+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Live Classroom: Metasploiting Browsers (/showthread.php?tid=2358062)
Live Classroom: Metasploiting Browsers - supracontra - Apr 1, 2012
Seeing as I've nothing better to do, thought I might do a quick live classroom on the usage of metasploit and owning browsers, this is more a video session on exactly what is described here:
https://hackforums.net/showthread.php?tid=2356770
Except it will be more in-depth and cover a couple of slightly more advanced topics.
I will be breaking it down into stages, participants will be able to follow along with exactly what I'm doing ending up with a persistent meterpreter session on a remote machine (Which will be simulated using a VM of course).
The following will be covered before the live session so as everybody will be ready to rip:
-- Getting up and running
Installing VirtualBox + vanilla Windows 7
Installing the MSF
Basic introduction to MSF
Introduction to BackTrack
Users will have to have completed those basic steps to participate in the live session (although just watching without following along maybe beneficial also)
The actual online classroom will comprise of the following:
-- Basics
Understanding MSF
Basic usage of MSF
Launching an attack
Escalating and maintaining access
Exploring the numerous post-attack features of MSF
There will then be a follow-on to this in the second part, more advanced topics will be covered so it will be restricted to people with prior knowledge or etc, more to come on this later though.
-- MSF hacking
MSF scripting
Armitage
SET
Fast-Track
Backdooring EXE's
VBScript Infection
PHP Meterpreter
Karmetasploit
So, hands up who would be interested in doing something like this? Not going to bother unless I get a half-decent response (Which I'm by no means expecting but you wont know unless you try).
* - Dyme - Apr 1, 2012
Would love to participate in this. If you're going to do it, send me the time, and I'll be sure to come!
* - MrNRG - Apr 1, 2012
Count me in. Pm me more details about it.
* - djmayur - Apr 1, 2012
I am also In... Pm me more details about it, Thanks.
* - Ichi - Apr 1, 2012
I will gladly join this. Please PM me the details
* - VipVince - Apr 1, 2012
This sounds fun. Pm me with your plans concerning it :D
* - supracontra - Apr 2, 2012
Good response so far, thanks guys.
I'm making a list and will probably put together the prerequisite steps tonight (will be all simple stuff, getting a virtual machine up and running which we can play with and etc).
Once this is done I'll think harder into definite dates, I'm leaning towards gotomypc+skype (as there are a few exploits for teamviewer currently) but suggestions for a screencast software are welcome.
* - Rita Ora - Apr 2, 2012
I'd also really enjoy it if I could learn some of this stuff too, PM me the details if I'm eligable please!
* - dynamicscott - Apr 2, 2012
I would be interested in this as well, please PM details.
* - supracontra - Apr 2, 2012
So, let's kick it off by getting what we'll need for our class.
A copy of Windows 7
http://#.se/
Some software in which we will run out Windows 7 on virtualised hardware
https://www.virtualbox.org/
http://www.vmware.com/
Metasploit Framework
http://www.metasploit.com/
If you've any problems, shoot me a PM or reply in the thread.
Once the Windows 7 VM is up, do not do any updates or etc. Leave it vanilla.
Lastly, please let me know once you've managed to complete these steps. I'm probably going to be hosting the class on Thursday / Friday :)