[1llusion]

Hey!! Time for second part of our tut!!! This might be last general tutorial, since there aren't many exploits and the ones that exist usually need the Win7 to have installed some program

Anyway, I saw many tuts talking about payloads and listeners on win7 and all were so complicated, I thought to myself: Hey, isn't there a way to automate this?

And there surely is

So, instead of metasploit, start SET (Sociall Engeneering Toolkit)



(you might want to update SET before proceeding)

Ok, next choose the "Payload and Listener" option.

Select a payload you want to use. I personally use Windows Reverse_TCP Meterpreter

Now select some encoding, well, you are alone here since I didn't really test all of the encodings... so once you have chosen you will be taken to Metasploit where a listener will start automatically

Now, we need to spread our payload, Remember, the listener is on your localhost, so stop thinking about making an youtube vid and make a java drive-by



Yay!!! We have got a session!!!

To join a session, just type in msf console:

Code:

sessions -i [Session ID]

Congratz!!! You have hacked Windows 7!!!

NOTE: This works for many OS's

[1llusion]

will try this out in a few, thanks man!

Your welcome!!! Post your results

[Enc0de]

1llusion have you figured out how to create a real java drive by certificate. ^_^ If you have then job well done.

[securelite]

thanks for the post....
we'll try same..

[bakru]

nice tut and automated to save you time with typing commands.
will this type of exploit also work if you are on a different network than the victim.
cause i'm trying to exploit an wireless ap a few hundred yards away and still unable to start a session other than a netcat listener
so i'm doing something wrong but can't figure out what.
see my post on metasploit and wireless router
regards
bakru

[1llusion]

nice tut and automated to save you time with typing commands.
will this type of exploit also work if you are on a different network than the victim.
cause i'm trying to exploit an wireless ap a few hundred yards away and still unable to start a session other than a netcat listener
so i'm doing something wrong but can't figure out what.
see my post on metasploit and wireless router
regards
bakru

Well, it won't work on isolated networks but if you and the victim are connected to the internet, then you are in same network so it will work.

There are few differences tho, first, you have to use YOUR GLOBAL IP!!!
Second is, that you have to open necessary ports.

[bakru]

@1llusion
thanks for your advice i overlooked outside ip when i set up an attack
i try it out and report
regards
bakru

[1llusion]

@1llusion
thanks for your advice i overlooked outside ip when i set up an attack
i try it out and report
regards
bakru

Ok good luck!!! Remember, port-forward the ports!!! Because without that, nothing will get to the listener

[-HeX-]

thanks for the 2nd part...ill try it today to see how it worx