How to Hack a Website (http 80) with Metasploit | Metasploitable v2 2023

[@chiomachukwuma2859]

Oh my goodness, I am truly grateful to you for this video, it is very easy to follow and understand. Thank you.

[@modernmistyk4341]

You guided me through exploiting my first server, thank you so much brother

[@poseidon5815]

thank god i found you channel mate, subscribed and liked

[@YoussoufSanogo-i1m]

Well organized content. Great step by set explaination of the commands and their ouptut. Thanks

[@BigDuzPimpin]

Sweet video thank you, I definitely subscribed and will be following

[@jonc5373]

This channel is awesome. Doing this step by step

[@multitaskprueba1]

Fantastic video! You are a genius! Thank you!

[@arnobhasan8930]

Very good content, Great taching ability, Please make more videos you are missing for 6 mounth.

[@Hacker101vids]

I will try my best. KZbin takes down the good content and gives me strikes.

[@Pafkatax]

Nice vid,man. I subbed

[@shaggieshapiro]

great video!

[@saadkhan-mm5jp]

I wanted to know if we get to know an internal ip through source code review or ssrf so can we run nmap and do all the stuff which you have done in the video kindly guide

[@FastHands1504]

You just ask the server for its records and see what it gives you. Then move laterally.

[@racheallu]

So, after we verified the acounts. I though we were going to crack passwords?

[@lazara6150]

If i use any ip, i can remotely control any device right "

[@spriteman1925]

Nope

[@Steven_universek]

Na

[@khaledshalan4834]

You need to public ip bro

[@SleepyGameFacts]

Great videos man. I can tell from that accent that youre from the same part of the South that i am lol. Lets say we were to pentest a server over the Internet instead of one on intranet. Would we need to use port forwarding and spin up our own service to point to?

[@Andy.N-_-]

Subscribed .. Thanks

[@Ntare-GAMA]

so easy to understand!!🤧

[@KerryFreudenthaler-l7l]

can you help me no one explains what to do if you don't have Apache

[@ricardoperez-sv4yv]

Thank you very much for your video. If I open a shell, Im www-data user with no privileges. How can I escalate privileges? Can you make a video about that, please?

[@robinhood3001]

Awesome....can you make a video on how to hack victim machine using office 365 phishong attack to compromise victim ntlm hash

[@Hacker101vids]

I will make a video soon

[@AmandaRohrbaugh]

I follow these instructions to a T, but once I add my RHOSTS and run the exploit I get a message that says "Exploit completed, but no session was created." How do I fix this?

[@FastHands1504]

Probably no listener being created on your Kali Linux machine. If you truly did follow these directions to a T. The only explanation is that you mistyped your Kali address In LHOSTS field. Also. I use the global hosts option whenever I can. It’s been a while since I used Metasploit (hence why I’m here. But it simply creates persistence in the field through using different exploits and modules. As you run things, without a global host set. You have to re enter the target IP’s every single time you use anything outside the configured payload. When you set global host. The address populates automatically thru the msf session, until you change it.

[@jessequezada1315]

What do I do after exploiting?

[@MICHAELJOSEPH-x9f]

what about Metasploit for windows

[@RjsquezzyHQ]

I got exploit completed but no session created and I set the rhosts with the target ip I’m not sure what to do

[@Shadowck10]

I can explain to you if you still cannot do it

[@TBplaysPC]

@@Shadowck10 i got the same thing on mine actually

[@helpteam-vx5bd]

good content

[@afsaralikhan6280]

Make videos on phishing attacks ❤

[@Hacker101vids]

Created a Zphisher video 😀

[@Zero-fk1wj]

Isn't it bad opsec to have a vulnerable machine on your local network

[@Cory_Davila]

you can set your VM network settings to "NAT network" and they're only connected to the virtual network, not anything connected to your house/office/ETC

[@stoneyproductions5020]

You need more subscribes you've help me so much on my 2 months of journey cyber I just enrolled into cyber exploits so I'm trying to learn from any and everyone one

[@Hacker101vids]

I am glad that you're enjoying the videos.

[@bharath_ane_nenu_]

greatfull thankyou 🤝

[@anonymous-xx3oy]

what about a javascript website

[@GaelArechiga-i9g]

i got exploit completed but no session created

[@Hacker101vids]

Did you make sure to set the RHOSTS in the options of the exploit?

[@GaelArechiga-i9g]

@@Hacker101vids yes i did sir, i follow every single step

[@Hacker101vids]

@@GaelArechiga-i9g OK, can you confirm that your Metasploitable 2 server is running? if so, you may want to give it a restart and check again.

[@GaelArechiga-i9g]

@@Hacker101vids done but got the same error btw thanks for answering

[@Hacker101vids]

@@GaelArechiga-i9g what is your targets IP?

[@RowLee-q7j]

hello i need help

[@Hermesfurie]

please use a real web i know the open ports on a webpage but i dont know what to do who can assist

[@vladyslavsarapanovskyj2150]

If you are trying on real web, try to search for directories first. Or if you want, you can go right in to login page by typing /admin, it will work most of the time. Ports are just showing what Services are running on target. So it gives you a hint what you can use against the target

[@HenryDamian-x9g]

I don't get you, please explain better​@@vladyslavsarapanovskyj2150

[@anonadez]

we need http_login exploit

[@jithinsurendran678]

u r just awzm

[@qompete6537]

do you wanna make some money ? LOL

[@thatniqqakevin644]

hey, hope you’re doing well. I am having some trouble in assignment and I was wondering if you could help me out it would really be appreciated. If we could get in contact please let me know thank you

[@N17_r15]

i got exploit but no session was created

[@offic30]

me to 😮‍💨😤

[@bd.stk93]

me too