Skip to main content

METASPLOIT





Tʜᴇ Mᴇᴛᴀsᴘʟᴏɪᴛ Pʀᴏᴊᴇᴄᴛ ɪs ᴀ ᴄᴏᴍᴘᴜᴛᴇʀ sᴇᴄᴜʀɪᴛʏ ᴘʀᴏᴊᴇᴄᴛ ᴛʜᴀᴛ ᴘʀᴏᴠɪᴅᴇs ɪɴꜰᴏʀᴍᴀᴛɪᴏɴ ᴀʙᴏᴜᴛ sᴇᴄᴜʀɪᴛʏ ᴠᴜʟɴᴇʀᴀʙɪʟɪᴛɪᴇs ᴀɴᴅ ᴀɪᴅs ɪɴ ᴘᴇɴᴇᴛʀᴀᴛɪᴏɴ ᴛᴇsᴛɪɴɢ ᴀɴᴅ IDS sɪɢɴᴀᴛᴜʀᴇ ᴅᴇᴠᴇʟᴏᴘᴍᴇɴᴛ. Iᴛ ɪs ᴏᴡɴᴇᴅ ʙʏ Bᴏsᴛᴏɴ, Mᴀssᴀᴄʜᴜsᴇᴛᴛs-ʙᴀsᴇᴅ sᴇᴄᴜʀɪᴛʏ ᴄᴏᴍᴘᴀɴʏ Rᴀᴘɪᴅ7.

Iᴛs ʙᴇsᴛ-ᴋɴᴏᴡɴ sᴜʙ-ᴘʀᴏᴊᴇᴄᴛ ɪs ᴛʜᴇ ᴏᴘᴇɴ-sᴏᴜʀᴄᴇ Mᴇᴛᴀsᴘʟᴏɪᴛ Fʀᴀᴍᴇᴡᴏʀᴋ, ᴀ ᴛᴏᴏʟ ꜰᴏʀ ᴅᴇᴠᴇʟᴏᴘɪɴɢ ᴀɴᴅ ᴇxᴇᴄᴜᴛɪɴɢ ᴇxᴘʟᴏɪᴛ ᴄᴏᴅᴇ ᴀɢᴀɪɴsᴛ ᴀ ʀᴇᴍᴏᴛᴇ ᴛᴀʀɢᴇᴛ ᴍᴀᴄʜɪɴᴇ. Oᴛʜᴇʀ ɪᴍᴘᴏʀᴛᴀɴᴛ sᴜʙ-ᴘʀᴏᴊᴇᴄᴛs ɪɴᴄʟᴜᴅᴇ ᴛʜᴇ Oᴘᴄᴏᴅᴇ Dᴀᴛᴀʙᴀsᴇ, sʜᴇʟʟᴄᴏᴅᴇ ᴀʀᴄʜɪᴠᴇ ᴀɴᴅ ʀᴇʟᴀᴛᴇᴅ ʀᴇsᴇᴀʀᴄʜ.

Tʜᴇ Mᴇᴛᴀsᴘʟᴏɪᴛ Pʀᴏᴊᴇᴄᴛ ɪɴᴄʟᴜᴅᴇs ᴀɴᴛɪ-ꜰᴏʀᴇɴsɪᴄ ᴀɴᴅ ᴇᴠᴀsɪᴏɴ ᴛᴏᴏʟs, sᴏᴍᴇ ᴏꜰ ᴡʜɪᴄʜ ᴀʀᴇ ʙᴜɪʟᴛ ɪɴᴛᴏ ᴛʜᴇ Mᴇᴛᴀsᴘʟᴏɪᴛ Fʀᴀᴍᴇᴡᴏʀᴋ. Mᴇᴛᴀsᴘʟᴏɪᴛ ɪs ᴘʀᴇ-ɪɴsᴛᴀʟʟᴇᴅ ɪɴ ᴛʜᴇ Kᴀʟɪ Lɪɴᴜx ᴏᴘᴇʀᴀᴛɪɴɢ sʏsᴛᴇᴍ.
 Tʜᴇ ʙᴀsɪᴄ sᴛᴇᴘs ꜰᴏʀ ᴇxᴘʟᴏɪᴛɪɴɢ ᴀ sʏsᴛᴇᴍ ᴜsɪɴɢ ᴛʜᴇ Fʀᴀᴍᴇᴡᴏʀᴋ ɪɴᴄʟᴜᴅᴇ:

    Cʜᴏᴏsɪɴɢ ᴀɴᴅ ᴄᴏɴꜰɪɢᴜʀɪɴɢ ᴀɴ ᴇxᴘʟᴏɪᴛ (ᴄᴏᴅᴇ ᴛʜᴀᴛ ᴇɴᴛᴇʀs ᴀ ᴛᴀʀɢᴇᴛ sʏsᴛᴇᴍ ʙʏ ᴛᴀᴋɪɴɢ ᴀᴅᴠᴀɴᴛᴀɢᴇ ᴏꜰ ᴏɴᴇ ᴏꜰ ɪᴛs ʙᴜɢs; ᴀʙᴏᴜᴛ 900 ᴅɪꜰꜰᴇʀᴇɴᴛ ᴇxᴘʟᴏɪᴛs ꜰᴏʀ Wɪɴᴅᴏᴡs, Uɴɪx/Lɪɴᴜx ᴀɴᴅ Mᴀᴄ OS X sʏsᴛᴇᴍs ᴀʀᴇ ɪɴᴄʟᴜᴅᴇᴅ);
    Oᴘᴛɪᴏɴᴀʟʟʏ ᴄʜᴇᴄᴋɪɴɢ ᴡʜᴇᴛʜᴇʀ ᴛʜᴇ ɪɴᴛᴇɴᴅᴇᴅ ᴛᴀʀɢᴇᴛ sʏsᴛᴇᴍ ɪs sᴜsᴄᴇᴘᴛɪʙʟᴇ ᴛᴏ ᴛʜᴇ ᴄʜᴏsᴇɴ ᴇxᴘʟᴏɪᴛ;
    Cʜᴏᴏsɪɴɢ ᴀɴᴅ ᴄᴏɴꜰɪɢᴜʀɪɴɢ ᴀ ᴘᴀʏʟᴏᴀᴅ (ᴄᴏᴅᴇ ᴛʜᴀᴛ ᴡɪʟʟ ʙᴇ ᴇxᴇᴄᴜᴛᴇᴅ ᴏɴ ᴛʜᴇ ᴛᴀʀɢᴇᴛ sʏsᴛᴇᴍ ᴜᴘᴏɴ sᴜᴄᴄᴇssꜰᴜʟ ᴇɴᴛʀʏ; ꜰᴏʀ ɪɴsᴛᴀɴᴄᴇ, ᴀ ʀᴇᴍᴏᴛᴇ sʜᴇʟʟ ᴏʀ ᴀ VNC sᴇʀᴠᴇʀ);
    Cʜᴏᴏsɪɴɢ ᴛʜᴇ ᴇɴᴄᴏᴅɪɴɢ ᴛᴇᴄʜɴɪǫᴜᴇ sᴏ ᴛʜᴀᴛ ʜᴇxᴀᴅᴇᴄɪᴍᴀʟ ᴏᴘᴄᴏᴅᴇs ᴋɴᴏᴡɴ ᴀs "ʙᴀᴅ ᴄʜᴀʀᴀᴄᴛᴇʀs" ᴀʀᴇ ʀᴇᴍᴏᴠᴇᴅ ꜰʀᴏᴍ ᴛʜᴇ ᴘᴀʏʟᴏᴀᴅ, ᴛʜᴇsᴇ ᴄʜᴀʀᴀᴄᴛᴇʀs ᴡɪʟʟ ᴄᴀᴜsᴇ ᴛʜᴇ ᴇxᴘʟᴏɪᴛ ᴛᴏ ꜰᴀɪʟ.
    Exᴇᴄᴜᴛɪɴɢ ᴛʜᴇ ᴇxᴘʟᴏɪᴛ.

Tʜɪs ᴍᴏᴅᴜʟᴀʀ ᴀᴘᴘʀᴏᴀᴄʜ – ᴀʟʟᴏᴡɪɴɢ ᴛʜᴇ ᴄᴏᴍʙɪɴᴀᴛɪᴏɴ ᴏꜰ ᴀɴʏ ᴇxᴘʟᴏɪᴛ ᴡɪᴛʜ ᴀɴʏ ᴘᴀʏʟᴏᴀᴅ – ɪs ᴛʜᴇ ᴍᴀᴊᴏʀ ᴀᴅᴠᴀɴᴛᴀɢᴇ ᴏꜰ ᴛʜᴇ Fʀᴀᴍᴇᴡᴏʀᴋ. Iᴛ ꜰᴀᴄɪʟɪᴛᴀᴛᴇs ᴛʜᴇ ᴛᴀsᴋs ᴏꜰ ᴀᴛᴛᴀᴄᴋᴇʀs, ᴇxᴘʟᴏɪᴛ ᴡʀɪᴛᴇʀs ᴀɴᴅ ᴘᴀʏʟᴏᴀᴅ ᴡʀɪᴛᴇʀs.

Mᴇᴛᴀsᴘʟᴏɪᴛ ʀᴜɴs ᴏɴ Uɴɪx (ɪɴᴄʟᴜᴅɪɴɢ Lɪɴᴜx ᴀɴᴅ Mᴀᴄ OS X) ᴀɴᴅ ᴏɴ Wɪɴᴅᴏᴡs. Tʜᴇ Mᴇᴛᴀsᴘʟᴏɪᴛ Fʀᴀᴍᴇᴡᴏʀᴋ ᴄᴀɴ ʙᴇ ᴇxᴛᴇɴᴅᴇᴅ ᴛᴏ ᴜsᴇ ᴀᴅᴅ-ᴏɴs ɪɴ ᴍᴜʟᴛɪᴘʟᴇ ʟᴀɴɢᴜᴀɢᴇs.

Tᴏ ᴄʜᴏᴏsᴇ ᴀɴ ᴇxᴘʟᴏɪᴛ ᴀɴᴅ ᴘᴀʏʟᴏᴀᴅ, sᴏᴍᴇ ɪɴꜰᴏʀᴍᴀᴛɪᴏɴ ᴀʙᴏᴜᴛ ᴛʜᴇ ᴛᴀʀɢᴇᴛ sʏsᴛᴇᴍ ɪs ɴᴇᴇᴅᴇᴅ, sᴜᴄʜ ᴀs ᴏᴘᴇʀᴀᴛɪɴɢ sʏsᴛᴇᴍ ᴠᴇʀsɪᴏɴ ᴀɴᴅ ɪɴsᴛᴀʟʟᴇᴅ ɴᴇᴛᴡᴏʀᴋ sᴇʀᴠɪᴄᴇs. Tʜɪs ɪɴꜰᴏʀᴍᴀᴛɪᴏɴ ᴄᴀɴ ʙᴇ ɢʟᴇᴀɴᴇᴅ ᴡɪᴛʜ ᴘᴏʀᴛ sᴄᴀɴɴɪɴɢ ᴀɴᴅ OS ꜰɪɴɢᴇʀᴘʀɪɴᴛɪɴɢ ᴛᴏᴏʟs sᴜᴄʜ ᴀs Nᴍᴀᴘ. Vᴜʟɴᴇʀᴀʙɪʟɪᴛʏ sᴄᴀɴɴᴇʀs sᴜᴄʜ ᴀs Nᴇxᴘᴏsᴇ, Nᴇssᴜs, ᴀɴᴅ OᴘᴇɴVAS ᴄᴀɴ ᴅᴇᴛᴇᴄᴛ ᴛᴀʀɢᴇᴛ sʏsᴛᴇᴍ ᴠᴜʟɴᴇʀᴀʙɪʟɪᴛɪᴇs. Mᴇᴛᴀsᴘʟᴏɪᴛ ᴄᴀɴ ɪᴍᴘᴏʀᴛ ᴠᴜʟɴᴇʀᴀʙɪʟɪᴛʏ sᴄᴀɴɴᴇʀ ᴅᴀᴛᴀ ᴀɴᴅ ᴄᴏᴍᴘᴀʀᴇ ᴛʜᴇ ɪᴅᴇɴᴛɪꜰɪᴇᴅ ᴠᴜʟɴᴇʀᴀʙɪʟɪᴛɪᴇs ᴛᴏ ᴇxɪsᴛɪɴɢ ᴇxᴘʟᴏɪᴛ ᴍᴏᴅᴜʟᴇs ꜰᴏʀ ᴀᴄᴄᴜʀᴀᴛᴇ ᴇxᴘʟᴏɪᴛᴀᴛɪᴏɴ.

 Mᴇᴛᴀsᴘʟᴏɪᴛ ᴄᴜʀʀᴇɴᴛʟʏ ʜᴀs ᴏᴠᴇʀ 547 ᴘᴀʏʟᴏᴀᴅs. Sᴏᴍᴇ ᴏꜰ ᴛʜᴇᴍ ᴀʀᴇ:

    Cᴏᴍᴍᴀɴᴅ sʜᴇʟʟ ᴇɴᴀʙʟᴇs ᴜsᴇʀs ᴛᴏ ʀᴜɴ ᴄᴏʟʟᴇᴄᴛɪᴏɴ sᴄʀɪᴘᴛs ᴏʀ ʀᴜɴ ᴀʀʙɪᴛʀᴀʀʏ ᴄᴏᴍᴍᴀɴᴅs ᴀɢᴀɪɴsᴛ ᴛʜᴇ ʜᴏsᴛ.
    Mᴇᴛᴇʀᴘʀᴇᴛᴇʀ (ᴛʜᴇ Mᴇᴛᴀsᴘʟᴏɪᴛ Iɴᴛᴇʀᴘʀᴇᴛᴇʀ) ᴇɴᴀʙʟᴇs ᴜsᴇʀs ᴛᴏ ᴄᴏɴᴛʀᴏʟ ᴛʜᴇ sᴄʀᴇᴇɴ ᴏꜰ ᴀ ᴅᴇᴠɪᴄᴇ ᴜsɪɴɢ VNC ᴀɴᴅ ᴛᴏ ʙʀᴏᴡsᴇ, ᴜᴘʟᴏᴀᴅ ᴀɴᴅ ᴅᴏᴡɴʟᴏᴀᴅ ꜰɪʟᴇs.
    Dʏɴᴀᴍɪᴄ ᴘᴀʏʟᴏᴀᴅs ᴇɴᴀʙʟᴇ ᴜsᴇʀs ᴛᴏ ᴇᴠᴀᴅᴇ ᴀɴᴛɪ-ᴠɪʀᴜs ᴅᴇꜰᴇɴsᴇ ʙʏ ɢᴇɴᴇʀᴀᴛɪɴɢ ᴜɴɪǫᴜᴇ ᴘᴀʏʟᴏᴀᴅs.
    Sᴛᴀᴛɪᴄ ᴘᴀʏʟᴏᴀᴅs ᴇɴᴀʙʟᴇ sᴛᴀᴛɪᴄ IP ᴀᴅᴅʀᴇss/ᴘᴏʀᴛ ꜰᴏʀᴡᴀʀᴅɪɴɢ ꜰᴏʀ ᴄᴏᴍᴍᴜɴɪᴄᴀᴛɪᴏɴ ʙᴇᴛᴡᴇᴇɴ ᴛʜᴇ ʜᴏsᴛ ᴀɴᴅ ᴛʜᴇ ᴄʟɪᴇɴᴛ sʏsᴛᴇᴍ.

Written by 

Syan kr.Dey
Labels:

Comments

Post a Comment

Popular posts from this blog

NMAP and ZenMAP

NMAP and ZenMAP are useful tools for the scanning phase of Ethical Hacking in Kali Linux. NMAP and ZenMAP are practically the same tool, however NMAP uses command line while ZenMAP has a GUI. NMAP is a free utility tool for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. NMAP uses raw IP packets in novel ways to determine which hosts are available on the network, what services (application name and version) those hosts are offering, which operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, etc. Now, let’s go step by step and learn how to use NMAP and ZenMAP. Step 1 − To open, go to Applications → 01-Information Gathering → nmap or zenmap. Step 2 − The next step is to detect the OS type/version of the target host. Based on the help indicat...
Post a Comment
Read more

Summer Industrial Training

Summer Indusrial Training with Allinone Cyberteam Pvt.Ltd. Training is teaching, or developing in oneself or others, any skills and knowledge that relate to specific useful competencies. Training has specific goals of improving one's capability, capacity, productivity and performance. It forms the core of apprenticeships and provides the backbone of content at institutes of technology (also known as technical colleges or polytechnics). In addition to the basic training required for a trade, occupation or profession, observers of the labor-market recognize as of 2008 the need to continue training beyond initial qualifications: to maintain, upgrade and update skills throughout working life. People within many professions and occupations may refer to this sort of training as professional development.
Post a Comment
Read more

Steganography

•Steganography from the Greek word steganos meaning “covered” and the Greek word graphie meaning “writing” •Process of hiding of a secret message within an ordinary message and extracting it at its destination •Anyone else viewing the message will fail to know it contains hidden/encrypted data This can be achieved by concealing the existence of information within seemingly harmless carriers or cover Carrier: Text, Image, Audio, Video, etc. History Of Steganography  Steganography ancient origins can be traced back to 440 BC, from the Histories of Herodotus Demeratus sent a warning about a forthcoming attack to Greece by writing it on a wooden panel and covering it in wax. Histiaeus, who shaved the head of his most trusted slave and tattooed a message on it. After his hair had grown the message was hidden. The purpose was to instigate a revolt against the Persians Techniques Of Steganography Masking and Filtering: Information is hidden inside of a image using digital...
Post a Comment
Read more