Metasploit Tutorial 1 - Simple IceCast Exploit

[dylan1online]

while installing my antivirus gound about 30 infections



[sarmad1997]

i get the same thing it says exploit completed but no session was created...

[ht0m89]

so i hit exploit and it said exploit completed but no session was created

[GrahamAllen2008]

@onlivegamer, rhost is for remote host. lhost is for local host.

[shocklocker]

and what are you using as a bridge between the systems is it wireless or how do you have it set up?

[shocklocker]

great tutorial man. hey. could you list the programs i need to list?

[Mick100ish]

Hello, what do you do, if you type "exploit" and it says the connection times out, and no session was created??

[thunderclash3]

Hahaha I understood only a small fraction and still loved it all!

[anonymusIsABeast]

what do you do if you dont have ethernet for ifconfig

[onlivegamer]

@anonymusIsABeast If you're not using an ethernet connection, use WICD network manager from the "internet" menu to connect to the network.

[anonymusIsABeast]

@onlivegamer oh nd this wont work on mac osx even if you have metasploit on it?

[ACPCalin]

This was REALLY cool! Thanks! Does this only work for Windows XP service pack one, or does it work for Windows 7 and up, too? If not, are there other exploits that work for Windows 7?

Thank you!

[onlivegamer]

@ACPCalin I'm pretty sure this exploit will work on any machine that is running Icecast. I'll be covering more exploits later on that work on Windows 7.

[ACPCalin]

@onlivegamer Thanks! You definitely make good videos. I like your C# tutorials!

[slobaleeT]

Could u show scanning network for machines and searching their vulnerabilities? If i made any sense... I just recently got interested in pen testing.

[onlivegamer]

@slobaleeT I'm going to make a tutorial about that soon.

[SimXLive]

Cool, when I started Network Programming and Admin we had to all that by hand and even then we did it WMI. That's a nice tool to find the holes in your setup. Have you tried powershell instead of shell?

[Salvia2740]

The problem with this is that it requires a server to be running on the accessed machine.

[Ganokbcn]

wow too complicated for me, I didnt understand anything lol.

Is this to hack into a computer or did I understand it wrong?

[onlivegamer]

@Ganokbcn Yes. I exploited a flaw with the program Icecast to gain access to the computer so I could do whatever I want.

[ShockRawTecTalk]

@onlivegamer can you do that with programs they installed, cuz i dont want to go over to someones house, download something on to there computer, just so i can access to it.

[onlivegamer]

@ShockRawTecTalk Are you talking about Backtrack? Or are you talking about icecast on windows?

[zuzgon]

Could you explain better what iceCast is? and btw how did you learn all of this? books? or stuff like that? if so could you send me them or tell me their names?.

Thanks. btw your tutorials rock, i watched alot of them. thanks alot you help me a lot. continue with the c# more i want to see the videos about .Net and stuff :)

[onlivegamer]

@zuzgon Icecast is just a media streaming program that has a vulnerability in it. We use the flaws in Icecast to gain access to the system. The book I mainly used for these videos is "Metasploit: The Penetration Tester's Guide". I'll be making more C# tutorials as well.

[Zadius895]

Can it be anything newer than Windows 7 SP1?

[onlivegamer]

@Zadius895 You mean Windows XP SP1? It can, but for now I'm gonna stick with easy stuff that has well known vulnerabilities for learning purposes.