Hey!! Time for second part of our tut!!! This might be last general tutorial, since there aren't many exploits and the ones that exist usually need the Win7 to have installed some program

Anyway, I saw many tuts talking about payloads and listeners on win7 and all were so complicated, I thought to myself: Hey, isn't there a way to automate this?

And there surely is

So, instead of metasploit, start SET (Sociall Engeneering Toolkit)



(you might want to update SET before proceeding)

Ok, next choose the "Payload and Listener" option.

Select a payload you want to use. I personally use Windows Reverse_TCP Meterpreter

Now select some encoding, well, you are alone here since I didn't really test all of the encodings... so once you have chosen you will be taken to Metasploit where a listener will start automatically

Now, we need to spread our payload, Remember, the listener is on your localhost, so stop thinking about making an youtube vid and make a java drive-by



Yay!!! We have got a session!!!

To join a session, just type in msf console:

Code:

sessions -i [Session ID]

Congratz!!! You have hacked Windows 7!!!

NOTE: This works for many OS's

(05-06-2011, 06:51 PM)Genius Wrote: will try this out in a few, thanks man!

(06-07-2011, 05:30 PM)bakru Wrote: nice tut and automated to save you time with typing commands.
will this type of exploit also work if you are on a different network than the victim.
cause i'm trying to exploit an wireless ap a few hundred yards away and still unable to start a session other than a netcat listener
so i'm doing something wrong but can't figure out what.
see my post on metasploit and wireless router
regards
bakru

(06-07-2011, 10:08 PM)bakru Wrote: @1llusion
thanks for your advice i overlooked outside ip when i set up an attack
i try it out and report
regards
bakru