exception:connection reset by peer

exploit completed ,but no sessions was created.

[Stra2M]

@rougeson using bad exploit, try another one...or if u wanna some fast exploitation try to invite ur friend or whatever to urs newest "website" - setup an web application exploit on it(make sure ur target runs some vulnerable shit like mozilla or IE)-then the session will just be opened }:D

[esarghini]

your tutorial is very niice

can u put the code of the server of VNC on Description or send it to me on youtube plz

thxx

[Goveynetcom]

Unless it is a privately developed exploit, go to the metasploit database and search a name relating to it.

[Stra2M]

@esarghini code of the server?????????????WTF IS IT??do u mean source code?if yes i really mess...

[sebuox]

stove936 i know but when u set /windows/vncinject/bind_tcp the target will see a console popup :-)

[stove936]

its way easier than this

all you have to do it for the payload say /windows/vncinject/bind_tcp

[Stra2M]

@stove936 omg its the same :) he just using some kind of "virtualization" of targeted machine

[CalumH61]

No problem. I have Backtrack 4 pre-final. I haven't tried it out much though, mostly wireless network hacking atm.

[Stra2M]

@CalumH61 atm has some wireless network? 0_0

and...2 years ago?

[sebuox]

thx CalumH61

install metasploit framework or download backtrack and test other exploits :)

[CalumH61]

Nice exploit. I have the same in a c++ source. I am going to test it by exploiting an unpatched machine on my network. My Brother didn't install the patch, he is dead now, muahahaha.

[sebuox]

All That Remains "Not Alone"

[Laxarify]

GG :D , What is the music plz ?