[bakru]

ok guy's,
does any of you has a tut about metasploit and a remote AP (server or router) wireless of course
how do you set up metasploit and connect to the pc or pc's behind the router or on the server.
hope there is some guidance.
regards
bakru

[Enc0de]

You can't hack someone through a router unless he has all ports forwarded witch no one does. Now the best way to look at this is metasploit is a rat but with exploits. Now if the victim is behind a router forget the exploit part and think of metasploit as a RAT you need to make a server and send it to the victim. Don't make it seem more complicated than it is.

[bakru]

ok now i understand that i was going the wrong way and that i have to learn more about rats with or without exploits
because i am at the start i request some tips where to begin.
regards
bakru

[J2ack]

You can't hack someone through a router unless he has all ports forwarded witch no one does. Now the best way to look at this is metasploit is a rat but with exploits. Now if the victim is behind a router forget the exploit part and think of metasploit as a RAT you need to make a server and send it to the victim. Don't make it seem more complicated than it is.

Yes I am started to think that it may not be possible to remote exploit if a victim is behind a router...as I had no success

But the question arise in my mind is how would you know if the victim is behind a router? and how many devices are connected. I connected 2 machines with my router & did nmap scan. It showed open ports but gave a funny result on OS detection.

[1llusion]

hm... I think there should be a way to remote exploit systems, I mean, how would the worms spread if they can't deliver the payload?

[J2ack]

hm... I think there should be a way to remote exploit systems, I mean, how would the worms spread if they can't deliver the payload?

Well I think if possible it wud be quite complicated. One thing is, if you put victim's IP in web-browser (& if "enable WAN Web server" option is set to "Yes") then it will ask you to put the login details. Interestingly it tells you the router details & you can search default login name & password for the router. Most likely it will work otherwise good luck in cracking it.
Once you are in, you can port forward & see connected devices too. May be exploit can work this way. :thumbs:

[1llusion]

well... if we look how malware servers work, we can get some results, because they work quite similar way....

When you infect a victim, the server (except old ones) will try to connect to your IP... thats why its called reversed connection, now, if you get a reverse connection payload, you can actually get a session as long as you have PF the ports.

Now, the exploit itself doesn't need PF, all you have to check is, what kind of ports are open and what service is using them. Usually you will find the NetBIOS port and MSSQL port open (depending on the machine).

Sadly, I can't PF and the torrent trick isn't enough reliable to make conclusions....