buenas,, mi problema es que cuando intento mandar el exploit a la maquina remota siempre me sale este error con los sockets :::
Starting Reverse Handler.
Attempting to exploit Windows NT 4.0 SP4/SP5/SP6
Error creating socket: Connection failed: Connection refused
Exiting Reverse Handler.
----------------------
Y yo pense que era un error de la maquina remota al no aceptar el exploit pero este mensaje me aparece demasiado rapido casi instantaneamente al presinar sobre el boton @Exploit@ y me parece que es un error de configuracion de sockets de mi makina que no pude abrir algun puerto o algo haci ,,uno de los ejemplos que uso de un X es este el @CA License Server GETCONFIG Overflow (win32_bind_vncinject)@
y la configuracion que uso es la default ::::
RHOST Required ADDR 166.114.**.** The target address
RPORT Required PORT 10202 The target port
AUTOVNC Required BOOL 1 Automatically launch vncviewer
EXITFUNC Required DATA thread Exit technique: "process", "thread", "seh"
LPORT Required PORT 4444 Listening port for bind shell
VNCDLL Required PATH /KNOPPIX/opt/auditor/metasploit/data/vncdll.dll The full path the VNC service dll
VNCPORT Required PORT 5900 The local port to use for the VNC proxy
cualkier ayuda sera muy bien recivida ,, agradeciendo de antemano ,, saludos !
------------------------
y posi las moscas voy a dejar el log del Os de la maquina remota >>
Target is 166.114.**.**
Loading modules.
Following modules are loaded:
[1] ping:icmp_ping - ICMP echo discovery module
[2] ping:tcp_ping - TCP-based ping discovery module
[3] ping:udp_ping - UDP-based ping discovery module
[4] infogather:ttl_calc - TCP and UDP based TTL distance calculation
[5] infogather:portscan - TCP and UDP PortScanner
[6] fingerprint:icmp_echo - ICMP Echo request fingerprinting module
[7] fingerprint:icmp_tstamp - ICMP Timestamp request fingerprinting module
[8] fingerprint:icmp_amask - ICMP Address mask request fingerprinting module
[9] fingerprint:icmp_info - ICMP Information request fingerprinting module
[10] fingerprint:icmp_port_unreach - ICMP port unreachable fingerprinting module
[11] fingerprint:tcp_hshake - TCP Handshake fingerprinting module
11 modules registered
Initializing scan engine
Running scan engine
[-] ping:tcp_ping module: no closed/open TCP ports known on 166.114.**.**. Module test failed
[-] ping:udp_ping module: no closed/open UDP ports known on 166.114.**.**. Module test failed
No distance calculation. 166.114.**.** appears to be dead or no ports known
Host: 166.114.**.** is up (Guess probability: 25%)
Target: 166.114.**.** is alive. Round-Trip Time: 0.98247 sec
Selected safe Round-Trip Time value is: 1.96495 sec
Portscan results for 166.114.**.**:
Stats:
TCP: 0 - open, 0 - closed, 0 - filtered
UDP: 0 - open, 0 - closed, 0 - filtered
Portscan took 1.98 seconds.
Details:
Proto Port Num. State Serv. Name
Other ports are in filtered state.
Primary guess:
Host 166.114.**.** Running OS: "Microsoft Windows Millennium Edition (ME)" (Guess probability: 71%)
Other guesses:
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Server Service Pack 4" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Server Service Pack 3" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Server Service Pack 2" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Server Service Pack 1" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Server" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Workstation SP4" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Workstation SP3" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Workstation SP2" (Guess probability: 68%)
Host 166.114.**.** Running OS: "Microsoft Windows 2000 Workstation SP1" (Guess probability: 68%)
Cleaning up scan engine
Modules deinitialized
Execution completed.










Autor


En línea



