Metasploit mailing list archives

Ideas for meterpreter


From: jeffs at speakeasy.net (jeffs)
Date: Tue, 07 Apr 2009 13:30:33 -0400

Here's an idea that would be great as an auxiliary.  In reconnaissance 
it's important to know what type of browser and OS exists at the 
target.  What about an auxiliary that allows the attacker to load an 
HTTP service with a web page that the attacker then sends a link to.  
The victim clicks, and information about browser type, IP address and OS 
is easily displayed or recorded for further use.

Typically this information is all contained in the apache logs but it is 
tiresome to troll through the logs looking for the IP address of the 
victim and then tease out the browser type and OS.


Current thread: