Combine Attack Metasploit and Beef with Backtrack

With this article I will try to attackig some target with combination attack Metasploit and Beef, both of application is contain in Backtrack, at this case I want to infected

I use Metasploit to force attack into Target System to get full control of target here I do

Use MS08_067Netapi as Exploit cause my target use WIndows XP and samba service has running and use like this to enterance target's system

Use meterpreter mode I'll upload file html with beef javascript injected inside here is my html

When open with browser this page like here, I copy javascript has opened in Target Browser and copy to source code in normal html look like normal but that has been inject with hook from beef

Here is file I injected to normal HTML

 This file has load my IP as attacker into javascript source so this will call my IP every this script load in HTML

After make page with hook javascript from beef I'll upload that file from attacker side to victim side here I use meterpreter mode upload

And upload all file in directory Web after upload all enterance C: system of target like here

After finish upload all file into C:\ drive target now I try to move file Webload.htm to startup Windows of Target with meterpreter like here

Copy Webload.htm and Webload_files to Startup here is location

This mean file Webload.htm will automatic open when Target Syatem opening

Now open Beef Panel in Attacker standby and restart target system via Metasploit

After reboot target will open Webload.htm with browser, that mean will load my javascript hook file and I'll look in panel mode in Beef

Few second after Webload open in Victim data of target browser will load in Beef Panel, after that I'll try to control via Beef Panel with deface mode

And send message pop-up lihe here

This is proof browser target has explotited by attacker, my ck vector rules is Force enterance Target with Meterpreter Metasploit, upload webpage with hook javascript from Beef and make that file automaticaly open on Startup Windows.