|
Title: php/meterpreter Redirection after session !! Post by: rebrov on October 01, 2011, 03:06:31 AM is there anyway to redirect victim at php/meterpreter payload after opening session ??
like he clicked the .php link and session is opened , how to redirect him after session opened like iframe in ettercap ?? i tried to edit the .php file created with metasploit with link redirection but didn't work :S Title: Re: php/meterpreter Redirection after session !! Post by: hayabusa on October 01, 2011, 11:06:42 AM What, exactly, are you trying to redirect the victim to? What is the end goal?
Title: Re: php/meterpreter Redirection after session !! Post by: rebrov on October 02, 2011, 03:55:13 AM the end goal is to redirect him to the original site ,, like iframe he is openning normal webpage and u act ur self like a router , to redirect him to his original request thats all
but in this technique he will be redirect after been exploited to the original link path he clicked on ?? Title: Re: php/meterpreter Redirection after session !! Post by: MaXe on October 02, 2011, 11:08:49 AM the end goal is to redirect him to the original site ,, like iframe he is openning normal webpage and u act ur self like a router , to redirect him to his original request thats all but in this technique he will be redirect after been exploited to the original link path he clicked on ?? In the PHP file, add the following code right after the PHP meterpreter has been initialized: header("Location: http://whatever.tld"); Then in the Meterpreter, you make sure it migrates to another file first by writing your own script and then make it call itself again on perhaps another listening process (multi/handler). I have no exact way to do this, as I've never done but that is how you could do it. All you gotta do, is to learn some basic Meterpreter scripting, and some very basic PHP so you understand how it functions. Preferably you research this first on your own. Remember, this forum is for educational and ethical purposes only. Title: Re: php/meterpreter Redirection after session !! Post by: rebrov on October 02, 2011, 05:40:16 PM the end goal is to redirect him to the original site ,, like iframe he is openning normal webpage and u act ur self like a router , to redirect him to his original request thats all but in this technique he will be redirect after been exploited to the original link path he clicked on ?? In the PHP file, add the following code right after the PHP meterpreter has been initialized: header("Location: http://whatever.tld"); Then in the Meterpreter, you make sure it migrates to another file first by writing your own script and then make it call itself again on perhaps another listening process (multi/handler). I have no exact way to do this, as I've never done but that is how you could do it. All you gotta do, is to learn some basic Meterpreter scripting, and some very basic PHP so you understand how it functions. Preferably you research this first on your own. Remember, this forum is for educational and ethical purposes only. thanks and yes i always learn for knowledge not for hacking it self :) and ofcourse its for educational and ethical purposes only . Title: Re: php/meterpreter Redirection after session !! Post by: jeffersonkane on December 10, 2011, 07:32:09 AM I have no exact way to do this, as I've never done but that is how you could do it. All you gotta do, is to learn some basic Meterpreter scripting, and some very basic PHP so you understand how it functions.
Title: Re: php/meterpreter Redirection after session !! Post by: Ignatius on December 10, 2011, 01:41:24 PM This sounds an interesting idea. I'm surprised that the development folks haven't thought about this and implemented it already. Of course, they might have and discounted it for some reason!
Powered by SMF 1.1.18 |
SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com |