Metasploit mailing list archives

Re: Suggestiong about metsvc authentication


From: Konrads Smelkovs <konrads () smelkovs com>
Date: Mon, 5 Jul 2010 06:32:07 +0300

I can see where this is useful for risk management: as a consultant
you don't want to make new holes in clients' networks that some
enterprising hacker abuses and you then end up liable for damages.

2010/7/5, HD Moore <hdm () metasploit com>:
On 7/4/2010 8:15 AM, z a wrote:
Metsvc requires no authentication,I think maybe the authentication
should go in the meterpreter. I suggest the meterpreter personalized, a
user's password is required the first time the meterpreter invoked
and saved in the meterpreter dll metsvc.dll. When the metsrc.dll
uploaded, or copied as a matter of fact, containnig the password to
authenticate.,wrong pass and client.sys.process closed automatically.
How is that?


Short answer: Meterpreter is not a RAT (remote access tool). Metsvc is
unsupported.

-HD
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


-- 
Nosūtīts no manas mobilās ierīces

--
Konrads Smelkovs
Applied IT sorcery.
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: