Cybersecurity · Exploitation

Remote Service Exploitation

Service specific exploits like SMB, RDP, web, mail that hand over a shell.

11 snippets

msfconsole1 min read

Pre-auth remote code execution on unpatched Windows RDP.

msfconsole1 min read

Detect and exploit Eternalblue SMBv1 vulnerability that grants unauthenticated SYSTEM access on Windows.

bash1 min read

Nmap scripts to detect CVE-2014-0160 (Heartbleed) and CVE-2021-44228 (Log4Shell)

msfconsole1 min read

Exploit vsftpd 2.3.4's supply-chain backdoor, brute-force generic FTP/SSH credentials, and bypass authentication in libssh 0.6–0.8.

msfconsole1 min read

RCE via Samba 3.5.0 shared-library injection and command injection in Haraka SMTP server < 2.8.9.

bash1 min read

Credential attacks against RDP, BlueKeep check, and using Metasploit post-modules to enable/backdoor RDP on a compromised host.

bash1 min read

Exploit the Bash environment-variable vulnerability against Apache CGI scripts for remote code execution.

msfconsole1 min read

Two paths to a Windows shell over SMB: brute-force then PsExec with valid credentials, or EternalBlue if SMBv1 is enabled and unpatched.

bash1 min read

Intercept NTLM authentication traffic, relay it to a legitimate server, and impersonate the victim gaining access.

bash1 min read

Identify WebDAV on IIS, brute-force or use known creds, upload a malicious .asp webshell, get a reverse shell.

bash1 min read

Enumerate WinRM (ports 5985/5986), brute-force credentials with CrackMapExec, and get a shell via evil-winrm.