2

I'm new at Kali and Metasploit in general. I've been trying for a few days to discover it, and I'm a bit stuck when trying to exploit a VM running Windows XP and with IE 6.

Here are some screenshot from msf:

Options:

Options

Before I connect with IE 6 from the VM:

Before I connect with IE 6 from the VM

When I connect, this is where browser_autopwn2 blocks:

this is where browser_autopwn2 blocks

And it just hangs there... I'm pretty sure I should be able to exploit a Win XP machine with IE 6. I probably set some things wrong, if someone can help me, Iwould really appreciate it.

By the way, I also tried with Firefox 43.0.1 using the VM, and it doesn't work either, but it blocks somewhere else. Here is another screenshot:

another screenshot

Xander
  • 35,796
  • 27
  • 116
  • 144
scaum
  • 21
  • 1
  • where it blocks when i try connectiong with firefox instead: http://imgur.com/a/DwO7w – scaum Aug 10 '16 at 13:53
  • Thanks for the reply !! I've already tried excluding this exploit, because I had guessed the problem was coming for there. Sadly, when i do so it does disapear from the table listing the exploits that will be used, but the same thing happens exactly :( I'll get on it a bit later tonight, and probably will run the exploits one at a time. I just wanted to try the automatic browser_autopwn – Scaum Aug 10 '16 at 18:34

1 Answers1

1

It doesn't work because you chose the wrong exploit.

Looking at the comments of the KingScada - kxClientDownload.ocx ActiveX Remote Code Execution exploit (here), we can see that it

abuses the kxClientDownload.ocx ActiveX control distributed with WellingTech KingScada.

If the target PC doesn't use WellingTech KingScada, which is a particular software deployed in industrial automation systems, the exploit won't work. This is the reason why autopwn2 blocks when the target uses Internet Explorer.

Even if that software was installed in the Windows XP machine, the exploit wouldn't work, because it is written to target Internet Explorer, rather than Firefox, as we can see from the following line of code:

:ua_name => /MSIE|KXCLIE/i

where ua_name describes the User-Agent string, and MSIE is the acronym for Microsoft Internet Explorer.

As a general rule, before launching exploits, you should always understand if it targets a particular operating system or browser, if it requires some plug-in (like Flash) or if it relies on the vulnerabilities of a particular software, as in this case.

A. Darwin
  • 3,602
  • 2
  • 17
  • 27