PXE Boot Exploit Server | Metasploit Exploit Database (DB)

PXE Boot Exploit Server

This module provides a PXE server, running a DHCP and TFTP server. The default configuration loads a linux kernel and initrd into memory that reads the hard drive; placing a payload to install metsvc, disable the firewall, and add a new user metasploit on any Windows partition seen, and add a uid 0 user with username and password metasploit to any linux partition seen. The windows user will have the password p@SSw0rd!123456 (in case of complexity requirements) and will be added to the administrators group. Note: the displayed IP address of a target is the address this DHCP server handed out, not the "normal" IP address the host uses.

Search Other Modules


Rank

  • Normal

Authors

  • scriptjunkie < >

Development


Similar Modules


Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use auxiliary/server/pxexploit
msf auxiliary(pxexploit) > run


Module Options

DHCPIPEND The last IP to give out
DHCPIPSTART The first IP to give out
NETMASK The netmask of the local subnet
SRVHOST The IP of the DHCP server
TFTPROOT The TFTP root directory to serve files from
VERBOSE Enable detailed status messages
WORKSPACE Specify the workspace for this module