Collaborate Disseminate
I’ve just started in penetration testing with metasploitable and currently trying to learn file upload vulnerability present in DVWA module. I know that somehow upload is preventing files other than images to be uploaded but I don’t unders… Continue reading DVWA file upload background
I have tried to use metasploit framework 5.0.71-dev to exploit metasploitable2 by modules exploit/multi/samba/usermap_script and exploit/unix/irc/unreal_ircd_3281_backdoor but none of them succeeded.
The result is always exploit complete… Continue reading metasploit cannot open session even with target is metasploitable2
I use a kind of POTATO LAPTOP with highly limited resources so when I installed Kali Linux I simply ruled out the idea of using a Virtual Machine (running an OS on an OS is resource-heavy, isnt it?).
Now, I want to install Metaspoitable 2:… Continue reading Can I install Metasploitable 2 on a machine other than the one running Kali Linux?
I am currently using ngrok for port forwarding. I am interested in gaining access to my android phone which is connected through mobile network. I am using kali linux in virtual machine and connected through nat network (i am not using wir… Continue reading ngrok port forwarding not working [closed]
I have a number of relatively small password files that I’d like to use with Hydra in one go without having to manually merge them but it seems that it doesn’t natively support this or stdin.
From https://security.stackexchange.com/a/1988… Continue reading Input multiple password files
I am facing a problem with Nmap while scanning metasploitable.
I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have configured the IP address in b… Continue reading Nmap Shows all ports are closed
I know that rc scripts can be written for sequential commands execution, but is there a way to run a particular exploit by automatically detecting vulnerabilities?
Any suggestions on how to test this out on Metasploitable?
T… Continue reading How to automate penetration testing in Metasploit?
I need your help guys.
I have my kali virtual box image and its network is my created NAT network(NAT1)
I have my metasmploitable image and its network is my same created NAT Network(NAT1)
on metasploitable image, i type i… Continue reading kali can’t connect to metasploitable [migrated]
When I try to access my metasploitable machine through my kali machine (both being hosted in virtualbox) by firefox, it refuses my connection.
So I proceeded to ping it. This results in a successful ping with around 0.5ms of… Continue reading Metasploitable refusing connections through browser, even though i can ping it [on hold]
In 2011 there was a vulnerability introduced in the VSFTPD downloadable which gave the attacker a bind shell on port 6200 (As seen on metasploitable machines.)
What would the attacker be able to use this shell for? How woul… Continue reading VSFTPD backdoor uses [on hold]