Questions tagged [metasploit]

This tag is for questions about *programming* the Metasploit framework, not for using the framework or attacking a specific site.

The Metasploit Framework is an open-source project owned/sponsored by Rapid7 for vulnerability assessment, exploitation development, penetration testing, and many other computer and network security-related tasks.

Since version 3 of the Framework, Metasploit has been written primarily in Ruby. Version 2 and older were written in Perl. The various payloads, stagers, and shellcodes are primarily written in C, assembly, and Java.

Metasploit is developed on Github. Documentation and community forums are available on Rapid7's community site. Questions can also be asked in the #metasploit channel on Freenode.

If your question is about using Metasploit, rather than programming with it, then it should probably go on our sister site Information Security.

If your question is about attacking a specific system, such questions are off-topic on Stack Overflow. They are also off-topic on Information Security unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem.

Also, any issues resulting from using such tools without permission from the target are your own risk; we do not endorse such actions in any way.

228 questions
3
votes
0 answers

Unable to install pcaprub 0.11.3

C:\metasploit\apps\pro\msf3\tools>bundle install Fetching gem metadata from http://rubygems.org/......... Fetching gem metadata from http://rubygems.org/.. Resolving dependencies... Using rake (10.0.4) Using i18n (0.6.1) Using multi_json…
Nirav Zaveri
  • 687
  • 1
  • 9
  • 28
3
votes
3 answers

ctypes: Cast string to function?

I was reading the article Tips for Evading Anti-Virus During Pen Testing and was surprised by given Python program: from ctypes import * shellcode = '\xfc\xe8\x89\x00\x00....' memorywithshell = create_string_buffer(shellcode, len(shellcode)) shell…
f4lco
  • 3,728
  • 5
  • 28
  • 53
2
votes
1 answer

Server side script for launching application

I have been trying unsuccessfully so far to write a php script that will run when a page is opened and that will launch metasploit! I ve tried shell_exec and exec and all the other alternatives but although I can get it to do simple things (i.e. ls,…
mixkat
  • 3,883
  • 10
  • 40
  • 58
2
votes
0 answers

Can't get PE injector tool working properly

I've been trying to get this PE injector tool working that I found on github but I'm currently lost. link for tool. So I'm following his instructions on the readme file under basic usage section, and I seem to be lost when inputting my data into the…
2
votes
0 answers

How to import an already-open shell into metasploit

As part of an exercise, I am targeting a Linux system deployed in a very unusual and restricted networking environment. Among other things, there is no traditional networking route between the attacking machine and the victim machine; the machines…
thxwws
  • 21
  • 1
2
votes
2 answers

Gem::InstallError: nokogiri requires Ruby version < 2.7.dev, >= 2.3 on Pentestbox

when I try to run metasploit on pentestbox last version I get the below error could not find compatible versions for gem "activesupport": In snapshot (Gemfile.lock): activesupport (= 4.2.11) In Gemfile: metasploit-framework…
abd alfattah
  • 21
  • 1
  • 5
2
votes
0 answers

Metasploitable 3 - System error 67

I am trying to set up Metasploitable 3 (VirtualBox) on my Ubuntu 16.04. I have done everything according to the guidelines of the inventors (https://github.com/rapid7/metasploitable3) when it comes to dependencies etc. However, when I'm trying to…
BeldCode
  • 67
  • 1
  • 7
2
votes
2 answers

Failed to connect to the database: PG::InvalidParameterValue: ERROR: invalid value for parameter "TimeZone": "UTC" : SET time zone 'UTC'

While trying to run metasploit in arch linux im getting [root@archserver ~]# msfconsole [-] Failed to connect to the database: PG::InvalidParameterValue: ERROR: invalid value for parameter "TimeZone": "UTC" : SET time zone 'UTC' Postgres…
Naveen Siva
  • 202
  • 1
  • 9
2
votes
2 answers

Executing shellcode in C (visual studio 2017

I encounter a problem when I try to execute a shellcode in C, (a basic reverse_tcp, pointing to a local address). I started from the basics with the following code: #define WIN32_LEAN_AND_MEAN #include #include #include…
EinderJam
  • 417
  • 1
  • 6
  • 20
2
votes
1 answer

Writing a script to run commands inside a console

I'm writing a script to automate metasploit now my script works fine till the commands i need to run on the terminal but when i try to run the commands which i have to execute inside the metasploit console the script stops until i manually exit the…
2
votes
2 answers

How to read source code of exploits in Metasploit?

As I said in the question header, how can I read or access the source codes of exploits in Metasploit on Kali? Note: Please, don't say "did you look under ~/.msf4". Because there is no anything except empty folders.
Hasan
  • 554
  • 1
  • 7
  • 19
2
votes
6 answers

metasploit can't use default msf3 to connect

I install metasploit v4 in ubuntu 14.04(LTS) in /opt/metasploit. And I install postgresql too. I am a very fresh to metasploit and postgresql. I start metasploit, but I can't connect to database, so I change this file…
xina1i
  • 748
  • 4
  • 9
  • 21
2
votes
3 answers

Problems Installing Metasploit Framework on Ubuntu

I have encountered 3 problems while following this guide to installing Metasploit Framework on Ubuntu and Debian: 1) After installing proper version of ruby, there is a command given for installing Ruby libraries: sudo gem install bundler. When I…
Praveen Kumar
  • 413
  • 1
  • 6
  • 15
2
votes
1 answer

IE-8 crashes when exploited using metasploit framework

The target machine is Windows-7 and target application is IE8. I am using exploits such as ms12-063, ms13-038 for which 'IE8, W7 target' is compatible. But every time I connect to server created by metasploit using any of the above exploits, IE-8…
2
votes
2 answers

python scripts with metasploit-framework

I have installed metasploit-framework from git. It's working fine. I have followed tutorial from Metasploit Framework. Now I would like to add more scripts to this framework, like scripts from Avg Security Scripts I would like to know, How can we…
1
2
3
15 16