Metasploit

Daniel demonstrates how to gain access to a Windows and Linux server using metasploit. This is one of his favourite tools.
Big thanks to ITPro.TV for sponsoring this video.
In future videos, he will show us additional tools.
======
Menu:
======
Menu:
0:00 ▶️ We like win
0:25 ▶️ I am administrator
0:40 ▶️ Linux access
1:20 ▶️ Password hashes
1:35 ▶️ Introduction
1:50 ▶️ Metasploit framework overview
2:28 ▶️ Why is this one of your favourite tools?
4:05 ▶️ Windows and Linux
4:43 ▶️ This is a local lab
5:40 ▶️ Windows Metasploit demo
6:35 ▶️ Eternal Blue overview
7:24 ▶️ Start eternalblue
8:35 ▶️ Check attack viability
9:35 ▶️ Specify target (RHOSTS)
10:32 ▶️ Exploit (check hosts)
10:50 ▶️ Gain access
11:30 ▶️ Reverse shell
13:01 ▶️ Set rhosts
13:28 ▶️ Set payload
14:08 ▶️ Set lhost
14:30 ▶️ Set lport
14:53 ▶️ Run exploit
15:58 ▶️ Win
16:10 ▶️ Shell access gained
17:20 ▶️ Full Admin access
18:14 ▶️ Summary of what was done
18:49 ▶️ This is much easier - use automation
20:35 ▶️ Why did this work?
21:15 ▶️ What about Linux?
21:48 ▶️ Linux demo example
22:29 ▶️ Linux shell bug
23:50 ▶️ Use option
24:39 ▶️ Set header
25:06 ▶️ Set rhosts
25:35 ▶️ Set targeturi
26:17 ▶️ Set lhost
26:33 ▶️ Exploit
26:55 ▶️ shell created
27:07 ▶️ Make pretty
28:01 ▶️ Use Linux commands
28:27 ▶️ Which user account is used
28:51 ▶️ Got a remote shell
29:00 ▶️ Escalate priv
30:28 ▶️ Get admin and root accounts
30:49 ▶️ Summary of what we have done
33:03 ▶️ What other tools are you going to show us
========================
Download software and VMs:
========================
VM used: www.vulnhub.com/entry/bwapp-b...
Kali Linux: www.kali.org/downloads/
================
Links:
================
ITProTV Free Training: davidbombal.wiki/freeitprotv
My ITProTV affiliate link:
====================
Connect with Daniel:
====================
LinkedIn: / daniellowrie
Blog: blog.itpro.tv/author/daniello...
================
Connect with me:
================
Discord: / discord
Twitter: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
KZbin: / davidbombal
metasploit
metasploit framewaork
eternalblue
eternal blue
ethernal champion
smb
windows
linux
linux apache
apache
kali
kali linux
cybersecurity
cybersecurity careers
ceh
oscp
itprotv
ejpt
cissp
ceh v10
elearn security
oscp certification
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#metaspolit #eternalblue #cybersecurity

[@davidbombal]

Daniel demonstrates how to gain access to a Windows and Linux server using metasploit. This is one of his favourite tools. Big thanks to ITProTV for sponsoring this video. In future videos, he will show us additional tools. ====== Menu: ====== Menu: 0:00 ▶ We like win 0:25 ▶ I am administrator 0:40 ▶ Linux access 1:20 ▶ Password hashes 1:35 ▶ Introduction 1:50 ▶ Metasploit framework overview 2:28 ▶ Why is this one of your favourite tools? 4:05 ▶ Windows and Linux 4:43 ▶ This is a local lab 5:40 ▶ Windows Metasploit demo 6:35 ▶ Eternal Blue overview 7:24 ▶ Start eternalblue 8:35 ▶ Check attack viability 9:35 ▶ Specify target (RHOSTS) 10:32 ▶ Exploit (check hosts) 10:50 ▶ Gain access 11:30 ▶ Reverse shell 13:01 ▶ Set rhosts 13:28 ▶ Set payload 14:08 ▶ Set lhost 14:30 ▶ Set lport 14:53 ▶ Run exploit 15:58 ▶ Win 16:10 ▶ Shell access gained 17:20 ▶ Full Admin access 18:14 ▶ Summary of what was done 18:49 ▶ This is much easier - use automation 20:35 ▶ Why did this work? 21:15 ▶ What about Linux? 21:48 ▶ Linux demo example 22:29 ▶ Linux shell bug 23:50 ▶ Use option 24:39 ▶ Set header 25:06 ▶ Set rhosts 25:35 ▶ Set targeturi 26:17 ▶ Set lhost 26:33 ▶ Exploit 26:55 ▶ shell created 27:07 ▶ Make pretty 28:01 ▶ Use Linux commands 28:27 ▶ Which user account is used 28:51 ▶ Got a remote shell 29:00 ▶ Escalate priv 30:28 ▶ Get admin and root accounts 30:49 ▶ Summary of what we have done 33:03 ▶ What other tools are you going to show us ======================== Download software and VMs: ======================== VM used: www.vulnhub.com/entry/bwapp-bee-box-v16,53/ Kali Linux: www.kali.org/downloads/ ================ Links: ================ ITProTV Free Training: davidbombal.wiki/freeitprotv My ITProTV affiliate link: davidbombal.wiki/itprotv ==================== Connect with Daniel: ==================== LinkedIn: www.linkedin.com/in/daniellowrie Blog: blog.itpro.tv/author/daniellowrie/ ================ Connect with me: ================ Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: kzbin.info Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[@tsaltslinger3268]

The FCC has a cyber security plan free download. This gives students (or anyone) red/blue a framework for safe cyber protocol in a company. This can be very helpful building a learning structure and building a network.

[@tsaltslinger3268]

NIST also has Guide for Security-Focused Configuration Management of Information Systems

[@ashishanilsikaria]

I like how you are covering every topic in individual videos so we can get a better understanding of what happens in reality.Thanks a lot.

[@davidbombal]

Thank you Ashish! Appreciate the feedback. Agreed - I think this series way of doing things is better as you can really get into the details of how something works.

[@ricojayyt4975]

me too

[@theSurfinBirdie]

Thank you David and Daniel for this Video. As always super exciting to watch.

[@Alain9-1]

your channel mr Bombal is going step by step to be one of the best of youtube hope it reach 1m subscribers soon because you deserve it

[@TheFreezingTuberJosh]

This series is very beneficial for self-taught learners like me. Keep em coming! Love your videos

[@midas087]

That is just an amazing content from start to finish. Gave you and idea on how to even start your own exploit once you understand the fundamentals which David platform is giving and creating for us. Thank you so much David, Cheers David

[@davidbombal]

Thank you and you're welcome! Daniel is amazing and that's why I keep asking him to come back again 😀

[@H_I_R_B_O]

I really like how these videos are detailed and beginner friendly .I think you should do more of these hacking tools videos.

[@savoyblue777]

David you and your guest and mean all of them are great Thank you and keep it up

[@jeffyramalhocardioworkouts]

Amazing introduction for beginners like me, thank you 😊

[@marcosalbano]

love the way that you explain, it makes so easy to follow. cheers from argentina!

[@ColoBeauPhotog]

Now I find this video. Spent 4.5 hrs last on my Kali VM/metasploit FW against Metasploitable 2 VM just to learn what was shown here in 30 minutes. hahahaha. Love this channel. Break it to learn it.

[@manassengudia1854]

David let me tell you something : YOU ARE AMAZING 🤩 I learn a lot from you and from this channel .. well done

[@funkymonk2254]

Thanks again David and Daniel.

[@gregg718]

He explained this well. Very detailed

[@aaronarnold6444]

Love these videos! Thanks for the great content

[@DrGamer666]

Love these videos. Metasploit is crazy powerful....one of my favorite tools

[@davidbombal]

Thank you Aftab. Daniel is amazing and that's why I keep asking him to come back again 😀

[@francoisleveque145]

I was waiting so badly for this video !!

[@davidbombal]

Hope you enjoyed the video François 😀

[@sikhuuu]

Thank you David, your channel is helping me to learn alot

[@GauravKumar-ed3wu]

As always a another video for helping beginners. Thank You :) David

[@davidbombal]

You're welcome Gaurav! Keep on learning 😀

[@bobknudsen1059]

Very well done. Easy to follow

[@anshumishra9368]

Thank youuuuuuuu sooooooo much David everytime I was asking you about bring the metasploit session and here we go , thanks David

[@davidbombal]

You're welcome Anshu! I don't ignore requests... just takes me some time to cover all of them, but I am doing my best 😀

[@MrRollo1995]

Great and informative. I'm really looking forward to the Burp Suite video.

[@MrRobot222]

Looking forward to the burp suite episode. Great videos, thanks.

[@davidbombal]

Thank you for watching!

[@mikeattyslaney]

Fair Play David as always great content. Big fan of your channel, keep up the good work mate

[@davidbombal]

Thank you Michael

[@SanjayKumar-yl3ow]

Thanks david your videos are very helpful for me ❤️❤️

[@8080VB]

The way he build a shell out of python was the most interesting part of this series.💫 Soo cool !

[@blankdash_8087]

All you have to do is type "spawn a tty" in google, you will find a number of ways to spawn a tty.

[@8080VB]

@@blankdash_8087 hhhk

[@joelbissonnette2413]

really nice video! Thank you

[@shanevideos6850]

Wow. Very detailed.. when i see other videos its too complicated but in video its very detailed and understandable. I like to change my career and i have a plan to study as cybersecurity. They say for a beginner they offered me penetration testing.

[@rinaso8103]

hey would you mind to share each other experience , i am also studying cybersecurity currently :)

[@xaanx]

Thanks for the video Sir David!

[@davidbombal]

You're welcome Marc 😀

[@surfsafely641]

Another amazing stuff i see

[@guilherme5094]

Awesome content!

[@johnsonvaughn2366]

Finally, that's I have been waiting for. Hell yes Metaspolit.

[@8080VB]

Big thnx to ITPROTV !

[@abdulrahmanmsusa9225]

Always Amazing content Mr. David. So helpful and Highly resourceful 💥💥💯

[@davidbombal]

Thank you Adbulrahman!

[@shreeshaaithal-]

This is epic I don't have any words😁😁

[@davidbombal]

Hope you enjoyed the video Shreesha 😀

[@Mr-en9lh]

U are really working hard on us

[@davidbombal]

Thank you. Trying my best 😀

[@erickpascualberrocal3983]

TNice tutorials is much more simple than I thought with you explaining it. Currently half way through and I feel like I know everytNice tutorialng already lmao

[@saidkabyle1668]

When you first meet Daniel you’ll think he’s your neighborhood pharmacist till he owns your machine lol that’s cool man

[@Ihab.A]

Found it! Thanks!

[@Firoz900]

Thank you Daniel.

[@daniellowrie]

You're welcome! Glad you liked the demo 👍

[@rajatbasu5425]

LOVE your videos ❤️ big love from India 🇮🇳

[@ramadhanfajar3236]

Kami selalu kagum dan tertarik dengan konten Anda Mr. David Bombal Salam hormat dari INDONESIA

[@saranshsarafmr23r06]

A big thanks from india 🍻 Best metasploit video I've ever seen

[@davidbombal]

Welcome India! Thank you Saransh. Daniel is amazing and that's why I keep asking him to come back again 😀

[@alaahaider]

Big thank you to you David, really appreciate your awesome content

[@DEDEPLDEDE]

Love it Mr Bombal

[@antarsantana8976]

Congratulations great. good continuation

[@anubhavsharma5986]

Very useful video

[@quangquyennguyen9390]

English is not my native but your subtitle is really good for someone like me. Love you david for become youtuber

[@davidbombal]

Thank you Quang! And you're welcome!

[@abhinavgamercr1419]

Thanks sir for lovely video I needed it ! Thanks sir

[@davidbombal]

Thank you Abhinav

[@t-seriess431]

Thanks for sharing !!😊

[@davidbombal]

You're welcome!

[@tribikramsen5119]

Notification in my phone and i'm here . Thank you for this video.. Keep supporting us.

[@davidbombal]

Thank you so much for watching my video Tribikram! I appreciate your support 😀

[@tribikramsen5119]

❤❤ lots of love sir ❤❤

[@s.aravindh6227]

Nice video bro 👍👍

[@tomberghs7004]

Thanks David it's just what i needed cause,i need to make malware to demo on school thanks David

[@davidbombal]

Thank you Tom.

[@alejandrorodriguez3771]

Al fin david, metasploit, saludos desde cuba-españa

[@davidbombal]

Welcome Alejandro! Sometimes it takes me time to make videos about all the topics requested, but I'm working through my list 😀

[@dewapoetra8612]

Excellent

[@nipunjanaranga8008]

Amazing 👊❤️

[@davidbombal]

Thank you Nipun 😀

[@crazyman7659]

Thanks u so much sir love ur content love from india 🇮🇳

[@davidbombal]

Welcome India! Thank you Likith!

[@stark6314]

Metasplot ohh my fav tool

[@davidbombal]

Hope you enjoyed the video Ajay

[@hosanaalex4123]

what a great vid david

[@davidbombal]

Thank you! Daniel is a great, so he makes my job easy :)

[@gamerfox7047]

thanks :)

[@Mardeet]

Is there a good vulnerable VM that works on M1 Macs? Like Metasploitable 3 ? Thanks

[@abdullahshoukat2075]

Love u David THxxxxx for HELPPPPP U are the BESTT!!!!!!!!!!!!!!!!!!!

[@Firoz900]

Thank you guru.

[@davidbombal]

You're welcome!

[@Omar-gw8lt]

Love metasploit

[@itseric5117]

This video makes me want to jump to my computer and play around with it straight away

[@Arctect]

cool!!!

[@xp0965]

finally metasploit thanks

[@robertkamau3447]

Daniel needs to update his Kali, he's still running msf5 i am running msf6. I love your content David.

[@davidbombal]

Thank you Robert.

[@robertkamau3447]

@@davidbombal Kindly am having a problem iimporting the bee-box file.

[@bobwong8268]

👍👍👍👍👍great tool-sets to pentest! Would you guys be showing Tools or Resources that we can use to harden the security. Perhaps tools like: hay i ve found & successfully compromised the target - what would you like me to do next? 1) AutoFix vulnerability [xx% recommended] 2) List tools & resources tt is useful to fix/harden system

[@aravbudhiraja]

Hoping that one day offsec allows us to use this great tool for the oscp :) Also when Daniel exploits the machines, u can elevate the session from a normal shell to a meterpreter session U gotta background the session by typing "background" and type y and then type sessions -u Session no. of the shell, where -u means upgrade. Meterpeter sessions r very useful for post exploitation

[@davidbombal]

Thank you for sharing Arav

[@aravbudhiraja]

@@davidbombal no problem, also cud you and daniel make 1-2 vids on talking about ur cert experiences such as oscp,ecppt,ccna,sec+,ceh..etc

[@S2eedGH]

Thanks for a great video .. video idea : what if we don’t have a metasploit, how the exploit can be done? (manually). To know more about what are doing behind the scenes Thx,

[@umarjamil8512]

Great Video. Happy to see more hacking content . I have learned alot. But one thing is missing where is MACOS exploits.

[@sudharshanv9443]

Everything is great what you do. Please do some videos on CLOUD(AWS)....

[@davidbombal]

Thank you Sudharshan! That's on my list 😀

[@SirTorcharite]

"nah dawg" is one of my favorite phrases to hear from fellow nerds. Don't ask me why but it's something about the strange looks people give me when I say it.

[@ekambaramsainikhil9301]

amazing ❤️❤️❤️❤️❤️❤️❤️❤️

[@davidbombal]

Thank you! Glad you enjoyed the video 😀

[@hatemaliyan3933]

Great video like always, may i know if there is any video in your channel how to get the Rhosts from the target and know more information about this kind of protocols. Thank you David🙏

[@davidbombal]

Thank you Hatim. This is the only metasploit video I have on my channel at the moment.

[@kintag4459]

Thank you M.r

[@davidbombal]

You're welcome!

[@justwastingmytime101]

nice

[@kartik3406]

David sir please explain me the difference between metasploitable and metasploit also msfvenom?

[@fakhrioficial8061]

ur a fcking legend dude honestly

[@BiswajitMondal-zk3yu]

Hi David, thanks for this video. There is an error as below: Errno::ECONNRESET:Connection reset by peer , any idea what is the issues?? Please advise !!!

[@hackingwithkencypher]

I want more daniel and david together On hydra tool , medusa and also social engineeeing toolkit

[@viewerr69]

Sir David OP

[@tomberghs7004]

Nice David glad to be one of the first vieuwers

[@davidbombal]

Thank you Tom. I appreciate your support!

[@newkali5982]

Great videos as always but the issue I have is trying to get access to a Laptop on my network it comes up with the error This module only supports x64 (64-bit) targets. Anyway round this ?

[@Danny2346]

Thank you so much for this video. I love your channel David, lots of information for beginners like me! I have a question though...why when talking about hacking they always refer to hack Linux and windows but not IOS..? is it because Mac can't be hacked? please bare with me I'm new to the field. Thanks

[@dananjayamudalige8591]

❤️‍🔥❤️‍🔥❤️From Sri Lanka

[@davidbombal]

Welcome Sri Lanka!

[@DropShotPat]

is this an appropriate tool for someone trying to break into Bug Bounties? I'm taking cybersecurity courses online as well as HTB entry level CTF's and labs but it is slow going and some instances of their VM's are borked on occasion so following their walkthroughs becomes pointless at times. Thank you in advance.

[@dewapoetra8612]

sungu nice👍😁

[@OutLying-kw3gl]

Verynicesir

[@johnabrha7496]

this things should be done when u are in same network

[@florisbeekman8907]

are the first two addreses from the attacker or from the victim?

[@kritagyagupta8619]

Hey David, loving Your videos! I noticed your intro music has changed, can you provide where you too the music from?

[@davidbombal]

Epidemic sound. Watch this video to see how to check which song it is: kzbin.info/www/bejne/rHLWioR9qcd1n9U

[@kritagyagupta8619]

You actually replied, within 30 minutes, I love you man

[@davidbombal]

@@kritagyagupta8619 Thank you

[@prateekgupta9379]

Good

[@davidbombal]

Thank you Prateek

[@richievellalar3214]

Good day to you mate , When i installing the main activity.apk on android phone , there is an error ( you are using older version of approid app ) how i can perform this.

[@justforfun7855]

Just noticed that Daniel Lowry is in a Prison set up !!!

[@daniellowrie]

LOL We call that 'Freddy's Boiler Room Studio' at ITProTV 🤣

[@jorgesteven9501]

Eager to see hash cracker and burbsuit hope also to add login in to window GUI using those creaditial

[@pkgamingbenchamrksandgamep3513]

david can you plz help i have router of tp link wn7200nd it doesnt work on kali linux why in 2010 model why?

[@leto1449]

thank david I have a question some people say using Metasploit is considered as script kiddy is that true ?

[@shreeshaaithal-]

Please make a video on social engineering please Love you from india🇮🇳🇮🇳🇮🇳

[@davidbombal]

Welcome India! Great suggestion Shreesha!

[@ganesha.s.7482]

Hi Sir, Unable to locate package metasploit termux setup and change also done but while try to this pkg getting this error, how to proceed further..