Hey, guys, hackish Lloyd, you're back again with another video and in this video, we're going to
be continuing where we left off, where I'm going to be showing you how to use Métis Floyd to run an
exploit on a service.
In this case, we're going to be using a display table and we're going to be exploiting the FTP port
so that we can upload and download files to and from the Web server.
So let's get started.
So in the previous video, I actually I showed you guys how to set up or how to use Metters Floatable
to basically exercise or test your skills in exploiting.
So essentially what we did is we scanned the IP address, the local IP address for Metters Floatable,
and we essentially give it an MRI scan to find out what services were running.
And the ports that we found that were open were obviously going to be all the ports.
And that's because the display table is configured to be that way.
So the main thing that we're going to be doing now is I'm going to show you how to run an exploit on
one of these services, more specifically the FTP service, because a lot of you guys thought that I
didn't know how to use my display, but I just breezed over it because I wanted to do that in this video.
So we're actually going to be using MLO in this video and I'll show you how to use it.
So let's get started.
So we know that the portal that we're targeting is the FTP report, which is both 21.
So we know that it's configured correctly.
Now, the service that it's running or the service version that it's running is GSF, DPD, two point
three point four.
So what we did is we Google this service to find exploit for it.
Again, you can use any other website to search for exploits, any search engine.
Many people like to search on Exploit DBE or exploit database because that's where you'd find most of
the exploits.
So I found the exploit on Rapide seven dot com.
Now Rapide seven is the company that develops my blit and they essentially have an exploit for this
service, which is EBD, which is the FTP service for this specific version, two point three point
for which the exploit is a backdoor command execution, which allows you documents to be executed a
bit like what you would have in a reverse shell.
So what we're going to do is we already have the exploit here, the module here.
So we're when talking about Métis, Beloit, which is what we're going to be using a lot better floatable.
Now, let us just start it up.
So to start up metastable point, you just open up your terminal again.
I'm running paratus.
It really doesn't matter what testing or is here using.
So MSF console.
All right.
MSF console and just give it a few seconds to start up.
It shouldn't take too much time and we should be good to go so.
Well that starting up.
Let me explain what matters.
It is all right.
Métis Floyd is a large database of exploits.
Right.
And it essentially allows you to use these exploits to your advantage and to exploit systems.
Now, whatever you systems you try and exploit, that's up to you with.
The good thing about me display is it allows you to create your own your own exploits, which is awesome.
So if you're an advanced user and you actually you are working with websites or services most of the
time and you find vulnerabilities, you can create an exploit for the purpose of security and patching.
So that's up to you.
So as you can see here, it's going to take a while.
It's going to start the Šemeta split a framework console and we should begin there we are.
So as you can see, it is pretty, pretty simple to navigate.
You have your information.
So it's as it's telling you to check out my pro, which is a very good option if you're going to use
this tool a lot.
In terms of the other information, we have 1662 exploits, which is pretty awesome.
And yeah, let's get started now.
Yeah, pretty much.
There are a bunch of commands that you have to be familiar with with Métis, and one of them is obviously
the help command.
So if we type in help it's going to give us information or help really.
So this is essentially the user's manual?
No, I'm just going to tell you the most important commands that will really, really help you right
now.
So the most important commands right now are the obviously the massive console command which will start
to deploy for you.
You then have the use command, right.
So that's as simple as that which allows you to use an exploit.
Right.
You then have the show command, you show command, allows you to show the exploits or the options available
for the exploit.
Right.
You then have your set command, you set command, allows you to configure on an exploit or an option.
And you have finally your exploit or.
Which essentially makes you run the exploit that you're currently that you currently want to run.
So it's really very simple.
Now, what we need to do is we need the we need the name of the of the exploit.
In this case, the module name is right here and it'll just give it to you in the form that you need
it.
So just copy this, because this is the name of the module or the exploit for this matter.
And it matters.
What you want to do is just type in use because that's the exploit that we want to use and just based
in the name.
All right.
Now, let me just minimize this.
That could be a distraction.
All right.
So once you have hit that well, just hit enter.
And as you can see, it's going to automatically detect that, you know, that this exploit is correct
and it is a valid exploit now.
Or what you can do is you can show the options.
Right.
So sure.
Options.
And essentially this will show you the options that you can change and configure according to what or
how you want the exploit to run.
Now, in the previous video, I touched upon this very lightly, and you guys thought that I changed
the things incorrectly.
And the reason being is I did it really, really quickly.
And my job was not to actually show you the exploit, but let's do it correctly.
Now, know, what we need to do is we need to understand a few things.
First, the our host is your is the target address.
All right.
And the airport, which is already configured to 21, is correct because we know the port is configured
correctly.
If it was configured to something like twenty 22 by mistake, that could also be something that you
need to change now to change the AH host to what we want, which is the IP of the Métis deployable machine,
the machine that we want to exploit.
In this case we need to essentially say set our host right.
So set our host and we use the IP.
So 192 168 point two point one twenty nine.
All right.
And if we said that, it's going to say our host is equal to and now we can essentially just check,
we can say, sure.
Options to make sure that everything is configured correctly before we run out exploit.
And as you can see, the host is that to the IP address?
And our port is configured correctly because, as I said, the port that we are trying to target here
is is going to be port anyone.
And the IP address is right there, one ninety two point one sixty eight point two point one twenty
nine.
And again, you can ping yours to test it if it's still running.
And you know, what we can do now is all we have to do is say exploit.
Right.
As simple as that.
And we hit enter.
And let's see what we get right.
And there we are, so it's going to start Dibella capture and it's going to say manchild session, one
open.
So it's open a special session, which means this system is Linux, obviously, and we can run our Linux
cleanse.
So pretty, pretty awesome.
And as you can see, we can send commands back and forth.
So let's try a few commands.
Let's see if we can run a task manager.
Oops, we do not.
I don't think that installed on the display machine.
Let's see if we can run the clear command.
There we are.
Awesome.
So now we have a clear batch or shell.
Sorry about that.
And we can try something like you name or oops you name are and it's going to tell us the server version.
You have your name A and there we are the next anticipatable blah blah blah.
We then we can also list all the files available.
And while there's a lot of files in there and I guess you guys can see the power of this, if you have
a server that has this vulnerability, depending on the service that it's running, you get the idea.
It's very, very powerful and you can run a plethora of commands, you know, so it's it's pretty,
pretty awesome.
That's going to be it.
For this video is a little bit of a short video, but this is a very important introduction to.
It's what's not important is the fact that we're using a simple exploit.
It's very important that I'm showing you guys how to use it and how to get comfortable with it.
So I hope you guys found value in that video.
If you did, please, if I like on below.
If you have any questions or suggestions, let me know in the comments section on below or you can hit
me up on my social networks.
The links will also be in the description.
If you have any personal questions, you know, hit me up on Kik for the latest hacking news and resources,
check out my website link between the description and have a fantastic day, Beest.