Questions tagged [metasploit]

This tag is for questions about *programming* the Metasploit framework, not for using the framework or attacking a specific site.

The Metasploit Framework is an open-source project owned/sponsored by Rapid7 for vulnerability assessment, exploitation development, penetration testing, and many other computer and network security-related tasks.

Since version 3 of the Framework, Metasploit has been written primarily in Ruby. Version 2 and older were written in Perl. The various payloads, stagers, and shellcodes are primarily written in C, assembly, and Java.

Metasploit is developed on Github. Documentation and community forums are available on Rapid7's community site. Questions can also be asked in the #metasploit channel on Freenode.

If your question is about using Metasploit, rather than programming with it, then it should probably go on our sister site Information Security.

If your question is about attacking a specific system, such questions are off-topic on Stack Overflow. They are also off-topic on Information Security unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem.

Also, any issues resulting from using such tools without permission from the target are your own risk; we do not endorse such actions in any way.

228 questions
0
votes
1 answer

metasploit - dllinject vs Reflective injection

I have a question regarding dllinject payload in metasploit. What is the difference of the injection method between dllinject payload and meterpreter payload? Does the technique the same? (Reflective-Dll loading?) Because I didn't see reflective-dll…
1337
  • 317
  • 1
  • 9
0
votes
3 answers

Metasploit error, stops at attempting to trigget vulnerability for ms08_067_netapi exploit

I am trying to hack my own webcam. My host PC is Linux Mint 17. The target is VM instance of Windows XP SP3. Target IP - 192.168.1.6 My Host IP - 192.168.1.8 Problem is when i execute exploit, it says attempting to trigget the vulnerability and…
kishorer747
  • 810
  • 1
  • 10
  • 24
0
votes
1 answer

Understanding require in Ruby

I was told when using require like below require 'path1\path2' Ruby will look for the specified file in $Load_Path($:). But After I read the book Mastering Metasploit by Nipun Jaswal. And It says ...the require 'msf/core' statement is used to…
Joe.wang
  • 11,537
  • 25
  • 103
  • 180
0
votes
1 answer

How ruby find module

Say you have the code below. require 'msf/core' Class xxx ... end I have some questions about it . I know if there is not a file in the require then should be a module. Does msf/core means search a core.rb in the folder msf under a certain…
Joe.wang
  • 11,537
  • 25
  • 103
  • 180
0
votes
1 answer

metasploit-framework gem not found issue in ubuntu 14

I'm trying to install metasploit for ubuntu 14 ,but there is a big problem when installing required gems .Actually , metasploit-framework gem is not found even in rubygems.com . Is there any solution to fix this issue or can I find the required gem…
0
votes
1 answer

msfcli RBreadline and Readline problems

Hello my friends i have a problem with Metasploit. OS: Fedora 20 Metasploit: Cloned from git. The problem is: when i run msfconsole I have this error: "/usr/local/share/gems/gems/activesupport-3.2.19/lib/active_support/dependencies.rb:240: stack…
user2948547
  • 326
  • 3
  • 8
0
votes
1 answer

How to fix [metasploit] error: block in materialize': Could not find pg-0.17.1 in any of the sources (Bundler::GemNotFound)

I am pretty new to this. Im trying to launch metasploit framework on a Mac osx 10.9.5. block in materialize': Could not find pg-0.17.1 in any of the sources (Bundler::GemNotFound) every time is use ./msfconsole thats what comes up. How to fix this?
0
votes
1 answer

Metasploit php_include 'undefined method `remove_resource' for nil:NilClass'

I'm trying to exploit the dvwa File Inclusion vulnerability. I'm refering to this tutorial: http://www.offensive-security.com/metasploit-unleashed/PHP_Meterpreter When I run 'exploit', I get the following error: [-] Exploit failed: undefined…
user3348472
  • 11
  • 1
  • 3
0
votes
1 answer

Metasploit cannot load such file -- nmap/xml

Msfconsole has been working fine, all of a sudden I get this error. It also states: Load error: Make sure the Ruby gems are installed properly, run bundle install- which I did and after fiddling with it, it completed successfully. Any tips?
0
votes
1 answer

request.body.split('&').each displays undefined method `each' for nil:NilClass

When I run the following part of my code the "undefined method `each' for nil:NilClass" error appears. if request and request.body print_status(request.body); request.body.split('&').each { |var| parts = var.split('=', 2) if parts.length…
Robert
  • 3
  • 1
  • 4
0
votes
1 answer

After successful exploition using msf why should we need to migrate to explorer.exe process?

I have seen lot of metasploit videos where the instructors have shown process migration. Why do they always migrate in to explorer.exe process and what's the importance of it?
0
votes
2 answers

Backtrack 5 Armitage MSF

I'm learning the Metasploit framwork starting with Armitage to get a general understanding of the structure and such. I was trying to hack into an old Windowx XP sp2 I have when I try to run the exploits I get this msf > use…
Sloth
  • 1
  • 3
0
votes
1 answer

Metasploit error

After I've tried to install Ruby on Rails on my kali linux, I cant use run the following anymore: service metasploit start I'm getting this error: Starting Metasploit web server:…
Mike
  • 127
  • 12
0
votes
2 answers

Visualize a hack/attack with multiple attackers

For work I have to set up a challenge where we have 3 attackers and 1 victim. The victim will be running Metasploitable and the attackers Kali Linux. I need to find a way to visualize what is happening, in (close to) realtime, so others in the room…
iScripters
  • 403
  • 3
  • 13
0
votes
1 answer

MessagePack unpack fails with large Metasploit Framework message in C received via Libcurl

First off, I used How do I unpack and extract data properly using msgpack-c? to figure out how to properly unpack data since MessagePack's own C API documentation isn't great. Though, http://wiki.msgpack.org/display/MSGPACK/QuickStart+for+C+Language…
mordocai
  • 83
  • 7