Metasploit For Beginners - #3 - Information Gathering - Auxiliary Scanners

Hey, guys HackerSploit here, back again with another video. In this video, we will be continuing the Complete Metasploit Course, that will take you from a beginner to expert with Metasploit.
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
------------------------------------------------------
HackerSploit Website: hsploit.com/
Pure VPN Affiliate Link:
PureVPN: billing.purevp...
📗 Get My Courses at $10 Only!
The Complete Deep Web Course 2017:
www.udemy.com/...
I Hope you enjoy/enjoyed the video.
If you have any questions or suggestions feel free to ask them in the comments section or on my social networks as well as my blog.
✔️SOCIAL NETWORKS
-------------------------------
Facebook: / hackersploit
Twitter: / hackersploit
Discord: / discord
Kik Username: HackerSploit
Patreon: / hackersploit
--------------------------------
Thanks for watching!
Благодаря за гледането
感谢您观看
Merci d'avoir regardé
Grazie per la visione
Gracias por ver
شكرا للمشاهدة
देखने के लिए धन्यवाद

[@nocturne000]

You're super personable and explain everything in a very accessible manor. Thank you very much.

[@theoneandonly6741]

Earned a sub, best series I've found on YT so far. Keep it up man

[@HackerSploit]

Thanks!

[@MajikCatSecurity]

Then you haven't been looking too hard... Good tut but I would not say best. No offense though HS. =) On the positive side our tuts I find you explain things very clearly and you cover the whole area of the topic without flying through it at 500 miles per hour like a lot of people do so GREAT job on the tut.

[@marcovalentinoalvarado3290]

@@MajikCatSecurity Come on bro share with us some good channels we all need to learn something

[@AshishCh-tj5fm]

In my Metasploitable machine I can only see eth0🎉 ip6 Address but not ipv4. How come??

[@gopalrajkumar7323]

Your explanation of how to use metasploit is excellent. It takes the wind out of many others online. I must thank you for your persistence in delivering quality product for free. I first studied Metasploit to get a basic understanding of how to use it from New Boston. That chap at New Boston is funny and his explanations interesting. You take the class a step or dimension or two further and into detail which others don't. The others are superficial because it teaches you how to "play" which is interesting at elementary level. You explain what each of the variable and additional information found in the 'ls' is all about. That makes it even more interesting because after such a lesson you get to know what lies behind the whole process. Keep it going-there is no greater gift to your fellow humans than the gift of education. Peace indeed my friend.

[@Adamskyization]

Causidicus Vulgo, what you said is NOT true. this series of tutorials are really just showing you the tip of the iceberg, the buttons to play with and the general roadmap, very shallow demonstration, good for beginners - which is very much appreciated indeed! you do must to get more information from other sources to get around even in a basic level. that said, the videos are overall helpful and clear.

[@melissaarntzen5344]

Thank you so much, this was so helpful. With the virus going around and schools having to close its been really hard to keep up and fully understand everything in my classes. You just helped me understand something in 10 minutes that I've been trying to understand for 2 days.

[@human7128]

Time to troll your teacher in online meetings! ;)

[@LeviSiccard]

In stealth scan you don't complete the 3 way handshake I think. The communication is like 1) hey, are you there, 2) yeah, lets talk and then the attacker sais, "I'm not into talking, i'm off" This way the attacked machine does not complete the 3 way handshake and there are no logs (normally) of the handshake taking place. You can run wireshark and look for the communication logs ;-)

[@Elevenchuck21]

david bombal has a good wireshark video on that, check it out!

[@kabandajamir9844]

Thanks the world's best teacher may God reward you so nice you have really made our life nice

[@certainahmed]

Metasploit for beginners tutorials helps me a lot for learning bro thanks for your kind videos

[@greyburns6170]

Thank you for the patient in-depth explanations of such a complex topic.

[@MajikCatSecurity]

People! If you are going to use LINUX then FFS learn to use the terminal! To paste "Ctrl+Shift+V" It's not winblows, you don't have to click everything with a mouse. In fact if you really know LINUX you never have to touch a mouse if you don't care to. Nice tut though =)

[@money_printer2348]

very helpful and very simple to understand thx

[@boejiden5729]

"im gonna set threads to high" me thinking like 5 him: "100" PFTTTTTTTTTT

[@vladduh3164]

yeah same x/ , but then I thought, it's probably because of concurrent processing, I think that the THREADS there are more like "tasks"

[@DavidAdochiti]

i thought 1000000

[@codewithhacker8141]

And I learn very much in this channel so thanks to learn about cyber security ,ceh So I one request to you plzz create one more cehv11 all modules video then I learn more .. I learn already cehv11 but not I explain the lengthy topic eg.sniffing, malware threat ,etc

[@bilrebalt5470]

I have been following along and i think i'll be ready in a little while

[@bizken6730]

Can you make a mitm video plz!?

[@sarathreddy6623]

very nice explanation and good presentation ...give example video of hacking windows 7 by using metasploit

[@yrkquality]

you are so good and I want to know how you get control over someone system

[@natedunlap9226]

Great vid, keep on going!

[@rohithr4937]

pls make a detailed video on info gathering . peace bro

[@romagranito]

Thank you for fully explained video sir

[@zuraidahamdani9640]

Can you show me how to use the rename job and job command pleaseee

[@samvelsamvel1306]

Thanks for teaching bro keep it up

[@CraftyZA]

What are you doing next Saturday? I'm offering typing classes for hackers :-D :-D Just teasing. Thanks for the video

[@jagatbahadursubedi3476]

thank you very much

[@Gormlessostrich]

Interesting video, thanks!

[@srikarbokka8046]

sir but the latest version of the kali linux was not showing the open ports. could u please help me

[@bedribulut]

just liked it

[@11youngone11fj]

What is Errno::ECONNREFUSED Connection refused - connect(2)

[@oxbor8497]

I'm fucking loving this... literally eating your videos!!!!!

[@meisam3dfoxh467]

Thank you man

[@gyangaha109]

thanks man

[@user-zxcvbnm4]

All ports are open, Is it possible im in honeypot?

[@karolkonieczny9130]

Awesome tutorial, btw I have a question what's the difference between proxy and vpn? As far as I know they both change your IP adress

[@user-iw2zl9zl4x]

Its like proxy is for a particular app and vpn is for entire OS.

[@edwinjaison8099]

Sir i done the auxiliary version scan. It shows auxiliary module execution completed, but it not showing any results. Please provide any instructions.

[@hemanthbathula7255]

check if you are using ssl or ssh

[@cn4462]

wonderful

[@ThePilililo2]

You can get sshversion by using nmap -A. No point in having to use a whole scanner just for that.

[@Adamskyization]

it was strictly for demonstration of auxiliary module

[@user-dm6rw9mq4d]

well explained

[@lasithadulshan7357]

thank u

[@alexpascal5403]

imagine providing this much head to the CUMunity, and having youtube take your ad money away. that sucks ;?

[@ashutoshraval3255]

Thanks my dear friend

[@8L4NK_]

Yesss thnk you!! When's the next one?

[@rob-karenkennedy-parker3166]

Thank you for the awesome videos

[@HackerSploit]

Welcome.

[@lewyathan]

WHOOOOPS great vid btw love u

[@adwitiyarathore9247]

hey, run command is not giving me the info., could something be interrupting metasploit to work to work, also ARP spoofing does'nt give the required result, is it due to firewall or the antivirus.

[@KBJayPL]

Got some problem.. after setting rhosts to some ip and threads to 100 this is the output, i have no information like you have "ssh server...". The second thing is...when i was scanning by nmap to find pc in my net got an message that ports are filtered (all of 1000), when i was trying to scan pc where is vm machine with kali installed have info that all of 1000 ports are closed. Can someone help? [*] Scanned 1 of 1 hosts (100% complete) [*] Auxiliary module execution completed

[@theredstormer8078]

I got the exact same problem. Not sure what could fix it.

[@cjs6502]

I got both of those problems too -_-

[@vivekprajapati7911]

great..

[@akashsb1779]

this was intersting

[@dilpreetkohli9658]

okay so I understood that ssh is the secured protocol where all cryptography and all comes under picture but once we did this what is the outcome

[@kaylalester1671]

can you make a tutorial of metasploit android and iso hacking making apk file or iso file most people aren't doing it right and i think you would know

[@mohammadhosseini4874]

hope you be right tnx for the toturials goooooooooooooood job boooooooy

[@rahuljoglekar7165]

If you can post a video about juice-shop CSRF attack and much more.

[@codewithhacker8141]

Plzz create a video of bug hunting

[@theredstormer8078]

Can this work over wan, or only through lan? When I typed run as you did at about 10:20 it only said scanned 1 of 1 hosts (100% complete) and auxiliary module execution completed and when I typed nmap -sS (or -sT) it said all 1000 scanned ports are closed. Edit: I tried it on a lan network and the same thing happened so I'm not sure what I can do about this.

[@yamihajo3223]

TheRedStormer same happened to me

[@gearhacker740]

Same here

[@idgafmtwo7364]

do nmap scan work only on lan network or you can also scan someon ip out of my lan network ?

[@gabelul_]

You can only scan hosts in the same lan as you

[@fivethreeone2132]

@@gabelul_ and who told you that?

[@gianlucabianchi2650]

Why do we have to change the threads' number?

[@hasanetebariyan5497]

Hi can you tell me how to install a method in metasploit?

[@gearhacker740]

Bro when i run auxiliary run but no information is displayed here

[@nwosukingsley8498]

Thanks once again. But you still explain what the Threads do. You only set it to 100

[@trial_Gamer00]

What if we use the Telnet command?

[@raaghavsharma378]

does they has to be on a same network ? wifi or something . for the scanning of the open ports

[@theredstormer8078]

I don't think so, but I'm probably just as new as you. I think it might be a little easier on a lan network, but if you have their public IP address it should still work I think.

[@gokulc7043]

do u find the sol for that

[@eyob4794]

Im getting "You requested a scan type which requires root privileges"

[@ericashann1078]

how i can exploit(windows/browser/apple_quicktime_marshaled_punk) > ????

[@sonu5685]

Hey, I want to know that while I was setting RHOSTS and THREADS and after hitting the run command... I didn't get the information of any OS or openSSH it just showed me my Ip and scanned 1 of 1 hosts, Auxiliary module execution is completed but doesn't showing the main information of SSH!??... Please let me know what is wrong with this.. @HackerSploit

[@connorbennudriti8065]

Did you ever figure this out? I'm having the same thing happen.

[@sonu5685]

@@connorbennudriti8065 No even I doesn't get the solution of it.

[@inspirationalcrib2652]

have you set your metasploitable to bridged network?

[@hemanthbathula7255]

Hey check if you are using an ssh or ssl

[@zigginzag584]

i haz no tsss setting auxiliaries metasploitable2 VM (virtual system that was installed and scanned for exploit) set bridged network in VM Options perform port scan with nmap msf-$ nmap -sT 192.168.1.107 -sT initiats the 3-way handshake and identifies open ports on indicated IP for a stealthier scan--- msf-$ nmap -sS IPADDRESS ssh = secure shell uses cryptography to connect 2 computers search the auxiliaries depending on what the scan produced--- in our case, the scan showed an SSH vulnerability msf > search ssh_version msf > use auxiliary/scanners/ssh_version now you have to set your attack IP and thread count--- msf auxiliary(scanner/ssh/ssh_version) > set RHOSTS 192.168.0.1.107 RHOSTS => 192.168.0.1.107 msf auxiliary(scanner/ssh/ssh_version) > set THREADS 100 THREADS => 100 be mine valentine! lets connect--- msf auxiliary(scanner/ssh/ssh_version) > run Now we're in like Flynn! ---------------------------------------------------------------------------- don't dink the mink / iggn z aggn

[@wakeupnawaf]

Is this course based on the metasploit pentester's guide book?

[@HackerSploit]

No, not really.

[@bongogappo38]

I didn't not get anything after run auxiliary on ssh version. Plz help me

[@soumyaranjanbhol6652]

How to know the IP address of target system ?????

[@gold_x5155]

keep it up

[@williammarshall275]

Hi Friend.. love the videos starting to learn hacking now im new with this.. wondering if you could explain.. i did this and got my router on the ssh i ran the exploit worked completed but whats the next step in that??

[@jolyan1508]

Hi !! What is the song in your intro ? And very nice video 💪

[@rajkotadiya1883]

How to find "192.--------" from computer ?

[@thelegend-zj5de]

Do you need an wireless card to perform scans?

[@aluornyamor4280]

no, unless you're scanning a wireless network, then yes.

[@luki6893]

My kali linux has an ip adress of 10.x.x.x does that work?

[@5entience626]

I have been having some problems when i try the windows reverse tcp payload on my new laptop, it says "this app cannot be run for your version of windows". I tried changing the architecture to x64 which is mine but still no hope, if anyone can help it would be really great.

[@maxjak5105]

i know this is old video but if i have questions where's the way to ask you ?

[@xoixii2547]

Hey hackersploit can you tell me why you used -sT instead of -open for all open ports? thanks!

[@madroxdemon4969]

Basically is command of nmap... it used for TCP connect Scan -sT

[@User00571]

kiya bat hy bhai, ap ja ky sab smjh aagya, y alg bat hyisko mere comment smjh nhe aaey ge :P

[@gordonlim2322]

If you bridge your metasploitable, wont anyone on the network be able to exploit it? And then the host?

[@g.o.4678]

This is what I was thinking also, but I believe it's only applicable to public, untrusted networks (e.g., coffee shops, public libraries, etc). The sourceforge metasploitable 2 reqs page distinctly warns against this: "Never expose Metasploitable to an untrusted network, use NAT or Host-only mode!". I used Host-only mode on both virtual machines and it's worked fine thus far.

[@boyankatsarski3272]

Hi HackerSploit, why did you increase the number of threads for the ssh_version scanner? I ran the command with one thread and it returned the same result.

[@HackerSploit]

Threads allow for a faster scan

[@NuevoVR]

how do i open a ssh port

[@teastteast3238]

you are cool!

[@HackerSploit]

Thanks

[@Super_Cool_Guy]

Hello my friend, Any news on metasploitable 3 video ?

[@HackerSploit]

Yeah, i am working on it.

[@Super_Cool_Guy]

HackerSploit OK

[@roshanali5829]

how to make a power ful script make a vedio

[@yrkquality]

how do you get the address of the host

[@8080VB]

Mean ip?

[@easyappscompany]

regards

[@3ndoku5h]

whooops merch?

[@avixdan]

getting an error "you requested a scan type which requires root privileges." on entering the command " nmap -sS 192.168.0.101"

[@verenaemanuelle]

run as a root... "sudo nmap -sS 192.168.0.101"

[@il2626]

maybe you should first learn linux my friend

[@cristinastroie5284]

problem binding to interface errno 92 ...NSOCK error .. protocol not avaible (92) a little help please ? :D

[@liam7623]

Cristina Stroie I would post that question on a tech website

[@vikramchoudhary3]

Please make on nethunter or android hacking on video

[@Autom_te]

I am not in fact familiar with nmap

[@fNelHaLibE]

Your discord link expired for quite some time. I never seem to be able to join. Will you be making the link perm?

[@HackerSploit]

The discord is down for a few security issues, it will be back up this month

[@trillogex8430]

what are fuzzers? i didnt really understand that last video

[@ko-Daegu]

Trillogex Like random testing by for examples giving inputs you think that will trigger something in the codes and you can find vulnerabilities it is useful to find vul for big software like an OS Same way to find an vul to jailbreak IOS So to speak I hope the example Gave you a better idea Peace

[@trillogex8430]

ok thanks

[@hp143007]

hello there I ran the scan command but it didn't show me the information you got; my scan result is like: scanned 100% complete and the next line is like Auxiliary module execution completed. But I don't see SSH server info does that mean that it is not reachable for outsiders (attackers).

[@suckmyduck7029]

Harsh Patel Have you found an answer yet?

[@elcheetos514]

I have the same problem can someone help me?

[@vincent3051]

I'm sure it might have hit you already, but it's because you have no SSH installed in whatever network IP you scanned and at that no port 22 open.

[@dksider9875]

how do u start the database?

[@01Bazaar]

service postgresql start

[@jennifersoule6311]

Is that Metasploit 2 on Ubuntu?

[@01Bazaar]

you can install Metasploit on Ubuntu.

[@lukedevlin45]

when i used the namp command it said host was down

[@HackerSploit]

Then the host is down

[@lukedevlin45]

lol yea but what does that mean, is it something on my side or the server

[@gopalrajkumar7323]

Use the -Pn command at the end of the ip address. It will work because sometimes the host is up but they falsely tell you that it is down. Like thus: nmap -F 112.45.456.220 -Pn Try it out . I simply made up an IP address here. Please help others by posting your result.

[@nimaone7158]

hhh, you are so funny.. Mr Hacker

[@thuggy67]

Hackers don't buy vpns They use free stuff So how the hell and where do we find free vpns

[@darshanrevgade7819]

Anonsurf is one of the option u can use

[@royal9616]

It was an awesome course until you started saying, "I'm pretty sure you know them". I guess there's no perfect free course out there.

[@akumaoni2837]

Nah, it's not too bad. We just have to stop the video, watch another on these topics, then we can continue. Hacking is an extreme complex and broad topic and thus it's almost impossible to do videos on hacking completely from Zero. Because if you did you would have to start at the fundamental basics of IT, programming, networking (and every single kind of networking) and the inner workings of the PC. P.S. I wish you all the best, on your way through these extremely wide and broad clusters of information and your way to become a badass Hacker/Pentester!

[@charlieg3412]

yeah why does he just assume we know these things

[@typeo1164]

reffering to when he implies that we can guess what -sS means (secure scan) because he was talking about it...

[@leosekour6959]

he has an entire course that teaches you it

[@zeechy]

@@typeo1164 I thought it meant super size when I first saw it years ago 💀

[@klodiklodi007]

192.168.1.111

[@praveenja3073]

Android Hacking needed