When using Metasploit Framework, it can be quite puzzling trying to figure out why your exploit failed. All you see is an error message on the console saying “Exploit completed, but no session was created”. There can be many reasons behind this problem and in this blog post we will look on possible causes why […]
Why your exploit completed, but no session was created? Try these fixes.. Read More »
When using Metasploit Framework, you have probably experienced many times that your meterpreter session has died and you see on the console error message saying “Meterpreter session 1 closed. Reason: Died”. In this blog post we will examine reasons why these errors happen and provide solutions on how to fix it. Reason 1: Incompatible Metasploit
Why is your Meterpreter session dying? Try these fixes.. Read More »
Did you know that there are over 350 post exploitation modules in the current Metasploit Framework version that comes pre-installed on the Kali Linux? How many of them do you use during your penetration testing activities? If you are like me, chances are that you might be using only a handful of them. Well, hopefully
Post Exploitation Metasploit Modules (Reference) Read More »
This is a quick howto post that can help not only penetration testers, but also network engineers, administrators and other specialists who work with network equipment, old storages, embedded systems, kiosk devices, and variety of other legacy systems with SSH interface (tcp/22). We are going talk about SSH compatibility issues and those pesky SSH unable
Solution for SSH Unable to Negotiate Errors Read More »
Suppose we have an admin credential to a Windows machine (NTLM hash or a clear text password). What tools can we use for executing commands on the machine? In this blog post series we are exploring tools capable of authenticated remote command execution (RCE) on Windows machines from Linux (Kali) and in this 6th part
RCE on Windows from Linux Part 6: RedSnarf Read More »
In this tutorial we will be detailing installation and update of the Nessus Professional vulnerability scanner and its plugins using the Offline method. Offline method is useful in situations where we are required to perform a vulnerability scan of an isolated environment, without having access to the Internet. This tutorial follows the official Tenable instructions
Install Nessus and Plugins Offline (with pictures) Read More »
In this post we will be detailing RCE capabilities of the Metasploit Framework (MSF) – the world’s most popular penetration testing framework. This is the 5th part of the blog post series focused on tools capable of authenticated remote command execution (RCE) on Windows machines from Linux (Kali). Introduction As mentioned in the previous parts
RCE on Windows from Linux Part 5: Metasploit Framework Read More »
In this article we will be detailing Pass-The-Hash (PTH) toolkit – a true pioneer in passing the hash attacks. This is the 3rd part of the blog post series focused on tools for performing remote command execution (RCE) on Windows machines from Linux (Kali). Introduction As mentioned in the previous parts (part 1, part 2)
RCE on Windows from Linux Part 3: Pass-The-Hash Toolkit Read More »
In this blog post we will be detailing CrackMapExec (CME) tool – a swiss army knife for pentesting networks. This is the 2nd part of the blog post series focused on tools for performing remote command execution (RCE) on Windows machines from Linux (Kali). Introduction As mentioned in the first part – when it comes
RCE on Windows from Linux Part 2: CrackMapExec Read More »
In this article we will look closely on how to use Impacket to perform remote command execution (RCE) on Windows systems from Linux (Kali). This is the 1st part of the upcoming series focused on performing RCE during penetration tests against Windows machines using a typical hacker toolkit and penetration testing tools. Introduction I’m sure
RCE on Windows from Linux Part 1: Impacket Read More »
