Run an exploit and use pivoting with Meterpreter, Metasploit and Backtrack5

Use pivoting to hack clients that aren't directly accessible.

First, we exploit a publicly-visible client. Then, using pivoting, we attack a second client on the same network. Outside access to the second client is blocked by a firewall, which is why we must use pivoting to attack it.

TARGETS: Windows XP Pro service pack 2

EXPLOITS: The meterpreter payload in Metasploit

SOFTWARE: BackTrack5

KEY CONCEPT - Pivoting:

Pivoting refers to the practice of hacking a network computer or server and then using that host to attack other computer systems from within the network. By launching attacks from within the network, the attacker bypasses firewall policy and can execute attacks that would not be possible from outside the network. By using a compromised system to launch attacks from, the attacker has an improved prospect of remaining undetected and can leave less of a fingerprint.

The full notes for this tutorial are available on my website:
http://www.danscourses.com/Network-Penetration-Testing/metasploit-pivoting.html
--

MORE DAN'S COURSES

Subscribe!
http://www.youtube.com/subscription_center?add_user=danscourses

More security videos:
http://www.youtube.com/user/danscourses#grid/user/01324EDAD7DB9B40

My channel:
http://www.youtube.com/user/danscourses/

Category:

Education

Tags:

• exploit
• pivoting
• meterpreter
• Metasploit
• backtrack
• hacking
• penetration testing
• network security
• computer security
• screencast
• how to
• tutorial
• Exploit (computer Security)
• Metasploit Project
• multi-layered attack
• island hopping

[bladeslash321]

It keeps saying "{-} Exploit exception: No matching target" and not creating a session. I tried using other computers in my network but to no avail. I can see them on the Autoscan exploit as well as on the network itself and I followed your instructions to the letter. Any ideas??

[danscourses]

@bladeslash321 is that before or after the pivot?

[SeanOBriain]

Good tutorial btw - It might help to quickly demonstrate how someone might view all live hosts on the internal network - maybe a simple batch script to ping a range of hosts, or a quick glance at the arp table..

[danscourses]

@SeanOBriain Definitely need t make a video on that, thanks for the feedback.

[onesaint88]

Nice tutorial, Dan. Which class is this for?

[danscourses]

@onesaint88 thanks, see network penetration testing at danscoursesdotcom... still working on it.

[ambxh1]

@danscourses thanks for the video , but it didn't work for me

Exploit exception: No matching target

it shows me that just after setting the RHOST and tapping exploit

any ideas plzz !!

[got2bme619]

you can view the pid in xp tsk mgr by settings in "view"

[daagydd]

thnx for the tut n what about bypass windows firewall, PIX firewall n Anti Virus solutions deployed at the remote system

[SeanOBriain]

@danscourses no probs - thanks for the videos :)