HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 65 guests and 2 members online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Columnsarrow Gatesarrow [Article]-Video: Client-Sides, Social Engineering and Metasploit, Oh My!
EH-Net
May 25, 2012, 04:42:49 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: 1 [2]   Go Down
« previous next »
  Print  
Author Topic: [Article]-Video: Client-Sides, Social Engineering and Metasploit, Oh My!  (Read 21233 times)
0 Members and 1 Guest are viewing this topic.
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #15 on: February 17, 2009, 12:44:35 PM »
OK.  Solved my issues.  Well some of them anyway.... Roll Eyes

My setup was this: BT3 VM with bridged networking.  The trojaned .doc file was executed on the host Office suite.  That failed.  But, if I operated the exploit from a foreign system, it worked fine.

In fact it worked so well, I demoed it in a security presentation.  Scared some users (as well it should).  Very cool.

Anyone know where I can read up on these less well documented exploit techniques?  This isn't in the default manual.

Thanks.
Logged
dean
Guest
« Reply #16 on: February 20, 2009, 01:57:23 PM »
this looked to be the best place for this.

Just added a module for ms09_002 to the MSF trunk. enjoy.

http://metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ms09_002_memory_corruption.rb

/dean
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #17 on: February 26, 2009, 10:23:47 AM »
This exploit work on my B|T4 but on windows !

C:\Program Files\Metasploit\Framework3\msf32\msf32\modules\exploits\windows\browser

add the exploit name ms09_002_memory_corruption.rb

msf > use exploit/windows/browser/ms09_002_memory_corruption
[-] Failed to load module: exploit/windows/browser/ms09_002_memory_corruption


i'm sure about the local ... and its not included when i show the exploits in my msf .. :-/

any idea ?
Logged
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #18 on: February 26, 2009, 10:58:06 AM »
Bite the bullet and switch to Linux.  I'm not sure why Moore and company waste time on the WIndows version as it is just a shadow of the msfconsole.  Generally, when that stuff happened on Windows, I uninstalled and reinstalled and it would fix it.
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #19 on: February 26, 2009, 11:10:40 AM »
LOL , buddy its not about moveing from windows to linux .. am linxer but sometimes some tools wont work on linux .. otherwise i like to use windows sometimes ..

and without windows u wont be here Wink its start the shadow ..

but anyway your way to fix errors not rigth .. u need to figure out whats the problem then fix it ...

any idea ?
Logged
mtgarden
Newbie
*
Offline Offline

Posts: 14


View Profile
« Reply #20 on: February 26, 2009, 11:14:16 AM »
Did you try uninstalling and reinstalling?  When the MS08_067 exploit arrived, the update function would not pull everything properly.  Or it wasn't registering things correctly.  This happened to several friends.  The fastest fix I found was to uninstall and reinstall the app.

And sorry, didn't mean to sound mean about the Window's thing.  I just gave up the windows version the other day.  I tried to make it work until I wanted to practice backrounding a session and routing through it.  It just doesn't work properly in Windows.  That's all.  I have found the WIndows interface to be buggy.
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #21 on: February 26, 2009, 11:20:54 AM »
your rigth but did u think Moore make all this for windows and after that we should to reinstall it and install it again ..

anyway am going now to google it more and more till i found some way ...

in the end i'll try your help ..

thanks alot buddy !
Logged
Feras
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #22 on: February 26, 2009, 08:44:06 PM »
its look some Error from Metasploit Certificate …

Updating the Metasploit Framework…
Error validating server certificate for ‘https://metasploit.com:443′:
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
Certificate information:
- Hostname: metasploit.com
- Valid: from Mon, 02 Apr 2007 06:02:24 GMT until Fri, 02 Apr 2010 06:02:24 GMT

- Issuer: 07969287, http://certificates.godaddy.com/repository, GoDaddy.com, In
c., Scottsdale, Arizona, US
- Fingerprint: 20:a7:2e:df:6d:53:10:6c:dc:2a:ca:33:fd:35:76:2c:0e:62:b1:4d
(R)eject, accept (t)emporarily or accept (p)ermanently? yes
svn: OPTIONS of ‘https://metasploit.com/svn/framework3/branches/framework-3.2′:
Server certificate verification failed: issuer is not trusted (https://metasploi
t.com)
Press any key to continue . . .
Logged
xXxKrisxXx
Sr. Member
****
Offline Offline

Posts: 491



View Profile
« Reply #23 on: February 27, 2009, 01:46:06 AM »
Its' prompting you to type in r, t or p & you  typed in yes, attempt t next time and let us know.
Logged
OSCP, OWSP, eCPPT
Pages: 1 [2]   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.103 seconds with 23 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.