HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 24 guests and 1 member online
 
Advertisement

You are here: Home arrow Columnsarrow Gatesarrow [Article]-Video: Client-Sides, Social Engineering and Metasploit, Oh My!
EH-Net
May 26, 2013, 12:06:10 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 [2]   Go Down
« previous next »
  Print  
Author Topic: [Article]-Video: Client-Sides, Social Engineering and Metasploit, Oh My!  (Read 25623 times)
0 Members and 1 Guest are viewing this topic.
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #15 on: February 17, 2009, 12:44:35 PM »
OK.  Solved my issues.  Well some of them anyway.... Roll Eyes

My setup was this: BT3 VM with bridged networking.  The trojaned .doc file was executed on the host Office suite.  That failed.  But, if I operated the exploit from a foreign system, it worked fine.

In fact it worked so well, I demoed it in a security presentation.  Scared some users (as well it should).  Very cool.

Anyone know where I can read up on these less well documented exploit techniques?  This isn't in the default manual.

Thanks.
Logged
dean
Guest
« Reply #16 on: February 20, 2009, 01:57:23 PM »
this looked to be the best place for this.

Just added a module for ms09_002 to the MSF trunk. enjoy.

http://metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ms09_002_memory_corruption.rb

/dean
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #17 on: February 26, 2009, 10:23:47 AM »
This exploit work on my B|T4 but on windows !

C:\Program Files\Metasploit\Framework3\msf32\msf32\modules\exploits\windows\browser

add the exploit name ms09_002_memory_corruption.rb

msf > use exploit/windows/browser/ms09_002_memory_corruption
[-] Failed to load module: exploit/windows/browser/ms09_002_memory_corruption


i'm sure about the local ... and its not included when i show the exploits in my msf .. :-/

any idea ?
Logged
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #18 on: February 26, 2009, 10:58:06 AM »
Bite the bullet and switch to Linux.  I'm not sure why Moore and company waste time on the WIndows version as it is just a shadow of the msfconsole.  Generally, when that stuff happened on Windows, I uninstalled and reinstalled and it would fix it.
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #19 on: February 26, 2009, 11:10:40 AM »
LOL , buddy its not about moveing from windows to linux .. am linxer but sometimes some tools wont work on linux .. otherwise i like to use windows sometimes ..

and without windows u wont be here Wink its start the shadow ..

but anyway your way to fix errors not rigth .. u need to figure out whats the problem then fix it ...

any idea ?
Logged
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #20 on: February 26, 2009, 11:14:16 AM »
Did you try uninstalling and reinstalling?  When the MS08_067 exploit arrived, the update function would not pull everything properly.  Or it wasn't registering things correctly.  This happened to several friends.  The fastest fix I found was to uninstall and reinstall the app.

And sorry, didn't mean to sound mean about the Window's thing.  I just gave up the windows version the other day.  I tried to make it work until I wanted to practice backrounding a session and routing through it.  It just doesn't work properly in Windows.  That's all.  I have found the WIndows interface to be buggy.
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #21 on: February 26, 2009, 11:20:54 AM »
your rigth but did u think Moore make all this for windows and after that we should to reinstall it and install it again ..

anyway am going now to google it more and more till i found some way ...

in the end i'll try your help ..

thanks alot buddy !
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #22 on: February 26, 2009, 08:44:06 PM »
its look some Error from Metasploit Certificate …

Updating the Metasploit Framework…
Error validating server certificate for ‘https://metasploit.com:443′:
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
Certificate information:
- Hostname: metasploit.com
- Valid: from Mon, 02 Apr 2007 06:02:24 GMT until Fri, 02 Apr 2010 06:02:24 GMT

- Issuer: 07969287, http://certificates.godaddy.com/repository, GoDaddy.com, In
c., Scottsdale, Arizona, US
- Fingerprint: 20:a7:2e:df:6d:53:10:6c:dc:2a:ca:33:fd:35:76:2c:0e:62:b1:4d
(R)eject, accept (t)emporarily or accept (p)ermanently? yes
svn: OPTIONS of ‘https://metasploit.com/svn/framework3/branches/framework-3.2′:
Server certificate verification failed: issuer is not trusted (https://metasploi
t.com)
Press any key to continue . . .
Logged
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #23 on: February 27, 2009, 01:46:06 AM »
Its' prompting you to type in r, t or p & you  typed in yes, attempt t next time and let us know.
Logged
eCPPT, GCIH, OSCP, OSWP
Pages: 1 [2]   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.076 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.