You're reading from Mastering Metasploit Exploit systems, cover your tracks, and bypass security controls with the Metasploit 5.0 framework

Product type Paperback

Published in Jun 2020

Publisher Packt

ISBN-13 9781838980078

Length 502 pages

Edition 4th Edition

Languages

Tools

Metasploit

Concepts

Penetration Testing

Author (1):

Nipun Jaswal

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1 – Preparation and Development

2. Chapter 1: Approaching a Penetration Test Using Metasploit FREE CHAPTER

3. Chapter 2: Reinventing Metasploit

4. Chapter 3: The Exploit Formulation Process

5. Chapter 4: Porting Exploits

6. Section 2 – The Attack Phase

7. Chapter 5: Testing Services with Metasploit

8. Chapter 6: Virtual Test Grounds and Staging

9. Chapter 7: Client-Side Exploitation

10. Section 3 – Post-Exploitation and Evasion

11. Chapter 8: Metasploit Extended

12. Chapter 9: Evasion with Metasploit

13. Chapter 10: Metasploit for Secret Agents

14. Chapter 11: Visualizing Metasploit

15. Chapter 12: Tips and Tricks

16. Other Books You May Enjoy

Leave a review - let other readers know what you think

Maintaining anonymity in Meterpreter sessions using proxy and HOP payloads

As a law enforcement agent, it is advisable that you maintain anonymity throughout your command and control sessions. However, most law enforcement agencies use VPS servers for their command and control software, which is good since they introduce proxy tunnels within their endpoints. It is also another reason that law enforcement agents may not use Metasploit since it is easy to add proxies between you and your targets.

Let's see how we can circumvent such situations and make Metasploit not only usable but a favorable choice for law enforcement. Consider the following scenario:

Figure 10.1 – Meterpreter sessions using a proxy

We can see that we have three IPs in the plot. Our target is on 192.168.1.6, and our Metasploit instance is running on 192.168.1.8 on port 8443. We can leverage the power of Metasploit at this moment, generating a stageless reverse HTTPS payload...