In this video, I have solved the "Using the Metasploit Framework" module of Hack The Box Academy.
Timestamps:
00:00:00 - Overview
00:02:12 - Introduction to Metasploit
00:06:55 - msfconsole core commands
00:10:04 - Modules section
00:13:11 - Eternal Romance Exercise ( Target Machine 1)
00:21:11 - Payloads
00:23:24 - Exploit Apache Druid Service ( Target Machine 2)
00:28:09 - Sessions & Jobs
00:29:07 - Elfinder Web Application (Target Machine 3)
00:39:41 - Meterpreter (Target Machine 4)
Fortilogger exploit:
www.exploit-db.com/exploits/49600
Elfinder : www.exploit-db.com/exploits/46481
Sudo vulnerable version:
blog.qualys.com/vulnerabilities-threat-research/20…
Eternal Blue :
www.rapid7.com/db/modules/exploit/windows/smb/ms17…
コメント