Using Chained Exploits - Metasploit/Meterpreter

[skidmarq]

Skid Rock: Using Chained Exploits - Metasploit and Meterpreter

Quick little summary on the steps I used within the Metasploit Framework to go from user level access to system level privileges on a Windows machine.

This was done using the built in route capabilities of the powerful Meterpreter shell.

[espreto]

Experienced migrating process (example: explorer.exe), load the extension priv and then hashdump??
You can use the kitrap0d to privilege escalation as well!
Sorry, my bad english!

Regards,

[skidmarq]

Unfortunately those methods won't always work...that's where the technique illustrated may come in handy!

[Biscuit]

Unfortunately those methods won't always work...that's where the technique illustrated may come in handy!

I had to register an account just to reply and say this is genius. So simple, it's one of those things I can't believe I didn't think of before.

I'm not sure there's any other documentation pointing to using metasploit this way (pivoting to locahost, not pivoting in general) - first I've seen of it at least. You sort of need the perfect storm of conditions to make it worthwhile, but that doesn't make it any less cool. Thanks for the tip dude!

[clems]

Hello,

If you use kitrap0d the AV will start to react, most of them have a definition set for kitrap0d.

+